1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
- agents
- artificial-intelligence
- cybersecurity
- penetration-testing
- ai-penetration-testing
- ai-pentesting
- +14 more
Ranked by Attention Score: stars gained over the last 90 complete days
1–100 of 772 by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
🕷️ The BEST Web Scraping framework that handles everything from a single request to a full-scale crawl! Don't be shy, join here: https://discord.gg/EMgGbDceNQ and follow here for daily tips and tricks: https://x.com/Scrapling_dev
Open-source Python library for AI browser agents, plus Browser Use Cloud: stealth browsers and a hosted agent API.
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
Open-source web crawler and scraper for LLMs and AI agents: any website into clean, LLM-ready Markdown. Run it yourself, or use Crawl4AI Cloud with one key. Join our Discord https://discord.gg/VuxzM8mtf
The headless browser for AI agents and web scraping
A collection of various awesome lists for hackers, pentesters and security researchers
Lightpanda: the headless browser designed for AI and automation
Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.
Stealth headless browser for AI agents — bypass Cloudflare, bot detection, and anti-scraping. Drop-in Puppeteer/Playwright replacement.
Stealth Chromium that passes every bot detection test. Drop-in Playwright replacement with source-level fingerprint patches. 50+ tests passed.
Playwright MCP server
Make Any Website into CLI & Use your logged-in browser by AI agent.
🎬 火宝短剧 - 基于AI的一站式短剧生成平台 《一句话生成完整短剧,从剧本到成片全自动化》 Huobao Drama - An AI-Powered End-to-End Short Drama Generator "One Sentence to Complete Drama: Fully Automated from Script to Final Video"
📦BetterGI · 更好的原神 - 自动拾取 | 自动剧情 | 全自动钓鱼(AI) | 全自动七圣召唤 | 自动伐木 | 自动刷本 | 自动采集/挖矿/锄地 | 一条龙 | 全连音游 | 自动烹饪 | 桌面分身 - UI Automation Testing Tools For Genshin Impact
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
CLI for common Playwright actions. Record and generate Playwright code, inspect selectors and take screenshots.
Open-source, self-hosted alternative to OpenAI Dots, Grok Bot. Built to be undetectable by anti-bot systems.
🤗 LeRobot: Making AI for Robotics more accessible with end-to-end learning
The SDK to extract data and interact with any site on the web. Get started with Claude Code, Codex, Eve, Mastra, and more.
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)
How Python does AI. Agents, realtime voice, image generation, embeddings. Every model, every interface, typed end to end.
End-to-end realtime stack for connecting humans and AI
Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one
💚 End-to-end encrypted cloud for everything.
Full-stack web application template with FastAPI, React, SQLModel, PostgreSQL, Vite, Tailwind CSS, shadcn/ui, FastAPI Cloud, and Docker Compose.
基于 Playwright 和AI实现的闲鱼多任务实时/定时监控与智能分析系统,配备了功能完善的后台管理UI。帮助用户从闲鱼海量商品中,找到心仪产品。
Automated Penetration Testing Agentic Framework Powered by Large Language Models
Curso para aprender el lenguaje de programación Python desde cero y para principiantes. 100 clases, 44 horas en vídeo, código, proyectos y grupo de chat. Fundamentos, frontend, backend, testing, IA...
Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries.
Crawlee—A web scraping and browser automation library for Node.js to build reliable crawlers. In JavaScript and TypeScript. Extract data for AI, LLMs, RAG, or GPTs. Download HTML, PDF, JPG, PNG, and other files from websites. Works with Puppeteer, Playwright, Cheerio, JSDOM, and raw HTTP. Both headful and headless mode. With proxy rotation.
Self-hosted iOS & Android simulator streaming for the whole team
Turn any website into a structured API. Extract, automate, search and monitor the web.
Painless E2E Automation for Mobile and Web
See interfaces like a human. E2E testing in natural language.
Open-Source API Development Ecosystem • https://hoppscotch.io • Offline, On-Prem & Cloud • Web, Desktop & CLI • Open-Source Alternative to Postman, Insomnia
A modern load testing tool, using Go and JavaScript
Storybook is the industry standard workshop for building, documenting, and testing UI components in isolation
GoogleTest - Google Testing and Mocking Framework
Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.
