1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
- agents
- artificial-intelligence
- cybersecurity
- penetration-testing
- ai-penetration-testing
- ai-pentesting
- +14 more
Ranked by Attention Score: stars gained over the last 180 complete days
1–100 of 732 by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Stealth Chromium that passes every bot detection test. Drop-in Playwright replacement with source-level fingerprint patches. 50+ tests passed.
The headless browser for AI agents and web scraping
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
Make Any Website into CLI & Use your logged-in browser by AI agent.
Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.
Lightpanda: the headless browser designed for AI and automation
Stealth headless browser for AI agents — bypass Cloudflare, bot detection, and anti-scraping. Drop-in Puppeteer/Playwright replacement.
Playwright MCP server
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
🎬 火宝短剧 - 基于AI的一站式短剧生成平台 《一句话生成完整短剧,从剧本到成片全自动化》 Huobao Drama - An AI-Powered End-to-End Short Drama Generator "One Sentence to Complete Drama: Fully Automated from Script to Final Video"
🤗 LeRobot: Making AI for Robotics more accessible with end-to-end learning
CLI for common Playwright actions. Record and generate Playwright code, inspect selectors and take screenshots.
Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)
The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.
基于 Playwright 和AI实现的闲鱼多任务实时/定时监控与智能分析系统,配备了功能完善的后台管理UI。帮助用户从闲鱼海量商品中,找到心仪产品。
📦BetterGI · 更好的原神 - 自动拾取 | 自动剧情 | 全自动钓鱼(AI) | 全自动七圣召唤 | 自动伐木 | 自动刷本 | 自动采集/挖矿/锄地 | 一条龙 | 全连音游 | 自动烹饪 | 桌面分身 - UI Automation Testing Tools For Genshin Impact
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
How Python does AI. Agents, realtime voice, image generation, embeddings. Every model, every interface, typed end to end.
💚 End-to-end encrypted cloud for everything.
The SDK to extract data and interact with any site on the web. Get started with Claude Code, Codex, Eve, Mastra, and more.
Full-stack web application template with FastAPI, React, SQLModel, PostgreSQL, Vite, Tailwind CSS, shadcn/ui, FastAPI Cloud, and Docker Compose.
End-to-end realtime stack for connecting humans and AI
Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries.
Automated Penetration Testing Agentic Framework Powered by Large Language Models
Crawlee—A web scraping and browser automation library for Node.js to build reliable crawlers. In JavaScript and TypeScript. Extract data for AI, LLMs, RAG, or GPTs. Download HTML, PDF, JPG, PNG, and other files from websites. Works with Puppeteer, Playwright, Cheerio, JSDOM, and raw HTTP. Both headful and headless mode. With proxy rotation.
Open-source, self-hosted alternative to OpenAI Dots, Grok Bot. Built to be undetectable by anti-bot systems.
End-to-end, code-first tutorials for building production-grade GenAI agents. From prototype to enterprise deployment.
Turn any website into a structured API. Extract, automate, search and monitor the web.
Curso para aprender el lenguaje de programación Python desde cero y para principiantes. 100 clases, 44 horas en vídeo, código, proyectos y grupo de chat. Fundamentos, frontend, backend, testing, IA...
See interfaces like a human. E2E testing in natural language.
Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.
Painless E2E Automation for Mobile and Web
Automate browser based workflows with AI
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
A modern load testing tool, using Go and JavaScript
A collection of awesome penetration testing resources and tools
Fast, easy and reliable testing for anything that runs in a browser.
Deterministic testing tools for MCP servers
An email and SMTP testing tool with API for developers
Cross-platform backup tool for Windows, macOS & Linux with fast, incremental backups, client-side end-to-end encryption, compression and data deduplication. CLI and GUI included.
Open-source AI agent for web automation. Use your real, logged-in browser to automate daily tasks.
Portable AI code quality reviews for Codex, Cursor, Copilot and other coding agents: six Agent Skills for architecture, technical debt, tests and remediation.
