Repository Index

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

• agents
• artificial-intelligence
• cybersecurity
• penetration-testing

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

• penetration-testing
• pentesting
• security-audit
• security-automation

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

• llm
• prompt-engineering
• prompts
• llmops

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

• static-analysis
• dynamic-analysis
• mobsf
• android-security

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

• decryption
• natural-language-processing
• cryptography
• cipher

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

• enumeration
• linux
• unix
• bash

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

• password-sniffer
• mitm
• rogue-ap
• wifi

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 60 Methods

• ddos
• ddos-attacks
• ddos-tool
• attack

Automated Penetration Testing Agentic Framework Powered by Large Language Models

• penetration-testing
• python
• large-language-models
• llm

The ZAP by Checkmarx Core project

• zap
• zap-development
• dast
• appsec

Affordable WiFi hacking platform for testing and learning

• wifi
• arduino
• attack
• esp8266

Web path scanner

• fuzzer
• fuzzing
• python
• security

The Rogue Access Point Framework

• wifiphisher
• wifi
• rogue
• access-point

CTF framework and exploit development library

• ctf
• exploit
• python
• pwntools

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

• 0x4m4
• ai
• ai-agents
• ai-cybersecurity

Exploitation Framework for Embedded Devices

• python
• security
• infosec
• router-exploitation-framework

A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32

• esp32
• arduino
• firmware
• wifi

Small and highly portable detection tests based on MITRE's ATT&CK.

• mitre
• mitre-attack

An HTTP toolkit for security research.

• mitm
• proxy
• http
• pentesting

Adversary Emulation Framework

• security-tools
• implant
• golang
• dns-server

(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.

• ai
• deep-reinforcement-learning
• wpa-psk
• handshakes

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

Automated Adversary Emulation Platform

• adversary-emulation
• caldera
• security-automation
• red-team

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

• anti-analysis
• anti-debugging
• anti-sandbox
• anti-vm