godirb
https://kitploit.com/en/tools/github/mycode83/godirb

Fast and easy-to-use directory brute-forcer written in Go.

BrowserBox v18.8.0
https://kitploit.com/en/posts/github-browserbox-browserbox-v1880

💚🇺🇸🗽Secure remote browsing anywhere, any way you like it.

Setup IPsec VPN — Updated!
https://kitploit.com/en/posts/gitlab-hwdsl2-setup-ipsec-vpn-4093782797ce7d9ac4dce20896e57310d8025c2c09373f9945c83b04ad69b727

Automated IPsec VPN server setup with IPsec/L2TP, Cisco IPsec, and IKEv2 support. Includes helper scripts for user and certificate management, and generates profiles for iOS, macOS, Android, and Windows clients.

Setup IPsec VPN — Updated!

Automated IPsec VPN server setup with IPsec/L2TP, Cisco IPsec, and IKEv2 support. Includes helper scripts for user and certificate management, and generates profiles for iOS, macOS, Android, and Windows clients.
Read more...

radare2 v6.2.2

UNIX-like reverse engineering framework and command-line toolset
Read more...

yj\_nearbyglasses v1.0.10

attempting to detect smart glasses nearby and warn you
Read more...

r2frida v6.2.2

Radare2 and Frida better together.
Read more...

NETworkManager v2026.9.7.0

A powerful open-source tool for managing networks and troubleshooting network problems!
Read more...

raptor v3.1.0

Autonomous security research framework integrating static analysis, binary analysis, fuzzing, LLM-powered vulnerability validation, exploit generation, and patch writing for offensive and defensive operations.
Read more...

From Scope to Payout: 9 Claude Code Plugins Worth a Hunter’s Terminal in 2026

30-Second Version: A wave of security-specific Claude Code plugins shipped this year — marketplaces, MCP servers, and skill packs built…Continue reading on Medium »
Read more...

log-horizon v0.9.0

Microsoft Sentinel SIEM Log Source Analyzer
Read more...

AI Agents Don’t Need Passwords. They Need Identity.

Imagine this.Continue reading on Medium »
Read more...

Leviathan — OverTheWire

The Leviathan wargame primarily focuses on basic reverse engineering, file permissions, exploiting SUID binaries, and understanding system…Continue reading on Medium »
Read more...

PortSwigger Web Security Academy: All API Testing Labs Solved (Full Walkthrough)

The API Testing labs in PortSwigger Web Security Academy go beyond classic web vulnerabilities and teach you how to attack the hidden…Continue reading on Medium »
Read more...

Burp AT Isn’t an AI Scanner It’s a Pentesting Agent

Meta description: A hands-on exploration of Burp AT, including its tools, project context, skills, autonomy modes, new Effort control…Continue reading on Medium »
Read more...

Inspect HTML — A Beginner-Friendly picoCTF Web Exploitation Walkthrough

IntroductionContinue reading on Medium »
Read more...

From Scope to Payout: 9 Claude Code Plugins Worth a Hunter’s Terminal in 2026
https://rajnamdev.medium.com/from-scope-to-payout-9-claude-code-plugins-worth-a-hunters-terminal-in-2026-13514526fa08?source=rss------bug_bounty-5

30-Second Version: A wave of security-specific Claude Code plugins shipped this year — marketplaces, MCP servers, and skill packs built…Continue reading on Medium » (https://rajnamdev.medium.com/from-scope-to-payout-9-claude-code-plugins-worth-a-hunters-terminal-in-2026-13514526fa08?source=rss------bug_bounty-5)

Watcher v3.5.3

AI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with MISP/TheHive integration.
Read more...

$5,000 Bug Bounty: Stealing Private API Keys via Arbitrary Origin Reflection in CORS

Cross-Origin Resource Sharing (CORS) misconfigurations remain one of the most reliable bug bounty findings. While many modern frameworks…Continue reading on Medium »
Read more...