GoogleTest - Google Testing and Mocking Framework
Open-source, end-to-end platform for evaluating, observing, and improving LLM and AI agent applications. Tracing · Evals · Simulations · Datasets · Gateway · Guardrails. Self-hostable. Apache 2.0.
A modern, C++-native, test framework for unit-tests, TDD and BDD - using C++14, C++17 and later (C++11 support is in v2.x branch, and C++03 on the Catch1.x branch)
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Android in docker solution with noVNC supported, video recording, mcp server and AI-agent
Agent Skills for optimizing web quality based on Lighthouse and Core Web Vitals.
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
A fully open source & end-to-end encrypted note taking alternative to Evernote.
The Monorepo Platform that amplifies both developers and AI agents. Nx optimizes your builds, scales your CI, and fixes failed PRs automatically. Ship in half the time.
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
Next generation testing framework powered by Vite.
The pytest framework makes it easy to write small tests, yet scales to support complex functional testing
Web path scanner
Deploy headless browsers in Docker. Run on our cloud or bring your own. Free for non-commercial uses.
🧙♀️ Move Fast and Break Nothing. End-to-end typesafe APIs made easy.
Cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol
a fast, scalable, multi-language and extensible build system
A browser automation framework and ecosystem.
A Claude Skill to give your agent the ability to use a web browser
A collection of hacking / penetration testing resources to make you better!
📊 APIs for Web Scraping, Browser Automation, and E2E Testing. CDP Mode & Stealthy Playwright Mode bypass bot-detection/CAPTCHAs.
OSS-Fuzz - continuous fuzzing for open source software.
Terraform & OpenTofu Skill for AI Agents - testing, modules, CI/CD, and production patterns
Accessibility engine for automated Web UI testing
The batteries-included full-stack framework for the AI era. Develop JS/TS web apps (React, Node.js, and Prisma) using declarative code that abstracts away complex full-stack features like auth, background jobs, RPC, email sending, end-to-end type safety, single-command deployment, and more.
Write scalable load tests in plain Python 🚗💨
📷 Instagram Bot - Tool for automated Instagram interactions
Python version of the Playwright testing and automation library.
💻 A fully functional local AWS cloud stack. Develop and test your cloud & Serverless apps offline
A privacy-preserving Raspberry Pi home security camera that uses advanced end-to-end encryption.
The property-based testing library for Python
Your Gateway to Embedded Software Development Excellence :alien:
Get a full fake REST API with zero coding in less than 30 seconds (seriously)
A high performance offensive security tool for reconnaissance and vulnerability scanning
Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.
The industry standard for API mocking in JavaScript.
MeterSphere 是新一代的开源持续测试工具,内置 AI 助手,让软件测试工作更简单、更高效,不再成为持续交付的瓶颈。
Hurl, run and test HTTP requests with plain text.
:alarm_clock: :fire: A TCP proxy to simulate network and system conditions for chaos and resiliency testing
Free, open-source AWS emulator. LocalStack alternative: 107 services, 7,657 operations, true 100% Smithy conformance (258,545/258,545 variants pass). No account, no auth token, no paid tier.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
A library for building applications in a consistent and understandable way, with composition, testing, and ergonomics in mind.
Ohayou(おはよう), HTTP load generator, inspired by rakyll/hey with tui animation.
Collaborative office suite, end-to-end encrypted and open-source.
Catch API bugs before your users do
Mutation testing for JavaScript and friends
Learn Go with test-driven development
Kubernetes IN Docker - local clusters for testing Kubernetes
fsociety Hacking Tools Pack – A Penetration Testing Framework
Test suites for Web platform specs — including WHATWG, W3C, and others
Custom Selenium Chromedriver | Zero-Config | Passes ALL bot mitigation systems (like Distil / Imperva/ Datadadome / CloudFlare IUAM)
A toolkit with common assertions and mocks that plays nicely with the standard library
Generic automation framework for acceptance testing and RPA
Affordable WiFi hacking platform for testing and learning
A faster, simpler way to drive browsers supporting the Chrome DevTools Protocol.
AdonisJS is a TypeScript-first web framework for building web apps and API servers. It comes with support for testing, modern tooling, an ecosystem of official packages, and more.