Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Repository Index
67,762 visible repositories in the index
1–24 of 40 · Most stars
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
🕵️♂️ Offensive Google framework.
- osint
- hideandsec
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
- osint
- osint-python
- python3
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
- devops
- penetration-testing
- vulnerability
- vulnerability-scanners
Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.
- automated-pentesting
- bruteforce
- cybersecurity
- e-paper
Automated Mass Exploiter
- metasploit
- python
- exploit
- exploitation
The first AI agent that builds permissionless integrations through reverse engineering platforms' internal APIs.
The Deepfake Offensive Toolkit
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
- open-source
- pentest
- pentesting
- readteaming
A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
- python
- python-library
- olefile
- malware-analysis
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
OWASP CRS (Official Repository)
- security
- ruleset
- owasp
- crs
DDos Ripper a Distributable Denied-of-Service (DDOS) attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic
- ddos-attacks
- ddos-tool
- ddos-attack-tools
- ddos-protection
PPPwn - PlayStation 4 PPPoE RCE
Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
- keylogger
- keylogging
- keylogger-screenshot
- keylog
A collection of Azure AD/Entra tools for offensive and defensive security purposes
- azure-active-directory
- azuread
- microsoft-graph
- python
Inofficial Qualcomm Firehose / Sahara / Streaming / Diag Tools :)
- firehose
- sahara
- streaming
- diag
💤 Kick devices off your network by performing an ARP Spoof attack.
- spoofing
- python
- wireless
- hacking
A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.
- penetration-testing
- pentesting-tool
- reporting
- reporting-tool
CTF challenge (mostly pwn) files, scripts etc