PyPI · Go · npm
PurpleAILAB/Decepticon
Autonomous Hacking Agent for Red Team
Apache-2.0Aug 28, 2026 · metrics 2.10.0
All tags
Catalogue tag
#penetration-testing
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
55 records
Go
Ullaakut/cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
MITSep 18, 2026 · metrics 2.10.0
Go · Maven
praetorian-inc/titus
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
CyberStrikeus/CyberStrike
Open-source AI-powered offensive security harness for automated penetration testing.
AGPL-3.0Sep 13, 2026 · metrics 2.10.0
npm · RubyGems
dradis/dradis-ce
Dradis Framework: Collaboration and reporting for IT Security teams
GPL-2.0Oct 22, 2026 · metrics 2.10.0
PyPI
usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
asamassekou10/ship-safe
The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.
MITOct 22, 2026 · metrics 2.10.0
PyPI
infobyte/faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
GPL-3.0Oct 21, 2026 · metrics 2.10.0
npm
pensarai/apex
AI-powered offensive security testing using autonomous agents, directly in your terminal.
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Go
praetorian-inc/brutus
Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative with native nerva/naabu pipeline integration.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
Go
goshs-labs/goshs
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
MITSep 25, 2026 · metrics 2.10.0
Go
controlplaneio/sandbox-probe
Agentic sandbox enumeration: find security issues, and seed escape automation.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI · crates.io
maurosoria/dirsearch
Web path scanner
No licenseOct 19, 2026 · metrics 2.10.0
Go · npm
xalgorix/xalgorix
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
Apache-2.0Sep 9, 2026 · metrics 2.10.0
RubyGems
0dayInc/pwn
PWN is an open security automation framework that aims to stand on the shoulders of security giants, promoting trust and innovation.
MITOct 22, 2026 · metrics 2.10.0
npm · Go · PyPI
Armur-Ai/Pentest-Swarm-AI
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
AGPL-3.0Sep 28, 2026 · metrics 2.10.0
NuGet
MichaelGrafnetter/DSInternals
Directory Services Internals (DSInternals) PowerShell Module and Framework
MITSep 15, 2026 · metrics 2.10.0
Go
go-appsec/toolbox
Collaborative application security testing between humans and agents via CLI and MCP
MITSep 19, 2026 · metrics 2.10.0
npm
pentoshi007/clai
Free AI coding & pentesting agent for your terminal
MITOct 21, 2026 · metrics 2.10.0
npm
Null-Square/Null-CLi
Open-source AI pentest and compliance-readiness CLI by NullSquare.
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
Ullaakut/nmap
Idiomatic nmap library for go developers
MITSep 14, 2026 · metrics 2.10.0
Go
go-appsec/interactsh-lite
Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)
MITSep 10, 2026 · metrics 2.10.0
PyPI
GamehunterKaan/AutoPWN-Suite
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
Custom licenseSep 9, 2026 · metrics 2.10.0
Go
RAJANAGORI/Nightingale
Nightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes preconfigured with all essential tools and utilities required for efficient Vulnerability Assessment and Penetration Testing (VAPT), streamlining the setup process for security professionals.
GPL-3.0Sep 16, 2026 · metrics 2.10.0
Go
zan8in/afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
MITAug 28, 2026 · metrics 2.10.0
PyPI
ASCIT31/Dark-Moon
Autonomous AI pentesting engine across web, cloud, identity, CI/CD, IaC, databases, Active Directory, Kubernetes, IoT firmware and AI/LLM endpoints (OWASP LLM Top 10). Real exploits with proof for every finding. Privacy gateway: the LLM never sees your real IPs, hosts or creds; nothing leaves your perimeter.
GPL-3.0Sep 16, 2026 · metrics 2.10.0
—
mukul975/Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
KryptSec/oasis
Open-source AI security benchmarking CLI. Measure how AI models perform offensive security tasks with MITRE ATT&CK analysis and KSM scoring.
MITOct 20, 2026 · metrics 2.10.0
—
0xSteph/pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
MITSep 16, 2026 · metrics 2.10.0