PyPI
blacklanternsecurity/bbot
The recursive internet scanner for hackers. 🧡
AGPL-3.011. Aug. 2026 · Metriken 2.10.0
Alle Tags
Katalog-Tag
#pentesting
Alle Repositories im öffentlichen Register, die dieses Tag tragen — aus ihren GitHub-Topics oder den von ihren Paket-Registries veröffentlichten Schlagwörtern. Die Gesundheit wird nach derselben versionierten Methodik gemessen wie im übrigen Register.
66 Einträge
npm
promptfoo/promptfoo
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
MIT5. Aug. 2026 · Metriken 2.10.0
—
OWASP/mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
CC-BY-SA-4.03. Aug. 2026 · Metriken 2.10.0
PyPI · Go · npm
PurpleAILAB/Decepticon
Autonomous Hacking Agent for Red Team
Apache-2.028. Aug. 2026 · Metriken 2.10.0
npm · RubyGems
dradis/dradis-ce
Dradis Framework: Collaboration and reporting for IT Security teams
GPL-2.05. Sept. 2026 · Metriken 2.10.0
—
owasp-noir/noir
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
MIT4. Aug. 2026 · Metriken 2.10.0
Go
praetorian-inc/nerva
Fast service fingerprinting CLI for 170+ protocols (TCP/UDP/SCTP) - built by Praetorian
Apache-2.017. Juli 2026 · Metriken 2.10.0
PyPI
soxoj/maigret
🕵️♂️ Collect a dossier on a person by username from 3000+ sites
MIT5. Aug. 2026 · Metriken 2.10.0
PyPI
sherlock-project/sherlock
Hunt down social media accounts by username across social networks
MIT4. Aug. 2026 · Metriken 2.10.0
npm
pensarai/apex
AI-powered offensive security testing using autonomous agents, directly in your terminal.
Apache-2.06. Sept. 2026 · Metriken 2.10.0
npm
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
AGPL-3.05. Aug. 2026 · Metriken 2.10.0
Go · PyPI
adithyan-ak/AgentHound
Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.
Apache-2.022. Aug. 2026 · Metriken 2.10.0
PyPI
infobyte/faraday
Open Source Vulnerability Management Platform
GPL-3.029. Aug. 2026 · Metriken 2.10.0
Go
ffuf/ffuf
Fast web fuzzer written in Go
MIT5. Aug. 2026 · Metriken 2.10.0
PyPI
androguard/androguard
Reverse engineering and pentesting for Android applications
Apache-2.012. Aug. 2026 · Metriken 2.10.0
npm
Null-Square/Null-CLi
Open-source AI pentest and compliance-readiness CLI by NullSquare.
Eigene Lizenz4. Aug. 2026 · Metriken 2.10.0
PyPI · crates.io
maurosoria/dirsearch
Web path scanner
Keine Lizenz19. Aug. 2026 · Metriken 2.10.0
Go
Ullaakut/nmap
Idiomatic nmap library for go developers
MIT30. Juli 2026 · Metriken 2.10.0
PyPI
gamehunterkaan/autopwn-suite
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
Eigene Lizenz17. Juli 2026 · Metriken 2.10.0
Go
RAJANAGORI/Nightingale
Nightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes preconfigured with all essential tools and utilities required for efficient Vulnerability Assessment and Penetration Testing (VAPT), streamlining the setup process for security professionals.
GPL-3.04. Aug. 2026 · Metriken 2.10.0
Go
go-appsec/interactsh-lite
Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)
MIT5. Sept. 2026 · Metriken 2.10.0
Go
go-appsec/toolbox
Collaborative application security testing between humans and agents via CLI and MCP
MIT17. Juli 2026 · Metriken 2.10.0
PyPI
ASCIT31/Dark-Moon
Autonomous AI pentesting engine, continuous offensive security across web, cloud, identity, CI/CD, IaC, databases, Active Directory, Kubernetes and IoT firmware. Agentic reasoning plus real exploit execution deliver proof-based vulnerabilities. Privacy gateway: the LLM never sees your real IPs, hosts or creds, nothing leaves your perimeter.
GPL-3.04. Aug. 2026 · Metriken 2.10.0
npm
pentoshi007/clai
Free AI coding & pentesting agent for your terminal
MIT5. Sept. 2026 · Metriken 2.10.0
Go
chainreactors/aiscan
AI-driven pi-like agent for cyber security — single binary for pentest, red team, bug bounty
AGPL-3.028. Juli 2026 · Metriken 2.10.0
Go
go-harden/interactsh-lite
Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)
MIT17. Juli 2026 · Metriken 2.10.0
PyPI
Mattmorris-dev/netwatch-sec
All-In-One Network Security Dashboard
Eigene Lizenz26. Juli 2026 · Metriken 2.10.0
PyPI
raccioly/websec-validator
Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.
MIT31. Juli 2026 · Metriken 2.10.0
Go
ddddddO/packemon
Packet monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux
BSD-2-Clause20. Juli 2026 · Metriken 2.10.0
—
hahwul/gori
A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.
Apache-2.011. Aug. 2026 · Metriken 2.10.0