Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
- Tweets 12,044
- Following 2,839
- Followers 117,965
- Likes 134,285
ddc — DEX → Java decompiler in Rust — fast, progressive analysis, bilingual CLI ktp.sh/vdMF96Bhs5
1
1
787
dj — Extracts dynamically loaded JavaScript files by statically analyzing website HTML and JS, detecting webpack chunks, import() lazy loading, and source maps for recon. ktp.sh/jXII84Opw2
2
10
1,497
security-harness — A multi-agent application-security review harness for Claude Code (and, later, other AI agents)... ktp.sh/ntT0zvNlOT
1
5
19
2,980
0 — A cybersecurity harness for full-stack LLM-driven penetration testing. Find and fix vulnerabilities autonomously, 24/7. [RESEARCH PREVIEW] ktp.sh/8BqwOvkQ7p
2
18
3,003
ptxNinja — Binary Ninja plugin for reverse engineering PTX -- the virtual instruction set architecture of CUDA-based GPUs. ktp.sh/sF2IrmekKl
3
11
2,762
bugbounty-lab101 — A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report templates, CVE/CWE watchlists, and a local VM practice lab... ktp.sh/XtaCNOnRlu
1
6
29
3,364
obfuscation_analysis — Binary Ninja plugin to analyze and simplify obfuscated code ktp.sh/MNkjyA3J89
2
14
3,305
phantom-grid — An eBPF-powered Active Defense system that turns your Linux server into a deceptive honeypot. Features transparent traffic redirection, OS fingerprint spoofing, kernel-level DLP, and Zero Trust SSH access (SPA). ktp.sh/20PMqKTW24
4
36
3,552
bifrost — High-performance HTTP/HTTPS/SOCKS5 MITM proxy in Rust with TLS interception, rule-based request rewriting, traffic capture, breakpoints, script sandbox and request replay via Web UI. ktp.sh/ovyHQFGp5R
1
11
103
7,246
PAGASUS-PRO — Python ADB-based Android device management and security audit toolkit with an interactive menu for root detection, permission dumps, debuggable app scanning, log and contact extraction. ktp.sh/KjiI4p7X7A
4
29
3,696
CyberCodex — Autonomous 22-Source Zero-Cost OSINT, Data Breach/Leak, Infostealer & Threat Intelligence CLI Engine + Unbiased Cyber Warfare Encyclopedia (11 Languages, Zero Dependencies) ktp.sh/LDNRKz1m7O
9
77
4,391
engagement-mgr — Engagement Manager is a web application for tracking offensive security engagements. It features a modern UI, built with Next.js, Prisma, and PostgreSQL. ktp.sh/XbRCDrpOSu
4
25
3,612
trawl — Self-hosted scraping engine — bypasses any JS challenge & captcha: Cloudflare, Turnstile, reCAPTCHA, hCaptcha, GeeTest. FlareSolverr & Byparr alternative and drop-in replacement for your *arr stack. ktp.sh/SlgFFFmS0I
2
10
146
8,237
reburp — A Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI ktp.sh/LM7p8EbFEW
9
73
4,698
sdproxy — DNS Proxy that is simple and fast with not so simple features. Focused on routed DNS forwarding, filtering and parental control. ktp.sh/gTiPbJk36W
4
31
3,731
scan — 0-day malware detection for binaries, source & scripts (that doesn't suck) ktp.sh/e5e9kYdMnl
3
43
3,777
ReflectivePluginLoader — A minimal PE mapper that loads DLLs straight from memory and calls into a clean plugin interface, no LoadLibrary needed. ktp.sh/HDecopfOQQ
2
16
3,715
R2Socks — SOCKS5 proxy tunneled through Cloudflare R2 object storage, with Python and dependency-free C++ agents relaying TCP traffic via encrypted R2 objects for covert access. ktp.sh/yVwaNBS0hI
6
45
4,376
EmbedXPL-Forge — Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs, IoT/embedded edge. ktp.sh/en1ESiIUUs
3
18
3,703
binary-cartography — Technical webinars on reverse engineering, malware analysis, and software protection. ktp.sh/US4PgR9yub
9
3,570
cdn-ip-scanner — Web-based scanner that discovers fast, low-latency CDN IP addresses from Cloudflare, Fastly and other providers using multi-threaded 5-attempt verification and V2Ray config testing. ktp.sh/bEVMj0o5QO
2
1
20
3,808
findcdn — findCDN is a tool created to help accurately identify what CDN a domain is using. ktp.sh/KU9j0GBEoY
