Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

scan — 0-day malware detection for binaries, source & scripts (that doesn't suck) ktp.sh/e5e9kYdMnl
1
21
1,607
ReflectivePluginLoader — A minimal PE mapper that loads DLLs straight from memory and calls into a clean plugin interface, no LoadLibrary needed. ktp.sh/HDecopfOQQ
7
1,786
R2Socks — SOCKS5 proxy tunneled through Cloudflare R2 object storage, with Python and dependency-free C++ agents relaying TCP traffic via encrypted R2 objects for covert access. ktp.sh/yVwaNBS0hI
12
2,339
EmbedXPL-Forge — Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs, IoT/embedded edge. ktp.sh/en1ESiIUUs
1
13
2,666
binary-cartography — Technical webinars on reverse engineering, malware analysis, and software protection. ktp.sh/US4PgR9yub
3
2,924
FUCK-CDN — 一键绕过CDN获取真实IP ktp.sh/6IENDxlUzU
1
15
147
13,428
cdn-ip-scanner — Web-based scanner that discovers fast, low-latency CDN IP addresses from Cloudflare, Fastly and other providers using multi-threaded 5-attempt verification and V2Ray config testing. ktp.sh/bEVMj0o5QO
2
1
17
3,408
findcdn — findCDN is a tool created to help accurately identify what CDN a domain is using. ktp.sh/KU9j0GBEoY
26
3,532
WordList — Custom wordlist, updated regularly ktp.sh/c018HX7ivE
1
2
23
3,576
unwaf — Unwaf is a Go tool designed to help identify WAF bypasses using passive techniques... ktp.sh/AkIQ5TeSgG
10
61
4,016
waf-detector — 🛡️ High-performance WAF & CDN detection tool. Identify protection layers (Cloudflare, Akamai, AWS, Fastly, and more), run effectiveness and enforcement tests with evasion payloads, and generate posture reports. Built in Rust 🦀. ktp.sh/Ai0WooTZwy
10
69
3,958
midonescanner-android — Scanner CDN Detection, Real Bandwidth Test, Throttle Detection ktp.sh/Z8DteVHFXA
14
3,482
flipper-mcp — AI-powered MCP server for Flipper Zero. Control SubGHz, NFC, RFID, IR, BLE, GPIO, and more over WiFi using Claude or any MCP client. ktp.sh/3Nw7hASVdX
8
62
3,857
Hexestra — Hexestra is an AI-native penetration testing IDE where human operators and the AI Agent work on the same operational surface—sharing the browser, terminal, traffic, shells, asset graph, task plan, evidence, and controls. ktp.sh/lB5A3SnnPS
1
22
162
11,970
SmuggleMyPayload — SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smuggling techniques, payload encoding options, JavaScript variations, and pre-built HTML templates. ktp.sh/OTNKXR69O3
3
62
4,052
disrobe — Static software recovery in Rust: decompile, deobfuscate, and unpack native code, bytecode, scripts, firmware, and application packages; 15+ ecosystems, 170+ families... ktp.sh/JguQJhR6aA
4
36
3,853
cnspec — An open source, cloud-native security to protect everything from build to runtime ktp.sh/BkW3KM1tdb
1
14
3,034
azure-pentesting-suite — Go toolkit for authorized Azure security assessments: enumerates subscriptions and resources, audits misconfigurations, and attacks public Blob storage anonymously. ktp.sh/BTehCGOEaf
2
31
3,744
ceasta — reverse engineering tool with a built-in MCP server: an AI can debug your binary, not just read it — breakpoints, stepping, memory, calling functions. disassembler + decompiler + x64dbg-style debugger in one. windows gui, linux cli. ktp.sh/4jecp6MXDU
1
26
246
12,217
rdx — A native APK and DEX decompiler written in Rust ktp.sh/x65BOv4Ows
2
42
4,121