1.GreyDGL / PentestGPT
Automated Penetration Testing Agentic Framework Powered by Large Language Models
Ranked by Attention Score: stars gained over the last 7 complete days
12 repositories by Attention Score · Oct 28, 2026 – Nov 3, 2026 (UTC)
Automated Penetration Testing Agentic Framework Powered by Large Language Models
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
CTF framework and exploit development library
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
CTFs as you need them
Create randomly insecure VMs
The best tool for finding one gadget RCE in libc.so.6