Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Repository Index
47,133 repositories indexed
1–14 of 14 · Most stars
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
An all-in-one hacking tool to remotely take over Android devices.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
DNS Rebinding Exploitation Framework
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
Hashcat web interface
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
A flexible playground for Android CTF challenges.
DEPRECATED, Nozzlr is a bruteforce framework, trully modular and script-friendly