Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Repository Index
67,762 visible repositories in the index
1–24 of 105 · Most stars
Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
- vaultwarden
- bitwarden
- rust
- docker
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
- penetration-testing
- pentesting
- security-audit
- security-automation
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
A pure Unix shell script ACME client for SSL / TLS certificate automation
- acme
- acme-protocol
- certbot
- shell
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- ai-agents
- ai-security-tool
- autonomous-agents
- golang
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
🕵️♂️ Offensive Google framework.
- osint
- hideandsec
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
- osint
- osint-python
- python3
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
- john
- c
- ripper
- password
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.
- google-api
- nodejs
- client
Unofficial revival of the well known .NET debugger and assembly editor, dnSpy
Firefox user.js for optimal privacy and security. Your favorite browser, but better.
- firefox
- anti-tracking
- mozilla
- privacy
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
- powershell
- nishang
- security
- red-team
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
- java
- deserialization
- gadget
- exploit
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
- lolbins
- lolscripts
- redteam
- blueteam
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]
- penetration-testing
- red-teaming
- windows
- fireeye-flare
Predatory ESP32 Firmware
- bruce
- cardputer
- esp32-s3
- hardware
The all-in-one browser extension for offensive security professionals 🛠
- reverse-shell
- hacking
- hack-tools
- chrome-extension
autonomous red teaming platform; multi-agent offensive-security meta-harness
- agents
- ai
- multi-agent
- offensive-security
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
- devops
- penetration-testing
- vulnerability
- vulnerability-scanners