Ranked by Attention Score: stars gained over the last 180 complete days
1–100 of 741 by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
🕷️ The BEST Web Scraping framework that handles everything from a single request to a full-scale crawl! Don't be shy, join here: https://discord.gg/EMgGbDceNQ and follow here for daily tips and tricks: https://x.com/Scrapling_dev
Stealth Chromium that passes every bot detection test. Drop-in Playwright replacement with source-level fingerprint patches. 50+ tests passed.
Open-source Python library for AI browser agents, plus Browser Use Cloud: stealth browsers and a hosted agent API.
Open-source web crawler and scraper for LLMs and AI agents: any website into clean, LLM-ready Markdown. Run it yourself, or use Crawl4AI Cloud with one key. Join our Discord https://discord.gg/VuxzM8mtf
The headless browser for AI agents and web scraping
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
A collection of various awesome lists for hackers, pentesters and security researchers
Make Any Website into CLI & Use your logged-in browser by AI agent.
Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.
Lightpanda: the headless browser designed for AI and automation
Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one
Stealth headless browser for AI agents — bypass Cloudflare, bot detection, and anti-scraping. Drop-in Puppeteer/Playwright replacement.
Playwright MCP server
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
🎬 火宝短剧 - 基于AI的一站式短剧生成平台 《一句话生成完整短剧，从剧本到成片全自动化》 Huobao Drama - An AI-Powered End-to-End Short Drama Generator "One Sentence to Complete Drama: Fully Automated from Script to Final Video"
The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.
🤗 LeRobot: Making AI for Robotics more accessible with end-to-end learning
CLI for common Playwright actions. Record and generate Playwright code, inspect selectors and take screenshots.
Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)
📦BetterGI · 更好的原神 - 自动拾取 | 自动剧情 | 全自动钓鱼(AI) | 全自动七圣召唤 | 自动伐木 | 自动刷本 | 自动采集/挖矿/锄地 | 一条龙 | 全连音游 | 自动烹饪 | 桌面分身 - UI Automation Testing Tools For Genshin Impact
基于 Playwright 和AI实现的闲鱼多任务实时/定时监控与智能分析系统，配备了功能完善的后台管理UI。帮助用户从闲鱼海量商品中，找到心仪产品。
How Python does AI. Agents, realtime voice, image generation, embeddings. Every model, every interface, typed end to end.
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
💚 End-to-end encrypted cloud for everything.
The SDK to extract data and interact with any site on the web. Get started with Claude Code, Codex, Eve, Mastra, and more.
Full-stack web application template with FastAPI, React, SQLModel, PostgreSQL, Vite, Tailwind CSS, shadcn/ui, FastAPI Cloud, and Docker Compose.
End-to-end realtime stack for connecting humans and AI
Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries.
Automated Penetration Testing Agentic Framework Powered by Large Language Models
Crawlee—A web scraping and browser automation library for Node.js to build reliable crawlers. In JavaScript and TypeScript. Extract data for AI, LLMs, RAG, or GPTs. Download HTML, PDF, JPG, PNG, and other files from websites. Works with Puppeteer, Playwright, Cheerio, JSDOM, and raw HTTP. Both headful and headless mode. With proxy rotation.
Open-source, self-hosted alternative to OpenAI Dots, Grok Bot. Built to be undetectable by anti-bot systems.
End-to-end, code-first tutorials for building production-grade GenAI agents. From prototype to enterprise deployment.
Turn any website into a structured API. Extract, automate, search and monitor the web.
Curso para aprender el lenguaje de programación Python desde cero y para principiantes. 100 clases, 44 horas en vídeo, código, proyectos y grupo de chat. Fundamentos, frontend, backend, testing, IA...
See interfaces like a human. E2E testing in natural language.
Painless E2E Automation for Mobile and Web
Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.
Open-Source API Development Ecosystem • https://hoppscotch.io • Offline, On-Prem & Cloud • Web, Desktop & CLI • Open-Source Alternative to Postman, Insomnia
Storybook is the industry standard workshop for building, documenting, and testing UI components in isolation
Automate browser based workflows with AI
JavaScript API for Chrome and Firefox
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
A modern load testing tool, using Go and JavaScript
A collection of awesome penetration testing resources and tools
Fast, easy and reliable testing for anything that runs in a browser.
