PyPI
blacklanternsecurity/bbot
The recursive internet scanner for hackers. 🧡
AGPL-3.0Aug 11, 2026 · metrics 2.10.0
All tags
Catalogue tag
#pentesting
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
66 records
npm
promptfoo/promptfoo
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
MITAug 5, 2026 · metrics 2.10.0
—
OWASP/mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
CC-BY-SA-4.0Aug 3, 2026 · metrics 2.10.0
PyPI · Go · npm
PurpleAILAB/Decepticon
Autonomous Hacking Agent for Red Team
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm · RubyGems
dradis/dradis-ce
Dradis Framework: Collaboration and reporting for IT Security teams
GPL-2.0Sep 5, 2026 · metrics 2.10.0
—
owasp-noir/noir
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
MITAug 4, 2026 · metrics 2.10.0
Go
praetorian-inc/nerva
Fast service fingerprinting CLI for 170+ protocols (TCP/UDP/SCTP) - built by Praetorian
Apache-2.0Jul 17, 2026 · metrics 2.10.0
PyPI
soxoj/maigret
🕵️♂️ Collect a dossier on a person by username from 3000+ sites
MITAug 5, 2026 · metrics 2.10.0
PyPI
sherlock-project/sherlock
Hunt down social media accounts by username across social networks
MITAug 4, 2026 · metrics 2.10.0
npm
pensarai/apex
AI-powered offensive security testing using autonomous agents, directly in your terminal.
Apache-2.0Sep 6, 2026 · metrics 2.10.0
npm
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
AGPL-3.0Aug 5, 2026 · metrics 2.10.0
Go · PyPI
adithyan-ak/AgentHound
Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
PyPI
infobyte/faraday
Open Source Vulnerability Management Platform
GPL-3.0Aug 29, 2026 · metrics 2.10.0
Go
ffuf/ffuf
Fast web fuzzer written in Go
MITAug 5, 2026 · metrics 2.10.0
PyPI
androguard/androguard
Reverse engineering and pentesting for Android applications
Apache-2.0Aug 12, 2026 · metrics 2.10.0
npm
Null-Square/Null-CLi
Open-source AI pentest and compliance-readiness CLI by NullSquare.
Custom licenseAug 4, 2026 · metrics 2.10.0
PyPI · crates.io
maurosoria/dirsearch
Web path scanner
No licenseAug 19, 2026 · metrics 2.10.0
Go
Ullaakut/nmap
Idiomatic nmap library for go developers
MITJul 30, 2026 · metrics 2.10.0
PyPI
gamehunterkaan/autopwn-suite
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
Custom licenseJul 17, 2026 · metrics 2.10.0
Go
RAJANAGORI/Nightingale
Nightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes preconfigured with all essential tools and utilities required for efficient Vulnerability Assessment and Penetration Testing (VAPT), streamlining the setup process for security professionals.
GPL-3.0Aug 4, 2026 · metrics 2.10.0
Go
go-appsec/interactsh-lite
Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)
MITSep 5, 2026 · metrics 2.10.0
Go
go-appsec/toolbox
Collaborative application security testing between humans and agents via CLI and MCP
MITJul 17, 2026 · metrics 2.10.0
PyPI
ASCIT31/Dark-Moon
Autonomous AI pentesting engine, continuous offensive security across web, cloud, identity, CI/CD, IaC, databases, Active Directory, Kubernetes and IoT firmware. Agentic reasoning plus real exploit execution deliver proof-based vulnerabilities. Privacy gateway: the LLM never sees your real IPs, hosts or creds, nothing leaves your perimeter.
GPL-3.0Aug 4, 2026 · metrics 2.10.0
npm
pentoshi007/clai
Free AI coding & pentesting agent for your terminal
MITSep 5, 2026 · metrics 2.10.0
Go
chainreactors/aiscan
AI-driven pi-like agent for cyber security — single binary for pentest, red team, bug bounty
AGPL-3.0Jul 28, 2026 · metrics 2.10.0
Go
go-harden/interactsh-lite
Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)
MITJul 17, 2026 · metrics 2.10.0
PyPI
Mattmorris-dev/netwatch-sec
All-In-One Network Security Dashboard
Custom licenseJul 26, 2026 · metrics 2.10.0
PyPI
raccioly/websec-validator
Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.
MITJul 31, 2026 · metrics 2.10.0
Go
ddddddO/packemon
Packet monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux
BSD-2-ClauseJul 20, 2026 · metrics 2.10.0
—
hahwul/gori
A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.
Apache-2.0Aug 11, 2026 · metrics 2.10.0