Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Joined November 2012
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
ghidra Ghidra_12.2_build — Ghidra is a software reverse engineering (SRE) framework ktp.sh/wzxwoggkET
2
898
Tracekit — Tamper-evident tracing, policy gates and cross-checks for AI agents: see what the agent did, and why. ktp.sh/wCdOIWy83x
10
1,340
php2shell-bypass-aslr-exp — Pure-HTTP exploit achieving RCE on PHP 8.4.26 + Apache mod_php via session upload_progress heap leak, dangling pointer reuse, and ASLR bypass to call zif_system. ktp.sh/E35qA9wTOG
4
1
52
3,830
authentik version/2026.8.5 — Provides open-source SSO and identity provider functionality with SAML, OAuth2/OIDC, LDAP, and RADIUS support for centralized authentication, authorization, and access management. ktp.sh/JGwdzjx1lR
1
14
1,728
gost v3.3.2-nightly.20261021 — GO Simple Tunnel - a simple tunnel written in golang ktp.sh/aI0PiHnJqw
2
9
1,856
SafeLine v9.4.3 — Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic HTML/JS encryption. ktp.sh/w2XbKBQhuo
1
6
38
3,304
faraday v5.25.1 — Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide. ktp.sh/z4mwadUxzm
13
51
3,998
GenAI-LLM-Top10 — OWASP Top 10 for Large Language Model Applications ktp.sh/uFuXFzMj85
1
14
2,322
CoercedPotato — Windows local privilege escalation tool that abuses SeImpersonatePrivilege via MS-RPRN and MS-EFSR RPC coercion to execute commands as SYSTEM. ktp.sh/vi8UNA8Mjt
2
25
2,392
malware-research — Code written as part of our various malware investigations ktp.sh/9F4uWEEYuV
12
1,775
ARTEX — Multi-agent LLM system for autonomous penetration testing in isolated labs: planner/worker agents share asset and exploration graphs, with MITM traffic recording and human-in-the-loop approval. ktp.sh/gy7E3AZvUM
1
10
60
4,671
brave-browser v1.100.20 — Brave browser for Android, iOS, Linux, macOS, Windows. ktp.sh/Jq9WCveH7U
10
1,826
OpenShell v0.1.5 — Sandboxed runtime for autonomous AI agents with declarative YAML policies enforcing filesystem, network, and process constraints, plus endpoint-bound credential injection. ktp.sh/vkxumh5eOx
9
1,950
iocs — Indicators of compromise from to analysis and research by Nextron Threat Research team ktp.sh/oa277Pvdfu
1
22
2,251
GoReSym — Parses Go binaries to recover symbols, function metadata, types, file paths, and embedded strings, including stripped or UPX-packed samples, with IDA Pro import support. ktp.sh/mHgzMCmqqP
9
1,619
certstream-server-rust — High-performance Certificate Transparency (CT) monitoring tool written in Rust. Real-time stream of newly issued SSL/TLS certificates from CT logs... ktp.sh/5gDiIr2Ho3
7
1,747
python-certifi — (Python Distribution) A carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. ktp.sh/Jg5CZLbeeH
9
1,635
secure-headers-project — OWASP knowledge base and validator for HTTP security response headers, providing recommendations, statistics, and automated configuration checks. ktp.sh/Ov69y3EjqI
1
10
1,770
NoDPI4Android — Android proxy app that circumvents Deep Packet Inspection censorship by fragmenting TLS ClientHello packets and rewriting the TLS version to restore access to blocked HTTPS sites. ktp.sh/klH4WlT8TA
1
8
1,495