47,133 repositories indexed
1–24 of 26 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
The ZAP by Checkmarx Core project
Most advanced XSS scanner.
Affordable WiFi hacking platform for testing and learning
Web path scanner
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
Exploitation Framework for Embedded Devices
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
fsociety Hacking Tools Pack – A Penetration Testing Framework
Automated Αll-in-One OS command injection exploitation tool.
w3af: web application attack and audit framework, the open source web vulnerability scanner.
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
Automated NoSQL database enumeration and web application exploitation tool.
The Offensive Manual Web Application Penetration Testing Framework.
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
Crack password hashes without the fuss :cat2:
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
A friendly car security exploration tool for the CAN bus
The AI Agent for Cyber Security.
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)