28
3,839
unwaf — Unwaf is a Go tool designed to help identify WAF bypasses using passive techniques... ktp.sh/AkIQ5TeSgG
10
62
4,269
waf-detector — 🛡️ High-performance WAF & CDN detection tool. Identify protection layers (Cloudflare, Akamai, AWS, Fastly, and more), run effectiveness and enforcement tests with evasion payloads, and generate posture reports. Built in Rust 🦀. ktp.sh/Ai0WooTZwy
10
69
4,198
midonescanner-android — Scanner CDN Detection, Real Bandwidth Test, Throttle Detection ktp.sh/Z8DteVHFXA
16
3,617
flipper-mcp — AI-powered MCP server for Flipper Zero. Control SubGHz, NFC, RFID, IR, BLE, GPIO, and more over WiFi using Claude or any MCP client. ktp.sh/3Nw7hASVdX
8
62
4,009
Hexestra — Hexestra is an AI-native penetration testing IDE where human operators and the AI Agent work on the same operational surface—sharing the browser, terminal, traffic, shells, asset graph, task plan, evidence, and controls. ktp.sh/lB5A3SnnPS
1
23
165
12,356
SmuggleMyPayload — SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smuggling techniques, payload encoding options, JavaScript variations, and pre-built HTML templates. ktp.sh/OTNKXR69O3
4
62
4,161
disrobe — Static software recovery in Rust: decompile, deobfuscate, and unpack native code, bytecode, scripts, firmware, and application packages; 15+ ecosystems, 170+ families... ktp.sh/JguQJhR6aA
4
37
3,965
cnspec — An open source, cloud-native security to protect everything from build to runtime ktp.sh/BkW3KM1tdb
1
14
3,115
azure-pentesting-suite — Go toolkit for authorized Azure security assessments: enumerates subscriptions and resources, audits misconfigurations, and attacks public Blob storage anonymously. ktp.sh/BTehCGOEaf
3
31
3,834
ceasta — reverse engineering tool with a built-in MCP server: an AI can debug your binary, not just read it — breakpoints, stepping, memory, calling functions. disassembler + decompiler + x64dbg-style debugger in one. windows gui, linux cli. ktp.sh/4jecp6MXDU
2
29
248
12,501
WAInjectBench — Benchmarking prompt injection detections for web agents. ktp.sh/FfFeAmTS4R
1
1
12
2,913
mauidll — Extract the managed (.NET) assemblies out of a MAUI Android assembly store. ktp.sh/cwP1wt3rc8
1
7
3,182
REx-skill — REx@Skill - Agentic Reverse Engineering eXecution Skill for binary vulnerability discovery ktp.sh/DdWe7Ad7y7
1
24
3,926
security-portfolio — Skyler M. — Security Portfolio: original findings, lab write-ups, and security tooling. Responsible disclosure only. ktp.sh/KXMeuC3GIm
3
2,454
HimitsuShell — shell script protector (obfuscation, embedded interpreter, DRM) - invisible to kernel tracing ktp.sh/Zrv5VtSPYc
1
17
2,918
LocalStranger — PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation. ktp.sh/eq3NREq7lw
1
17
3,480
fad-checker — Audit, One Shot, ALL dependency descriptors in a source tree - 10 ecosystems, no build, no package manager, no Maven required - Real air-gapped mode - Report private deps, binaries, EOL & obsolete packages - Handles massive Maven... ktp.sh/AVlVAAcfY7
14
3,516
EntraTrace — EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra ID. ktp.sh/vsN2dJMbDc
1
26
3,483
antidbg — A stealthy, fully syscalled C/C++ userland anti-debugging library for Windows, designed to protect software from reverse engineering ktp.sh/ZTt4LHm2YD
13
3,152
TransparentTorProxy — A Linux CLI utility that transparently routes all system traffic through the Tor network using nftables. It enables rapid IP rotation and easy toggling of global proxy settings for privacy tasks. ktp.sh/MBkcBnkE8m
1
1
17
2,998
gophoner — Check simultaneously if a phone number is registered on popular apps & websites, without any prerequisite 📞 ktp.sh/WV53mpeHd1
1
42
3,811
cplt — Sandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level sandbox, with git and gh guards and sandbox policy committed to the repository. ktp.sh/65t54iQ5m2
5
2
20
3,176