mythic_ornn
https://kitploit.com/en/tools/github/n0qword/mythic_ornn

LLM-driven generator for Mythic Agents, Payload-Type and C2 Profiles.

I Tasted a Healthcare Platform: A Complete VAPT Walkthrough

Healthcare platforms hold some of the most sensitive data imaginable patient records, medical histories, and personal identifiable…Continue reading on Medium »
Read more...

android-kernel-exploitation
https://kitploit.com/en/tools/github/cloudfuzz/android-kernel-exploitation

Android Kernel Exploitation

edrEvasionWorkshop
https://kitploit.com/en/tools/github/tyeurada/edrevasionworkshop

Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 2026. Covers malware development, EDR Architecture, EDR evasion, C2 customization, and kernel-level techniques.

MemoryModulePP
https://kitploit.com/en/tools/github/strivexjun/memorymodulepp

modify from memorymodule. support exception

Common Sensitive Files You Should Look For During Web Recon

A beginner-friendly guide to finding publicly accessible files that can reveal valuable information during bug bounty reconnaissance.Continue reading on T3CH »
Read more...

godirb

Fast and easy-to-use directory brute-forcer written in Go.
Read more...

BrowserBox v18.8.0

💚🇺🇸🗽Secure remote browsing anywhere, any way you like it.
Read more...

When Verified Doesn’t Mean Verified: Finding a Business Logic Flaw in a Citizen Data Platform

Most vulnerability research focuses on breaking authentication, bypassing authorization, or exploiting technical weaknesses such as SQL…Continue reading on Medium »
Read more...

Breaking Down a Healthcare Web Application: A Complete VAPT Walkthrough .
https://medium.com/@Akarsh_Chaturvedi/i-tasted-a-healthcare-platform-a-complete-vapt-walkthrough-de785fde3683?source=rss------bug_bounty-5

Healthcare platforms hold some of the most sensitive data imaginable patient records, medical histories, and personal identifiable…Continue reading on Medium » (https://medium.com/@Akarsh_Chaturvedi/i-tasted-a-healthcare-platform-a-complete-vapt-walkthrough-de785fde3683?source=rss------bug_bounty-5)

Common Sensitive Files You Should Look For During Web Recon
https://medium.com/h7w/common-sensitive-files-you-should-look-for-during-web-recon-d4ff35e3d7f0?source=rss------bug_bounty-5

A beginner-friendly guide to finding publicly accessible files that can reveal valuable information during bug bounty reconnaissance.Continue reading on T3CH » (https://medium.com/h7w/common-sensitive-files-you-should-look-for-during-web-recon-d4ff35e3d7f0?source=rss------bug_bounty-5)

When Verified Doesn’t Mean Verified: Finding a Business Logic Flaw in a Citizen Data Platform
https://medium.com/@espadar.julian/when-verified-doesnt-mean-verified-finding-a-business-logic-flaw-in-a-citizen-data-platform-fc91a3e12dfe?source=rss------bug_bounty-5

Most vulnerability research focuses on breaking authentication, bypassing authorization, or exploiting technical weaknesses such as SQL…Continue reading on Medium » (https://medium.com/@espadar.julian/when-verified-doesnt-mean-verified-finding-a-business-logic-flaw-in-a-citizen-data-platform-fc91a3e12dfe?source=rss------bug_bounty-5)

godirb
https://kitploit.com/en/tools/github/mycode83/godirb

Fast and easy-to-use directory brute-forcer written in Go.

BrowserBox v18.8.0
https://kitploit.com/en/posts/github-browserbox-browserbox-v1880

💚🇺🇸🗽Secure remote browsing anywhere, any way you like it.

Setup IPsec VPN — Updated!
https://kitploit.com/en/posts/gitlab-hwdsl2-setup-ipsec-vpn-4093782797ce7d9ac4dce20896e57310d8025c2c09373f9945c83b04ad69b727

Automated IPsec VPN server setup with IPsec/L2TP, Cisco IPsec, and IKEv2 support. Includes helper scripts for user and certificate management, and generates profiles for iOS, macOS, Android, and Windows clients.