1.vxcontrol / pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- ai-agents
- ai-security-tool
- autonomous-agents
- golang
- graphql
- multi-agent-system
- +12 more
Ranked by Attention Score: stars gained over the last 30 complete days
1–100 of 598 by Attention Score · Oct 5, 2026 – Nov 3, 2026 (UTC)
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.
The headless browser for AI agents and web scraping
📦BetterGI · 更好的原神 - 自动拾取 | 自动剧情 | 全自动钓鱼(AI) | 全自动七圣召唤 | 自动伐木 | 自动刷本 | 自动采集/挖矿/锄地 | 一条龙 | 全连音游 | 自动烹饪 | 桌面分身 - UI Automation Testing Tools For Genshin Impact
A contract-driven gRPC regression harness for AI coding agents, with human-approved baselines. Snapshot the valid call chains of an API so an agent can look one up instead of tracing for it. gRPC today, OpenAPI next
🎬 火宝短剧 - 基于AI的一站式短剧生成平台 《一句话生成完整短剧,从剧本到成片全自动化》 Huobao Drama - An AI-Powered End-to-End Short Drama Generator "One Sentence to Complete Drama: Fully Automated from Script to Final Video"
基于 Playwright 和AI实现的闲鱼多任务实时/定时监控与智能分析系统,配备了功能完善的后台管理UI。帮助用户从闲鱼海量商品中,找到心仪产品。
CLI for common Playwright actions. Record and generate Playwright code, inspect selectors and take screenshots.
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
Make Any Website into CLI & Use your logged-in browser by AI agent.
Stealth Chromium that passes every bot detection test. Drop-in Playwright replacement with source-level fingerprint patches. 50+ tests passed.
Stealth headless browser for AI agents — bypass Cloudflare, bot detection, and anti-scraping. Drop-in Puppeteer/Playwright replacement.
End-to-end realtime stack for connecting humans and AI
🤗 LeRobot: Making AI for Robotics more accessible with end-to-end learning
Self-hosted iOS & Android simulator streaming for the whole team
💚 End-to-end encrypted cloud for everything.
Open-source, self-hosted alternative to OpenAI Dots, Grok Bot. Built to be undetectable by anti-bot systems.
Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.
Implement one small API on SQLite in any language; we benchmark it on a $12 server (1 vCPU, 2 GB)
How Python does AI. Agents, realtime voice, image generation, embeddings. Every model, every interface, typed end to end.
Automated Penetration Testing Agentic Framework Powered by Large Language Models
Turn any website into a structured API. Extract, automate, search and monitor the web.
See interfaces like a human. E2E testing in natural language.
The SDK to extract data and interact with any site on the web. Get started with Claude Code, Codex, Eve, Mastra, and more.
Painless E2E Automation for Mobile and Web
A modern load testing tool, using Go and JavaScript
Crawlee—A web scraping and browser automation library for Node.js to build reliable crawlers. In JavaScript and TypeScript. Extract data for AI, LLMs, RAG, or GPTs. Download HTML, PDF, JPG, PNG, and other files from websites. Works with Puppeteer, Playwright, Cheerio, JSDOM, and raw HTTP. Both headful and headless mode. With proxy rotation.
Cross-platform backup tool for Windows, macOS & Linux with fast, incremental backups, client-side end-to-end encryption, compression and data deduplication. CLI and GUI included.
End-to-end, code-first tutorials for building production-grade GenAI agents. From prototype to enterprise deployment.
A collection of awesome penetration testing resources and tools
Open-source AI agent for web automation. Use your real, logged-in browser to automate daily tasks.
An email and SMTP testing tool with API for developers
The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Playwright that anti-bots cannot see, so no captchas: same API, anti-detect stealth headless Firefox, undetected fingerprint, bypass bot detection, Python web scraping and browser automation.
Automate browser based workflows with AI
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
Deterministic testing tools for MCP servers
🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
📊 APIs for Web Scraping, Browser Automation, and E2E Testing. CDP Mode & Stealthy Playwright Mode bypass bot-detection/CAPTCHAs.