A collection of awesome penetration testing resources and tools
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.
Cross-platform backup tool for Windows, macOS & Linux with fast, incremental backups, client-side end-to-end encryption, compression and data deduplication. CLI and GUI included.
An email and SMTP testing tool with API for developers
Open-source AI agent for web automation. Use your real, logged-in browser to automate daily tasks.
Automate browser based workflows with AI
Open-source self-improving QA agent for software teams. A test harness with memory. Write tests in natural language for web and mobile. agent-qa learns from every run, adapts to UI changes, and catches regressions before you ship.
Playwright that anti-bots cannot see, so no captchas: same API, anti-detect stealth headless Firefox, undetected fingerprint, bypass bot detection, Python web scraping and browser automation.
Deterministic testing tools for MCP servers
End-to-end, code-first tutorials for building production-grade GenAI agents. From prototype to enterprise deployment.
Open-source, end-to-end platform for evaluating, observing, and improving LLM and AI agent applications. Tracing · Evals · Simulations · Datasets · Gateway · Guardrails. Self-hostable. Apache 2.0.
JavaScript API for Chrome and Firefox
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
A fully open source & end-to-end encrypted note taking alternative to Evernote.
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
✅ The Node.js best practices list (July 2026)
Web path scanner
Android in docker solution with noVNC supported, video recording, mcp server and AI-agent
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
Next generation testing framework powered by Vite.
Agent Skills for optimizing web quality based on Lighthouse and Core Web Vitals.
a fast, scalable, multi-language and extensible build system
Cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol
📊 APIs for Web Scraping, Browser Automation, and E2E Testing. CDP Mode bypasses bot-detection and handles CAPTCHAs. Adds stealth to Playwright. Includes an MCP server.
Fast, easy and reliable testing for anything that runs in a browser.
🧙♀️ Move Fast and Break Nothing. End-to-end typesafe APIs made easy.
The Monorepo Platform that amplifies both developers and AI agents. Nx optimizes your builds, scales your CI, and fixes failed PRs automatically. Ship in half the time.
Deploy headless browsers in Docker. Run on our cloud or bring your own. Free for non-commercial uses.
Accessibility engine for automated Web UI testing
OSS-Fuzz - continuous fuzzing for open source software.
A browser automation framework and ecosystem.
A collection of hacking / penetration testing resources to make you better!
Mutation testing for JavaScript and friends
The pytest framework makes it easy to write small tests, yet scales to support complex functional testing
📷 Instagram Bot - Tool for automated Instagram interactions
The property-based testing library for Python
Test suites for Web platform specs — including WHATWG, W3C, and others
Write scalable load tests in plain Python 🚗💨
Portable AI code quality reviews for Codex, Cursor, Copilot and other coding agents: six Agent Skills for architecture, technical debt, tests and remediation.
:alarm_clock: :fire: A TCP proxy to simulate network and system conditions for chaos and resiliency testing
Free, open-source AWS emulator. LocalStack alternative: 107 services, 7,657 operations, true 100% Smithy conformance (258,545/258,545 variants pass). No account, no auth token, no paid tier.
Python version of the Playwright testing and automation library.
Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.
The industry standard for API mocking in JavaScript.
Collaborative office suite, end-to-end encrypted and open-source.
A Claude Skill to give your agent the ability to use a web browser
Catch API bugs before your users do
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
MeterSphere 是新一代的开源持续测试工具,内置 AI 助手,让软件测试工作更简单、更高效,不再成为持续交付的瓶颈。
Kubernetes IN Docker - local clusters for testing Kubernetes
Hurl, run and test HTTP requests with plain text.
Ohayou(おはよう), HTTP load generator, inspired by rakyll/hey with tui animation.
Get a full fake REST API with zero coding in less than 30 seconds (seriously)
Learn Go with test-driven development
Your Gateway to Embedded Software Development Excellence :alien:
A modern, C++-native, test framework for unit-tests, TDD and BDD - using C++14, C++17 and later (C++11 support is in v2.x branch, and C++03 on the Catch1.x branch)
Affordable WiFi hacking platform for testing and learning