Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Repository Index
59,621 visible repositories in the index
1–24 of 140 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
- penetration-testing
- pentesting
- security-audit
- security-automation
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- ai-agents
- ai-security-tool
- autonomous-agents
- golang
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
- llm
- prompt-engineering
- prompts
- llmops
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
- password-sniffer
- mitm
- rogue-ap
- wifi
Affordable WiFi hacking platform for testing and learning
Web path scanner
The Rogue Access Point Framework
- wifiphisher
- wifi
- rogue
- access-point
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Exploitation Framework for Embedded Devices
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
Small and highly portable detection tests based on MITRE's ATT&CK.
- mitre
- mitre-attack
An HTTP toolkit for security research.
- mitm
- proxy
- http
- pentesting
Adversary Emulation Framework
- security-tools
- implant
- golang
- dns-server
The recursive internet scanner for hackers. 🧡
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
- powershell
- nishang
- security
- red-team
An open-source post-exploitation framework for students, researchers and developers.
- encrypted-connections
- platform-independent
- no-dependencies
- reverse-shells
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
- ai
- deep-reinforcement-learning
- wpa-psk
- handshakes
People tracker on the Internet: OSINT analysis and research tool by Jose Pino
- tracking
- osint
- footprint
- hacking-tool
🎤⌨️ Acoustic keyboard eavesdropping
- acoustic
- microphone-audio-capture
- eavesdrop
The ESP32-BlueJammer (Bluetooth jammer, BLE jammer, WiFi jammer, RC jammer) disrupts 2.4GHz communications. Using an ESP32 and nRF24 modules, it generates noise and unnecessary packets, causing interference between the devices communicating, making them unable to work as intended. Ideal for controlled disruption and security testing.
- bluetooth
- bt
- coding
- cybersecurity
The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.
Cyber Security ALL-IN-ONE Platform
- redteam
- redteam-tools
- hacking-tools
- scanner