PyPI · Go · npm
PurpleAILAB/Decepticon
Autonomous Hacking Agent for Red Team
Apache-2.0Aug 28, 2026 · metrics 2.10.0
All tags
Catalogue tag
#pentest
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
42 records
PyPI
usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI · npm
freelabz/secator
secator - the pentester's swiss knife
Custom licenseSep 18, 2026 · metrics 2.10.0
Go
praetorian-inc/brutus
Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative with native nerva/naabu pipeline integration.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
Go
CompassSecurity/pipeleek
Pipeleek scans CI/CD logs and artifacts to detect leaked secrets and pivot from them
AGPL-3.0Sep 11, 2026 · metrics 2.10.0
Go · npm
xalgorix/xalgorix
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
Apache-2.0Sep 9, 2026 · metrics 2.10.0
npm · Go · PyPI
Armur-Ai/Pentest-Swarm-AI
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
AGPL-3.0Sep 28, 2026 · metrics 2.10.0
npm
pentoshi007/clai
Free AI coding & pentesting agent for your terminal
MITOct 21, 2026 · metrics 2.10.0
npm
Null-Square/Null-CLi
Open-source AI pentest and compliance-readiness CLI by NullSquare.
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
c0tton-fluff/caido-mcp-server
MCP server for Caido proxy integration. Enables AI assistants like Claude Code to browse, analyse, and interact with HTTP traffic.
MITSep 18, 2026 · metrics 2.10.0
Go
Chocapikk/wpprobe
A fast WordPress plugin enumeration tool
MITOct 21, 2026 · metrics 2.10.0
Go
zan8in/afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
MITAug 28, 2026 · metrics 2.10.0
PyPI
ra1nb0rn/search_vulns
A modular tool to search for known vulnerabilities, exploits and more across various data sources
MITSep 10, 2026 · metrics 2.10.0
PyPI
manthanghasadiya/mcpsec
An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.
MITSep 14, 2026 · metrics 2.10.0
—
0xSteph/pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
MITSep 16, 2026 · metrics 2.10.0
PyPI
raccioly/websec-validator
Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.
MITSep 14, 2026 · metrics 2.10.0
Go
sayseven7/frameseven
Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go
MITSep 17, 2026 · metrics 2.10.0
RubyGems
Hackplayers/evil-winrm
The ultimate WinRM shell for hacking/pentesting
LGPL-3.0Aug 28, 2026 · metrics 2.10.0
PyPI
GoSecure/pyrdp
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
GPL-3.0Sep 9, 2026 · metrics 2.10.0
PyPI · npm
l4rm4nd/PyADRecon
Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain.
MITSep 18, 2026 · metrics 2.10.0
RubyGems
urbanadventurer/WhatWeb
Next generation web scanner
GPL-2.0Aug 28, 2026 · metrics 2.10.0
Go
djnnvx/yellow
pentest companion on the CLI (project mirror)
MITSep 29, 2026 · metrics 2.10.0
Go
Slashas632/goPort
Fast concurrent TCP/UDP port scanner in Go with Lua plugin support
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
dhicoc/dsh-reverse-skill
Complete reverse-skill (87 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.
MITSep 21, 2026 · metrics 2.10.0
Go
glitchedgitz/grroxy
A cyber security toolkit blending manual testing with AI Agents
MITSep 17, 2026 · metrics 2.10.0
npm
3516634930/Payloader
渗透测试Payload速查平台 | Pentest Payload Quick Reference | XSS/SQLi/SSRF/RCE | React+TypeScript
AGPL-3.0Sep 11, 2026 · metrics 2.10.0
PyPI · npm
Stiimy/briar
🥀 Autonomous AI Pentester — find vulns before hackers do. Free, open source, Ollama-powered.
Custom licenseSep 10, 2026 · metrics 2.10.0
PyPI · npm
l4rm4nd/PyADRecon-ADWS
An implementation of PyADRecon using ADWS instead of LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain. Evades EDR detections through ADWS.
MITOct 20, 2026 · metrics 2.10.0
npm
ArisRoman/cyberaudit-skill
Universal security audit skill for AI agents. 52 pure Markdown files encoding 15 years of pentest expertise — web & mobile security, OWASP-aligned, CVSS scoring, compliance checks, zero dependencies.
No licenseSep 13, 2026 · metrics 2.10.0