☣ KitPloit - Hacker Tools

unleashed-firmware unlshd-095 — Custom firmware for Flipper Zero enabling Sub-GHz radio, NFC/RFID emulation, infrared, and BadUSB attack features for hardware security testing. ktp.sh/jGnTLTxHx9

craft-anything — Updated! — Pure-Rust reverse-engineering engine with 314 CLI/MCP inspection tools (disassembly, decompilation, strings, call graphs) that studies any app, site or game and has an AI agent rebuild it. ktp.sh/1ftC7HfZdq

ARTEX v0.6.0 — LLM multi-agent autonomous penetration testing platform with planner/worker agents, asset and exploration graphs, MITM traffic recording, and vulnerability retesting. ktp.sh/X2rJqkKiBA

shannon v3.5.1 — Shannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production. ktp.sh/6SMLkrK48g

FuckCaptcha — Open field guide to 39 CAPTCHA types: identification signals, free and open-source bypass methods, and paid alternatives. Includes a searchable web version. ktp.sh/qY13UUdIj7

Submit here: kitploit.com/en/submit

antifox — AI multi-agent autonomous penetration testing platform that runs recon, attack-surface discovery, exploitation validation and evidence-backed report delivery. ktp.sh/V1Kc4bD70Z

strix v1.7.1 — Open-source AI penetration testing tool to find and fix your app’s vulnerabilities. ktp.sh/rlgbacxgip

AutoPentester — This repository contains a tool that can be used for automated pentesting tasks. ktp.sh/kXaWwit5ya

LDAP-Monitoring-Watchdog — LDAP Watchdog: A real-time linux-compatible LDAP monitoring tool for detecting directory changes, providing visibility into additions, modifications, and deletions for administrators and security researchers. ktp.sh/zQMADBvFze

paranoia — Open reverse engineering — PE/ELF/Mach-O, x86/x64/AArch64, graphs, pseudocode. Rust engine, no network. Desktop · CLI · browser. ktp.sh/9zRv1wFoGG

bad_query — Proof-of-concept iOS 26.0–27.0b4 sandbox escape granting access to system and app container paths, including App Group and PluginKitPlugin directories. ktp.sh/fcycDYFs53

Erosion — iOS customization toolbox using the worse_query sandbox escape. Supports iOS 26.0 - 26.7.2, iOS 27.0 - 27.2.1, & 27.3b1. ktp.sh/4JfGSeJ6yj

estorides — Aggregates 99+ free OSINT sources in parallel, resolves entities into a knowledge graph, and exports STIX 2.1, MISP, or GraphML with LLM-assisted analysis. ktp.sh/JxIkFtGl5z

esp-idf-injection-ng — Raw 802.11 frame injection on ESP-IDF v5+/v6+ via a one-command objcopy --weaken-symbol patch. Enables Authentication (SAE Commit), Deauth, Reassoc, Disassoc, and Control frames (RTS/CTS/ACK) through esp_wifi_80211_tx() ktp.sh/1ZWxcdVuMd

SSH-Snake — Fileless, self-propagating Bash script that recursively discovers SSH private keys and reachable hosts, then traverses the network via SSH to map compromise paths. ktp.sh/mUFkf2AFoL

hackingBuddyGPT — Helping Ethical Hackers use LLMs in 50 Lines of Code or less.. ktp.sh/omufMmNqIG

BugTraceAI — Open-source, self-hosted web pentesting suite with agentic scanning, analyst tools, API testing, model checkpoints and MCP integrations. ktp.sh/GQiglROX0L

VulnBot — LLM-driven multi-agent framework that autonomously replicates human penetration testing workflows, orchestrating Kali Linux tooling and RAG knowledge retrieval for security assessments. ktp.sh/g7qa8T8BwA

abusebox — Know your mail server is blacklisted before your users do. Self-hosted monitoring for your IPs and domains: DNS blacklists, SSL and domain expiry, SPF/DKIM/DMARC and uptime, with alerts. ktp.sh/WU3TwnDwKu