Ranked by Attention Score: stars gained over the last 30 complete days
1–100 of 551 by Attention Score · Oct 5, 2026 – Nov 3, 2026 (UTC)
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
Light, fluffy, and always free - The AWS Local Emulator alternative
Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.
A contract-driven gRPC regression harness for AI coding agents, with human-approved baselines. Snapshot the valid call chains of an API so an agent can look one up instead of tracing for it. gRPC today, OpenAPI next
Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.
Stealth headless browser for AI agents — bypass Cloudflare, bot detection, and anti-scraping. Drop-in Puppeteer/Playwright replacement.
Self-hosted iOS & Android simulator streaming for the whole team
Implement one small API on SQLite in any language; we benchmark it on a $12 server (1 vCPU, 2 GB)
See interfaces like a human. E2E testing in natural language.
Painless E2E Automation for Mobile and Web
A modern load testing tool, using Go and JavaScript
An email and SMTP testing tool with API for developers
Playwright that anti-bots cannot see, so no captchas: same API, anti-detect stealth headless Firefox, undetected fingerprint, bypass bot detection, Python web scraping and browser automation.
OSS-Fuzz - continuous fuzzing for open source software.
Deterministic testing tools for MCP servers
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
📊 APIs for Web Scraping, Browser Automation, and E2E Testing. CDP Mode & Stealthy Playwright Mode bypass bot-detection/CAPTCHAs.
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.
Next generation testing framework powered by Vite.
Accessibility engine for automated Web UI testing
Feel how fast a local LLM runs before you buy the hardware
Agent Skills for optimizing web quality based on Lighthouse and Core Web Vitals.
Mutation testing for JavaScript and friends
Cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol
Open-source, end-to-end platform for evaluating, observing, and improving LLM and AI agent applications. Tracing · Evals · Simulations · Datasets · Gateway · Guardrails. Self-hostable. Apache 2.0.
GoogleTest - Google Testing and Mocking Framework
Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.
:alarm_clock: :fire: A TCP proxy to simulate network and system conditions for chaos and resiliency testing
The pytest framework makes it easy to write small tests, yet scales to support complex functional testing
Test suites for Web platform specs — including WHATWG, W3C, and others
Ohayou(おはよう), HTTP load generator, inspired by rakyll/hey with tui animation.
The property-based testing library for Python
Catch API bugs before your users do
Your Gateway to Embedded Software Development Excellence :alien:
The industry standard for API mocking in JavaScript.
Write scalable load tests in plain Python 🚗💨
Hurl, run and test HTTP requests with plain text.
AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
A Claude Skill to give your agent the ability to use a web browser
fsociety Hacking Tools Pack – A Penetration Testing Framework
A modern, C++-native, test framework for unit-tests, TDD and BDD - using C++14, C++17 and later (C++11 support is in v2.x branch, and C++03 on the Catch1.x branch)
Faker is a Python package that generates fake data for you.
MeterSphere 是新一代的开源持续测试工具，内置 AI 助手，让软件测试工作更简单、更高效，不再成为持续交付的瓶颈。
Generic automation framework for acceptance testing and RPA
A very fast SIMD-first image comparison library (with nodejs API)
Think fearlessly with end-to-end encrypted notes and files. For issues, visit https://standardnotes.com/forum or https://standardnotes.com/help.
Get a full fake REST API with zero coding in less than 30 seconds (seriously)
Collaborative office suite, end-to-end encrypted and open-source.
Fast, easy and reliable testing for anything that runs in a browser.
Control and manage Android devices from your browser.
Custom Selenium Chromedriver | Zero-Config | Passes ALL bot mitigation systems (like Distil / Imperva/ Datadadome / CloudFlare IUAM)
Portable AI code quality reviews for Codex, Cursor, Copilot and other coding agents: six Agent Skills for architecture, technical debt, tests and remediation.
Delightful JavaScript Testing.
A collection of services with great free tiers for developers on a budget. Sponsored by Mockoon, the best mock API tool. https://mockoon.com
syzkaller is an unsupervised coverage-guided kernel fuzzer
Most advanced XSS scanner.
A toolkit with common assertions and mocks that plays nicely with the standard library
Apache JMeter open-source load testing tool for analyzing and measuring the performance of a variety of services
A library that allows you to easily mock out tests based on AWS infrastructure.
Free, open-source AWS emulator. LocalStack alternative: 107 services, 7,657 operations, true 100% Smithy conformance (258,545/258,545 variants pass). No account, no auth token, no paid tier.
Generate massive amounts of fake data in the browser and node.js
Mockoon is the easiest and quickest way to run mock APIs locally. No remote deployment, no account required, open source.
Terraform & OpenTofu Skill for AI Agents - testing, modules, CI/CD, and production patterns
Open-source self-improving QA agent for software teams. A test harness with memory. Write tests in natural language for web and mobile. agent-qa learns from every run, adapts to UI changes, and catches regressions before you ship.
HTTP load testing tool and library. It's over 9000!
Embedded unit testing framework for Godot 4 supporting GDScript and C#. Features test-driven development, embedded test inspector, extensive assertions, mocking, scene testing.
Hercules is the world’s first open-source testing agent, enabling UI, API, Security, Accessibility, and Visual validations – all without code or maintenance. Automate testing effortlessly and let Hercules handle the heavy lifting! ⚡
Next-gen browser and mobile automation test framework for Node.js
A light-weight, flexible, and expressive statistical data testing library
Command line driven CI frontend and development task automation tool.
The elegant testing framework for PHP developers and AI agents.
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
UI automation library for .Net
🚀🎉📚 Nextjs Boilerplate and Starter with App Router and Page Router support, Tailwind CSS 4 and TypeScript ⚡️ Made with developer experience first: Next.js 16 + TypeScript + ESLint + Prettier + Drizzle ORM + Husky + Lint-Staged + Vitest + Testing Library + Playwright + Storybook + Commitlint + VSCode + Sentry + PostCSS + Tailwind CSS ✨
Build data pipelines with SQL and Python, ingest data from different sources, add quality checks, and build end-to-end flows.
Test Automation Made Simple
MacOS application to spoof / fake / mock your iOS / iPadOS or iPhoneSimulator device location. WatchOS and TvOS are partially supported.
☕️ Classic, reliable, trusted test framework for Node.js and the browser
A curated list of testing resources
A Chrome DevTools Protocol driver for web automation and scraping.
Godot Unit Test. Unit testing tool for Godot Game Engine.
Playwright for Go a browser automation library to control Chromium, Firefox and WebKit with a single API.
BDD testing with Playwright runner
The complete load testing platform. Everything you need for production-grade load tests. Serverless & distributed. Load test with Playwright. Load test HTTP APIs, GraphQL, WebSocket, and more. Use any Node.js module.
A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
📸 Delightful Swift snapshot testing.
AI Skill for Playwright Best Practices—made by Currents.dev
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
A high performance offensive security tool for reconnaissance and vulnerability scanning
Mutation testing for .NET core and .NET framework!
Database anonymization and test data management