A non-exhaustive list of latest pentesting/hacking tools for cybersecurity and information security professionals.
Kitploit — Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
- frida-ssl-bypassFrida toolkit that bypasses SSL/TLS certificate pinning on Android apps, hooking Java TrustManager, OkHttp, Conscrypt, and native OpenSSL/BoringSSL layers.
- VeridiffDynamic branch-divergence finder for native code -- traces two Frida executions and finds the exact instruction where they diverge.
- js-x-ray @nodesecure/js-x-ray@16.1.0JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
- evmbench-certora-agent-harnessEVMBench + Certora iterative agent harness
- sslscan v2.2.3Fast SSL/TLS scanner that discovers supported cipher suites, protocols, and vulnerabilities (Heartbleed, POODLE, CRIME) with certificate chain analysis and key exchange enumeration.
- faraday v5.24.2Open Source Vulnerability Management Platform
- SmartScanner-SourceWeb vulnerability scanner built with C++17 and Qt 6, featuring a GUI, CLI, configurable crawling, and JSON reports. Reconstructed for educational purposes.