PyPI · Go · npm
PurpleAILAB/Decepticon
Autonomous Hacking Agent for Red Team
Apache-2.028 ago 2026 · métricas 2.10.0
Todas las etiquetas
Etiqueta del catálogo
#pentest
Todos los repositorios del registro público que llevan esta etiqueta, procedente de sus topics de GitHub o de las palabras clave que publican sus registros de paquetes. La salud se mide con la misma metodología versionada que el resto del registro.
33 registros
npm
CyberStrikeus/CyberStrike
Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.
AGPL-3.023 jul 2026 · métricas 2.10.0
PyPI
usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Apache-2.05 ago 2026 · métricas 2.10.0
Go
CompassSecurity/pipeleek
Pipeleek scans CI/CD logs and artifacts to detect leaked secrets and pivot from them
AGPL-3.019 jul 2026 · métricas 2.10.0
Go
praetorian-inc/brutus
Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative with native nerva/naabu pipeline integration.
Apache-2.07 ago 2026 · métricas 2.10.0
Go
CompassSecurity/pipeleak
Pipeleek scans CI/CD logs and artifacts to detect leaked secrets and pivot from them
AGPL-3.018 jul 2026 · métricas 2.10.0
npm
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
AGPL-3.05 ago 2026 · métricas 2.10.0
Go · npm
xalgord/xalgorix
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
MIT17 jul 2026 · métricas 2.10.0
npm
Null-Square/Null-CLi
Open-source AI pentest and compliance-readiness CLI by NullSquare.
Licencia propia4 ago 2026 · métricas 2.10.0
Go
Chocapikk/wpprobe
A fast WordPress plugin enumeration tool
MIT29 ago 2026 · métricas 2.10.0
Go
zan8in/afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
MIT28 ago 2026 · métricas 2.10.0
npm
pentoshi007/clai
Free AI coding & pentesting agent for your terminal
MIT5 sept 2026 · métricas 2.10.0
PyPI
GoSecure/pyrdp
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
GPL-3.017 jul 2026 · métricas 2.10.0
PyPI
raccioly/websec-validator
Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.
MIT31 jul 2026 · métricas 2.10.0
Go
sayseven7/frameseven
Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go
MIT8 ago 2026 · métricas 2.10.0
PyPI
ra1nb0rn/search_vulns
A modular tool to search for known vulnerabilities, exploits and more across various data sources
MIT18 jul 2026 · métricas 2.10.0
PyPI
manthanghasadiya/mcpsec
An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.
MIT28 jul 2026 · métricas 2.10.0
RubyGems
Hackplayers/evil-winrm
The ultimate WinRM shell for hacking/pentesting
LGPL-3.028 ago 2026 · métricas 2.10.0
Go
glitchedgitz/grroxy
A cyber security toolkit blending manual testing with AI Agents
MIT5 ago 2026 · métricas 2.10.0
RubyGems
urbanadventurer/WhatWeb
Next generation web scanner
GPL-2.028 ago 2026 · métricas 2.10.0
—
0xSteph/pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
MIT4 ago 2026 · métricas 2.10.0
npm
3516634930/Payloader
渗透测试Payload速查平台 | Pentest Payload Quick Reference | XSS/SQLi/SSRF/RCE | React+TypeScript
AGPL-3.019 jul 2026 · métricas 2.10.0
PyPI · npm
l4rm4nd/PyADRecon-ADWS
An implementation of PyADRecon using ADWS instead of LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain. Evades EDR detections through ADWS.
MIT22 ago 2026 · métricas 2.10.0
npm
ArisRoman/cyberaudit-skill
Universal security audit skill for AI agents. 52 pure Markdown files encoding 15 years of pentest expertise — web & mobile security, OWASP-aligned, CVSS scoring, compliance checks, zero dependencies.
Sin licencia25 jul 2026 · métricas 2.10.0
Go
safetylab/ShadowSecurityScanner
Free, open-source network vulnerability scanner & penetration testing tool that ranks findings by real-world exploitability (EPSS + CISA KEV). Single desktop app for Windows, macOS, Linux. No cloud, no telemetry. MIT.
MIT21 jul 2026 · métricas 2.10.0
—
matro7sh/BypassAV
This map lists the essential techniques to bypass anti-virus and EDR
Sin licencia4 ago 2026 · métricas 2.10.0
PyPI
aaaguirrep/offensive-docker
Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.
MIT4 ago 2026 · métricas 2.10.0
PyPI
choupit0/MassVulScan
A fast network scanning tool to detect open ports and security vulnerabilities (Compatible with Debian & Red Hat OS)
GPL-3.04 ago 2026 · métricas 2.10.0
PyPI · npm
Stiimy/briar
🥀 Autonomous AI Pentester — find vulns before hackers do. Free, open source, Ollama-powered.
Licencia propia17 jul 2026 · métricas 2.10.0
—
Frissi0n/GTFONow
Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
MIT3 ago 2026 · métricas 2.10.0