MISP v2.5.45
https://kitploit.com/en/posts/github-misp-misp-v2545

Open-source threat intelligence platform for collecting, correlating, and sharing structured cybersecurity indicators, malware analysis, and attack patterns with automated workflows and flexible data models.

fscan v2.2.1
https://kitploit.com/en/posts/github-shadow1ng-fscan-v221

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

flowsint v1.2.12
https://kitploit.com/en/posts/github-reconurge-flowsint-v1212

A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.

flowsint v1.2.12

A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.
Read more...

Malcolm v26.08.0

Containerized network traffic analysis suite ingesting PCAP, Zeek logs, and Suricata alerts for automated normalization, enrichment, and correlation via OpenSearch Dashboards and Arkime.
Read more...

joern v4.0.612

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc
Read more...

adPEAS v2.3.2

Powershell tool to automate Active Directory enumeration.
Read more...

SSTImap v1.4

Automatic SSTI detection tool with interactive interface
Read more...

Exploits + Shellcode + GHDB v2026-08-26

Curated archive of public exploits, shellcode, and papers with SearchSploit CLI for offline searching, CVE lookup, and Nmap integration. Daily-updated database for penetration testers and vulnerability researchers.
Read more...

git-alerts v1.8.0

Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
Read more...

gosentry v0.4.1

Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.
Read more...

Malcolm v26.08.0
https://kitploit.com/en/posts/github-cisagov-malcolm-v26080

Containerized network traffic analysis suite ingesting PCAP, Zeek logs, and Suricata alerts for automated normalization, enrichment, and correlation via OpenSearch Dashboards and Arkime.

joern v4.0.612
https://kitploit.com/en/posts/github-joernio-joern-v40612

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc

androidReverse v20

Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers, Flutter & Unity il2cpp support.
Read more...

20 Certificate Transparency Tricks for Recon: Master Advanced Asset Discovery for Ethical Hacking
https://medium.com/@verylazytech/20-certificate-transparency-tricks-for-recon-master-advanced-asset-discovery-for-ethical-hacking-0ba8bd8ecf45?source=rss------bug_bounty-5

Ever found a subdomain no one else has, just by reading a certificate log? You’re not alone — Certificate Transparency (CT) is the open…Continue reading on Medium » (https://medium.com/@verylazytech/20-certificate-transparency-tricks-for-recon-master-advanced-asset-discovery-for-ethical-hacking-0ba8bd8ecf45?source=rss------bug_bounty-5)

Race Condition That Created an Undeletable Group Member
https://medium.com/@y_shivkumar/race-condition-that-created-an-undeletable-group-member-2e9483541fbf?source=rss------bug_bounty-5

OverviewContinue reading on Medium » (https://medium.com/@y_shivkumar/race-condition-that-created-an-undeletable-group-member-2e9483541fbf?source=rss------bug_bounty-5)

threat-finder v0.3.0

Runtime vulnerability scanner: finds CVEs in the services actually running on a host and ranks them by network exposure.
Read more...

nuguard v0.9.1

opensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis
Read more...

yaraast v2.0.1rc1

A powerful Python library and CLI tool for parsing, analyzing, and manipulating YARA rules through Abstract Syntax Tree (AST) representation
Read more...