pycdc — Decompile and disassemble Python bytecode (.pyc/.pyo) back to readable source. Supports Python 2.0 - 3.15 (CPython, PyPy and other implementations). Written in Rust. ktp.sh/UpUkrdeJOv

vphone-cli v2.12.0 — Boot and manage virtual iPhones on Apple Silicon with firmware patching, jailbreak variants, and security research features for iOS testing and analysis. ktp.sh/0qlSBP9P0u

nuclei-templates v10.5.1 — Community curated list of templates for the nuclei engine to find security vulnerabilities. ktp.sh/c8M7m5Tcb8

regextokens — list of regex patterns for oauth / api tokens with provided source ktp.sh/SAMkKWbAIy

mcp-gamehacking — MCP server exposing a 4,100+ skill game-hacking and reverse-engineering knowledge base with source archives, specialized agents, subagents, plugins and workflow tools for Claude, Cursor and other MCP clients. ktp.sh/4FwOhZe7Mi

retrokit — Headless-Ghidra toolkit for reverse engineering 32-bit DOS and Win32 games (1993-2010): own LE/LX loader, Watcom calling conventions, library signatures, MCP server ktp.sh/YnZBMKFgnd

Agent-Reach v1.6.0 — Give your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees. ktp.sh/EUXjgdwW6F

aide — File integrity monitoring tool that detects unauthorized changes to monitored files and directories using attribute checks, multiple hash algorithms, and customizable rules. ktp.sh/Xn57tmM4zB

Locksmith2 — An AD CS toolkit for AD Admins, Defensive Security Professionals, and Filthy Red Teamers ktp.sh/IBBS13thGv

Deep-Live-Cam v2.8 — real time face swap and one-click video deepfake with only a single image ktp.sh/O5Sjoz2Hpl

sudp — Secret-Use Delegation Protocol — protocol-level secret use for agentic systems ktp.sh/t7Whw09Dt7

mitmproxy v12.3.0 — An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers. ktp.sh/22Wvc8Gq2Q

ghidra Ghidra_12.2_build — Ghidra is a software reverse engineering (SRE) framework ktp.sh/wzxwoggkET

Tracekit — Tamper-evident tracing, policy gates and cross-checks for AI agents: see what the agent did, and why. ktp.sh/wCdOIWy83x

php2shell-bypass-aslr-exp — Pure-HTTP exploit achieving RCE on PHP 8.4.26 + Apache mod_php via session upload_progress heap leak, dangling pointer reuse, and ASLR bypass to call zif_system. ktp.sh/E35qA9wTOG

authentik version/2026.8.5 — Provides open-source SSO and identity provider functionality with SAML, OAuth2/OIDC, LDAP, and RADIUS support for centralized authentication, authorization, and access management. ktp.sh/JGwdzjx1lR

gost v3.3.2-nightly.20261021 — GO Simple Tunnel - a simple tunnel written in golang ktp.sh/aI0PiHnJqw

SafeLine v9.4.3 — Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic HTML/JS encryption. ktp.sh/w2XbKBQhuo

faraday v5.25.1 — Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide. ktp.sh/z4mwadUxzm

GenAI-LLM-Top10 — OWASP Top 10 for Large Language Model Applications ktp.sh/uFuXFzMj85