@KitPloit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

kitploit.com
Joined November 2012
  • Tweets12.2K
  • Following2.8K
  • Followers119K
9.7KMedia
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Tracekit — Tamper-evident tracing, policy gates and cross-checks for AI agents: see what the agent did, and why. ktp.sh/wCdOIWy83x
1
529
php2shell-bypass-aslr-exp — Pure-HTTP exploit achieving RCE on PHP 8.4.26 + Apache mod_php via session upload_progress heap leak, dangling pointer reuse, and ASLR bypass to call zif_system. ktp.sh/E35qA9wTOG
3
1
17
1,438
authentik version/2026.8.5 — Provides open-source SSO and identity provider functionality with SAML, OAuth2/OIDC, LDAP, and RADIUS support for centralized authentication, authorization, and access management. ktp.sh/JGwdzjx1lR
11
1,253
gost v3.3.2-nightly.20261021 — GO Simple Tunnel - a simple tunnel written in golang ktp.sh/aI0PiHnJqw
2
8
1,550
SafeLine v9.4.3 — Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic HTML/JS encryption. ktp.sh/w2XbKBQhuo
1
4
23
2,544
faraday v5.25.1 — Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide. ktp.sh/z4mwadUxzm
8
41
3,412
GenAI-LLM-Top10 — OWASP Top 10 for Large Language Model Applications ktp.sh/uFuXFzMj85
1
13
2,052
PoCs for the critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 are now available on Kitploit. kitploit.com/en/exploits/cve… kitploit.com/en/exploits/cve… #PHP #CyberSecurity

CVE-2026-109618: RCE via OOM corruption

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in...

kitploit.com
21
1
95
6,824
CoercedPotato — Windows local privilege escalation tool that abuses SeImpersonatePrivilege via MS-RPRN and MS-EFSR RPC coercion to execute commands as SYSTEM. ktp.sh/vi8UNA8Mjt
2
23
2,212
malware-research — Code written as part of our various malware investigations ktp.sh/9F4uWEEYuV
12
1,743
ARTEX — Multi-agent LLM system for autonomous penetration testing in isolated labs: planner/worker agents share asset and exploration graphs, with MITM traffic recording and human-in-the-loop approval. ktp.sh/gy7E3AZvUM
1
10
59
4,596
brave-browser v1.100.20 — Brave browser for Android, iOS, Linux, macOS, Windows. ktp.sh/Jq9WCveH7U
10
1,797
OpenShell v0.1.5 — Sandboxed runtime for autonomous AI agents with declarative YAML policies enforcing filesystem, network, and process constraints, plus endpoint-bound credential injection. ktp.sh/vkxumh5eOx
9
1,927
iocs — Indicators of compromise from to analysis and research by Nextron Threat Research team ktp.sh/oa277Pvdfu
1
22
2,231
GoReSym — Parses Go binaries to recover symbols, function metadata, types, file paths, and embedded strings, including stripped or UPX-packed samples, with IDA Pro import support. ktp.sh/mHgzMCmqqP
9
1,605
certstream-server-rust — High-performance Certificate Transparency (CT) monitoring tool written in Rust. Real-time stream of newly issued SSL/TLS certificates from CT logs... ktp.sh/5gDiIr2Ho3
7
1,734
python-certifi — (Python Distribution) A carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. ktp.sh/Jg5CZLbeeH
9
1,625
secure-headers-project — OWASP knowledge base and validator for HTTP security response headers, providing recommendations, statistics, and automated configuration checks. ktp.sh/Ov69y3EjqI
1
10
1,757
NoDPI4Android — Android proxy app that circumvents Deep Packet Inspection censorship by fragmenting TLS ClientHello packets and rewriting the TLS version to restore access to blocked HTTPS sites. ktp.sh/klH4WlT8TA
1
8
1,487
DidierStevensSuite — Collection of Python scripts for malware analysis, file format parsing, hashing, and forensic triage, including PDF, OLE, and XOR analysis utilities. ktp.sh/ez4P1bXhRM
2
1
21
1,995
Load more