A fully open source & end-to-end encrypted note taking alternative to Evernote.
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
Android in docker solution with noVNC supported, video recording, mcp server and AI-agent
Next generation testing framework powered by Vite.
Feel how fast a local LLM runs before you buy the hardware
Accessibility engine for automated Web UI testing
Agent Skills for optimizing web quality based on Lighthouse and Core Web Vitals.
OSS-Fuzz - continuous fuzzing for open source software.
Cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol
Mutation testing for JavaScript and friends
Open-source, end-to-end platform for evaluating, observing, and improving LLM and AI agent applications. Tracing · Evals · Simulations · Datasets · Gateway · Guardrails. Self-hostable. Apache 2.0.
a fast, scalable, multi-language and extensible build system
Deploy headless browsers in Docker. Run on our cloud or bring your own. Free for non-commercial uses.
GoogleTest - Google Testing and Mocking Framework
A collection of hacking / penetration testing resources to make you better!
Web path scanner
Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.
:alarm_clock: :fire: A TCP proxy to simulate network and system conditions for chaos and resiliency testing
The pytest framework makes it easy to write small tests, yet scales to support complex functional testing
Test suites for Web platform specs — including WHATWG, W3C, and others
📷 Instagram Bot - Tool for automated Instagram interactions
The Monorepo Platform that amplifies both developers and AI agents. Nx optimizes your builds, scales your CI, and fixes failed PRs automatically. Ship in half the time.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Ohayou(おはよう), HTTP load generator, inspired by rakyll/hey with tui animation.
Catch API bugs before your users do
The property-based testing library for Python
Python version of the Playwright testing and automation library.
Your Gateway to Embedded Software Development Excellence :alien:
Affordable WiFi hacking platform for testing and learning
Write scalable load tests in plain Python 🚗💨
The industry standard for API mocking in JavaScript.
Hurl, run and test HTTP requests with plain text.
Kubernetes IN Docker - local clusters for testing Kubernetes
AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
A Claude Skill to give your agent the ability to use a web browser
A modern, C++-native, test framework for unit-tests, TDD and BDD - using C++14, C++17 and later (C++11 support is in v2.x branch, and C++03 on the Catch1.x branch)
Faker is a Python package that generates fake data for you.
A library for building applications in a consistent and understandable way, with composition, testing, and ergonomics in mind.
A faster, simpler way to drive browsers supporting the Chrome DevTools Protocol.
A very fast SIMD-first image comparison library (with nodejs API)
fsociety Hacking Tools Pack – A Penetration Testing Framework
Learn Go with test-driven development
Generic automation framework for acceptance testing and RPA
Think fearlessly with end-to-end encrypted notes and files. For issues, visit https://standardnotes.com/forum or https://standardnotes.com/help.
Fast, easy and reliable testing for anything that runs in a browser.
Get a full fake REST API with zero coding in less than 30 seconds (seriously)
MeterSphere 是新一代的开源持续测试工具,内置 AI 助手,让软件测试工作更简单、更高效,不再成为持续交付的瓶颈。
Collaborative office suite, end-to-end encrypted and open-source.
Delightful JavaScript Testing.
Custom Selenium Chromedriver | Zero-Config | Passes ALL bot mitigation systems (like Distil / Imperva/ Datadadome / CloudFlare IUAM)
The batteries-included full-stack framework for the AI era. Develop JS/TS web apps (React, Node.js, and Prisma) using declarative code that abstracts away complex full-stack features like auth, background jobs, RPC, email sending, end-to-end type safety, single-command deployment, and more.
Portable AI code quality reviews for Codex, Cursor, Copilot and other coding agents: six Agent Skills for architecture, technical debt, tests and remediation.
Control and manage Android devices from your browser.
syzkaller is an unsupervised coverage-guided kernel fuzzer
A collection of services with great free tiers for developers on a budget. Sponsored by Mockoon, the best mock API tool. https://mockoon.com
A toolkit with common assertions and mocks that plays nicely with the standard library