PyPI
blacklanternsecurity/bbot
The recursive internet scanner for hackers. 🧡
AGPL-3.011 ago 2026 · métricas 2.10.0
Todas las etiquetas
Etiqueta del catálogo
#pentesting
Todos los repositorios del registro público que llevan esta etiqueta, procedente de sus topics de GitHub o de las palabras clave que publican sus registros de paquetes. La salud se mide con la misma metodología versionada que el resto del registro.
66 registros
npm
promptfoo/promptfoo
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
MIT5 ago 2026 · métricas 2.10.0
—
OWASP/mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
CC-BY-SA-4.03 ago 2026 · métricas 2.10.0
PyPI · Go · npm
PurpleAILAB/Decepticon
Autonomous Hacking Agent for Red Team
Apache-2.028 ago 2026 · métricas 2.10.0
npm · RubyGems
dradis/dradis-ce
Dradis Framework: Collaboration and reporting for IT Security teams
GPL-2.05 sept 2026 · métricas 2.10.0
—
owasp-noir/noir
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
MIT4 ago 2026 · métricas 2.10.0
Go
praetorian-inc/nerva
Fast service fingerprinting CLI for 170+ protocols (TCP/UDP/SCTP) - built by Praetorian
Apache-2.017 jul 2026 · métricas 2.10.0
PyPI
soxoj/maigret
🕵️♂️ Collect a dossier on a person by username from 3000+ sites
MIT5 ago 2026 · métricas 2.10.0
PyPI
sherlock-project/sherlock
Hunt down social media accounts by username across social networks
MIT4 ago 2026 · métricas 2.10.0
npm
pensarai/apex
AI-powered offensive security testing using autonomous agents, directly in your terminal.
Apache-2.06 sept 2026 · métricas 2.10.0
npm
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
AGPL-3.05 ago 2026 · métricas 2.10.0
Go · PyPI
adithyan-ak/AgentHound
Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.
Apache-2.022 ago 2026 · métricas 2.10.0
PyPI
infobyte/faraday
Open Source Vulnerability Management Platform
GPL-3.029 ago 2026 · métricas 2.10.0
Go
ffuf/ffuf
Fast web fuzzer written in Go
MIT5 ago 2026 · métricas 2.10.0
PyPI
androguard/androguard
Reverse engineering and pentesting for Android applications
Apache-2.012 ago 2026 · métricas 2.10.0
npm
Null-Square/Null-CLi
Open-source AI pentest and compliance-readiness CLI by NullSquare.
Licencia propia4 ago 2026 · métricas 2.10.0
PyPI · crates.io
maurosoria/dirsearch
Web path scanner
Sin licencia19 ago 2026 · métricas 2.10.0
Go
Ullaakut/nmap
Idiomatic nmap library for go developers
MIT30 jul 2026 · métricas 2.10.0
PyPI
gamehunterkaan/autopwn-suite
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
Licencia propia17 jul 2026 · métricas 2.10.0
Go
RAJANAGORI/Nightingale
Nightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes preconfigured with all essential tools and utilities required for efficient Vulnerability Assessment and Penetration Testing (VAPT), streamlining the setup process for security professionals.
GPL-3.04 ago 2026 · métricas 2.10.0
Go
go-appsec/interactsh-lite
Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)
MIT5 sept 2026 · métricas 2.10.0
Go
go-appsec/toolbox
Collaborative application security testing between humans and agents via CLI and MCP
MIT17 jul 2026 · métricas 2.10.0
PyPI
ASCIT31/Dark-Moon
Autonomous AI pentesting engine, continuous offensive security across web, cloud, identity, CI/CD, IaC, databases, Active Directory, Kubernetes and IoT firmware. Agentic reasoning plus real exploit execution deliver proof-based vulnerabilities. Privacy gateway: the LLM never sees your real IPs, hosts or creds, nothing leaves your perimeter.
GPL-3.04 ago 2026 · métricas 2.10.0
npm
pentoshi007/clai
Free AI coding & pentesting agent for your terminal
MIT5 sept 2026 · métricas 2.10.0
Go
chainreactors/aiscan
AI-driven pi-like agent for cyber security — single binary for pentest, red team, bug bounty
AGPL-3.028 jul 2026 · métricas 2.10.0
Go
go-harden/interactsh-lite
Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)
MIT17 jul 2026 · métricas 2.10.0
PyPI
Mattmorris-dev/netwatch-sec
All-In-One Network Security Dashboard
Licencia propia26 jul 2026 · métricas 2.10.0
PyPI
raccioly/websec-validator
Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.
MIT31 jul 2026 · métricas 2.10.0
Go
ddddddO/packemon
Packet monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux
BSD-2-Clause20 jul 2026 · métricas 2.10.0
—
hahwul/gori
A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.
Apache-2.011 ago 2026 · métricas 2.10.0