npm · PyPI
glferreira-devsecops/Cascavel
🐍 Cascavel — The zero-friction offensive security engine. Automate Red Team scans, validate exposures (CTEM), and generate compliance reports in one command.
Custom licenseSep 19, 2026 · metrics 2.10.0
All tags
Catalogue tag
#penetration-testing
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
55 records
Go
sayseven7/frameseven
Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go
MITSep 17, 2026 · metrics 2.10.0
Go
ddddddO/packemon
Packet monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux
BSD-2-ClauseSep 11, 2026 · metrics 2.10.0
npm
Hyperyond/Hover
Open-source Vibe Testing suite: an MCP server for the coding agent you already run, a VS Code review cockpit, and CI. Your agent explores your app and crystallizes each flow into a plain @playwright/test spec you own — record == replay, runs in CI with zero AI.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
crates.io
santhreal/wafrift
WAF evasion testing toolkit. Grammar + encoding mutation, dialect-specific bypasses, evolutionary search, per-WAF gene-bank persistence. Rust.
Apache-2.0Oct 4, 2026 · metrics 2.10.0
Go
suifei/fridare
强大的 Frida 重打包工具，用于 iOS 和 Android。轻松修改 Frida 特征，增强隐蔽性，绕过检测。简化逆向工程和安全测试。Powerful Frida repackaging tool for iOS and Android. Easily modify Frida servers to enhance stealth and bypass detection. Streamlines reverse engineering and security testing.
MITSep 20, 2026 · metrics 2.10.0
—
Hacking-the-Cloud/hackingthe.cloud
An encyclopedia for offensive and defensive security knowledge in cloud native technologies.
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
NodePassProject/nodepass
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
BSD-3-ClauseSep 5, 2026 · metrics 2.10.0
PyPI
netanelcyber/AdPentestAI-Python
No repository description published.
MITOct 10, 2026 · metrics 2.10.0
RubyGems
urbanadventurer/WhatWeb
Next generation web scanner
GPL-2.0Aug 28, 2026 · metrics 2.10.0
Go
MikeRoss27/scanforge
One CLI to orchestrate your entire pentest and bug bounty recon workflow.
MITSep 20, 2026 · metrics 2.10.0
npm
iAMv1/omnisectester
Nation-state grade, defense-in-depth security testing framework. Tests web apps, extensions, desktop, mobile, cloud, AI/LLM, hardware, and supply chain from a single CLI.
MITSep 22, 2026 · metrics 2.10.0
npm
nsasoft/nsauditor-ai
NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration. Zero data exfiltration. MIT licensed.
MITSep 6, 2026 · metrics 2.10.0
npm
3516634930/Payloader
渗透测试Payload速查平台 | Pentest Payload Quick Reference | XSS/SQLi/SSRF/RCE | React+TypeScript
AGPL-3.0Sep 11, 2026 · metrics 2.10.0
npm
nsasoft/nsauditor-ai-agent-skill
AI Agent Skill for NSAuditor AI — gives any AI coding agent built-in knowledge of NSAuditor's MCP tools, schemas, plugins, and security audit workflows. Works with Claude Code, Cursor, Windsurf, and any MCP-aware agent.
MITSep 6, 2026 · metrics 2.10.0
Go
safetylab/ShadowSecurityScanner
Free, open-source network vulnerability scanner & penetration testing tool that ranks findings by real-world exploitability (EPSS + CISA KEV). Single desktop app for Windows, macOS, Linux. No cloud, no telemetry. MIT.
MITSep 12, 2026 · metrics 2.10.0
PyPI
Hackerest/pwneye
Your ONVIF and RTSP camera companion for discovering and hacking real-world security cameras 🎥
GPL-3.0Sep 11, 2026 · metrics 2.10.0
Go
rix4uni/gf
A wrapper around grep, to help you grep for things
MITSep 8, 2026 · metrics 2.10.0
—
agnusdei1207/pentesting-public
A High-Efficiency Penetration-Testing Agent
Custom licenseSep 9, 2026 · metrics 2.10.0
crates.io
nullps1/nullscan
Fast, cross-platform TCP port scanner with service detection and vulnerability assessment. Built in Rust for cybersecurity professionals and network administrators.
MITSep 18, 2026 · metrics 2.10.0
Go
pedroalbanese/bruteforce-salted-openssl
Cross-platform multicore bruteforce-salted-openssl in Pure Go
ISCSep 30, 2026 · metrics 2.10.0
Go
willygoid/fofa-grabber
A powerful Golang tool to fetch and export FOFA.info search results via API with real-time saving, concurrent requests, and multiple output formats (CSV, JSON, TXT)
MITSep 10, 2026 · metrics 2.10.0
Go
iss4cf0ng/OpenShell
OpenShell is a lightweight, open-source reverse shell management server written in Go.
MITSep 19, 2026 · metrics 2.10.0
Go
hackthacker-sec/recontool
Unified reconnaissance CLI for subdomain discovery, HTTP probing, asset discovery, OSINT, and Wayback data combining subfinder, httpx, chaos, uncover, and Wayback CDX in one tool
MITSep 9, 2026 · metrics 2.10.0
Go
ps1-blacklist/wpfather
WPFather - WordPress Vulnerability Scanner & Security Recon Tool with 16 Modules | Zero Config Single Binary
Custom licenseSep 8, 2026 · metrics 2.10.0