Deterministic testing tools for MCP servers
An email and SMTP testing tool with API for developers
Cross-platform backup tool for Windows, macOS & Linux with fast, incremental backups, client-side end-to-end encryption, compression and data deduplication. CLI and GUI included.
Open-source AI agent for web automation. Use your real, logged-in browser to automate daily tasks.
Portable AI code quality reviews for Codex, Cursor, Copilot and other coding agents: six Agent Skills for architecture, technical debt, tests and remediation.
Open-source, end-to-end platform for evaluating, observing, and improving LLM and AI agent applications. Tracing · Evals · Simulations · Datasets · Gateway · Guardrails. Self-hostable. Apache 2.0.
GoogleTest - Google Testing and Mocking Framework
A modern, C++-native, test framework for unit-tests, TDD and BDD - using C++14, C++17 and later (C++11 support is in v2.x branch, and C++03 on the Catch1.x branch)
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Android in docker solution with noVNC supported, video recording, mcp server and AI-agent
Agent Skills for optimizing web quality based on Lighthouse and Core Web Vitals.
✅ The Node.js best practices list (July 2026)
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
The Monorepo Platform that amplifies both developers and AI agents. Nx optimizes your builds, scales your CI, and fixes failed PRs automatically. Ship in half the time.
A fully open source & end-to-end encrypted note taking alternative to Evernote.
Next generation testing framework powered by Vite.
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
The pytest framework makes it easy to write small tests, yet scales to support complex functional testing
Web path scanner
Deploy headless browsers in Docker. Run on our cloud or bring your own. Free for non-commercial uses.
🧙♀️ Move Fast and Break Nothing. End-to-end typesafe APIs made easy.
Cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol
a fast, scalable, multi-language and extensible build system
A browser automation framework and ecosystem.
A Claude Skill to give your agent the ability to use a web browser
A collection of hacking / penetration testing resources to make you better!
📊 APIs for Web Scraping, Browser Automation, and E2E Testing. CDP Mode bypasses bot-detection and handles CAPTCHAs. Adds stealth to Playwright. Includes an MCP server.
OSS-Fuzz - continuous fuzzing for open source software.
Terraform & OpenTofu Skill for AI Agents - testing, modules, CI/CD, and production patterns
Accessibility engine for automated Web UI testing
The batteries-included full-stack framework for the AI era. Develop JS/TS web apps (React, Node.js, and Prisma) using declarative code that abstracts away complex full-stack features like auth, background jobs, RPC, email sending, end-to-end type safety, single-command deployment, and more.
Write scalable load tests in plain Python 🚗💨
📷 Instagram Bot - Tool for automated Instagram interactions
Python version of the Playwright testing and automation library.
💻 A fully functional local AWS cloud stack. Develop and test your cloud & Serverless apps offline
A privacy-preserving Raspberry Pi home security camera that uses advanced end-to-end encryption.
The property-based testing library for Python
Get a full fake REST API with zero coding in less than 30 seconds (seriously)
Your Gateway to Embedded Software Development Excellence :alien:
A high performance offensive security tool for reconnaissance and vulnerability scanning
Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.
The industry standard for API mocking in JavaScript.
MeterSphere 是新一代的开源持续测试工具，内置 AI 助手，让软件测试工作更简单、更高效，不再成为持续交付的瓶颈。
Hurl, run and test HTTP requests with plain text.
:alarm_clock: :fire: A TCP proxy to simulate network and system conditions for chaos and resiliency testing
Free, open-source AWS emulator. LocalStack alternative: 107 services, 7,657 operations, true 100% Smithy conformance (258,545/258,545 variants pass). No account, no auth token, no paid tier.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
A library for building applications in a consistent and understandable way, with composition, testing, and ergonomics in mind.
Collaborative office suite, end-to-end encrypted and open-source.
Ohayou(おはよう), HTTP load generator, inspired by rakyll/hey with tui animation.
Catch API bugs before your users do
:tada: A magical vue admin https://panjiachen.github.io/vue-element-admin
Mutation testing for JavaScript and friends