All tags
Catalogue tag

#pentesting

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

81 records
Tagged “pentesting”Ranked by health index
npm
97Exceptionalhealth index
promptfoo/promptfoo
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
TypeScript★ 25.2K↓ 2.6M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
96Exceptionalhealth index
blacklanternsecurity/bbot
The recursive internet scanner for hackers. 🧡
Python★ 10.6K↓ 36.3K/moSep 17, 2026
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
—
94Exceptionalhealth index
OWASP/mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Python★ 13.2KSep 16, 2026
CC-BY-SA-4.0Sep 16, 2026 · metrics 2.10.0
PyPI · Go · npm
94Exceptionalhealth index
PurpleAILAB/Decepticon
Autonomous Hacking Agent for Red Team
Python · Cypher★ 5,348↓ 7,794/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Go
94Exceptionalhealth index
Ullaakut/cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
Go★ 5,213Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Packagist · PyPI
92Excellenthealth index
hashtopolis/server
Hashtopolis - distributed password cracking with Hashcat
PHP · Python · HTML★ 1,822Oct 19, 2026
GPL-3.0Oct 19, 2026 · metrics 2.10.0
PyPI
92Excellenthealth index
kaifcodec/user-scanner
🕵️‍♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 550+ actively maintained scan vectors (175+ email / 375+ username) for security research, investigations, and digital footprinting.
Python★ 4,727↓ 19.2K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
npm · RubyGems
91Excellenthealth index
dradis/dradis-ce
Dradis Framework: Collaboration and reporting for IT Security teams
Ruby · HTML★ 843Oct 22, 2026
GPL-2.0Oct 22, 2026 · metrics 2.10.0
PyPI
91Excellenthealth index
sherlock-project/sherlock
Hunt down social media accounts by username across social networks
Python★ 91.7K↓ 87.1K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
91Excellenthealth index
soxoj/maigret
🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites
Python · HTML★ 37.6K↓ 62.6K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI · npm
90Excellenthealth index
freelabz/secator
secator - the pentester's swiss knife
Python★ 1,310↓ 1,888/moSep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
Go
90Excellenthealth index
praetorian-inc/nerva
Fast service fingerprinting CLI for 170+ protocols (TCP/UDP/SCTP) - built by Praetorian
Go★ 359Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
npm
89Excellenthealth index
hackerai-tech/hackerai
Find and fix vulnerabilities by chatting with AI
TypeScript★ 716↓ 2,656/moSep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
PyPI
89Excellenthealth index
infobyte/faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
Python★ 6,809↓ 658/moOct 21, 2026
GPL-3.0Oct 21, 2026 · metrics 2.10.0
npm
88Excellenthealth index
pensarai/apex
AI-powered offensive security testing using autonomous agents, directly in your terminal.
TypeScript★ 319↓ 2,114/moOct 22, 2026
Apache-2.0Oct 22, 2026 · metrics 2.10.0
npm
87Excellenthealth index
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
TypeScript★ 48.1K↓ 5,619/moSep 16, 2026
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
Go · PyPI
86Excellenthealth index
adithyan-ak/AgentHound
Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.
Go · TypeScript★ 453Oct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
—
86Excellenthealth index
owasp-noir/noir
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
Crystal★ 1,426Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
—
84Excellenthealth index
PentHertz/RF-Swift
🚀 A powerful multi-platform RF toolbox that deploys specialized radio, hardware, and other security tools in seconds on Linux, Windows, and macOS - supporting x86_64, ARM64 (Raspberry Pi, Apple Silicon), and RISC-V architectures without disrupting your primary OS. 📡✨
Go · Shell★ 389Sep 26, 2026
GPL-3.0Sep 26, 2026 · metrics 2.10.0
PyPI
84Excellenthealth index
androguard/androguard
Reverse engineering and pentesting for Android applications
Python★ 6,253↓ 1.5M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI · crates.io
84Excellenthealth index
maurosoria/dirsearch
Web path scanner
Python · Rust★ 15K↓ 18.5K/moOct 19, 2026
No licenseOct 19, 2026 · metrics 2.10.0
Go
81Excellenthealth index
ffuf/ffuf
Fast web fuzzer written in Go
Go★ 16.7KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
78Goodhealth index
go-appsec/toolbox
Collaborative application security testing between humans and agents via CLI and MCP
Go★ 43Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
78Goodhealth index
pentoshi007/clai
Free AI coding & pentesting agent for your terminal
TypeScript★ 16↓ 53.9K/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
77Goodhealth index
Null-Square/Null-CLi
Open-source AI pentest and compliance-readiness CLI by NullSquare.
TypeScript · JavaScript★ 57↓ 30/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
77Goodhealth index
Ullaakut/nmap
Idiomatic nmap library for go developers
Go★ 1,050Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Go
75Goodhealth index
go-appsec/interactsh-lite
Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)
Go★ 3Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
PyPI
73Goodhealth index
GamehunterKaan/AutoPWN-Suite
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
Python · JavaScript★ 1,097↓ 137/moSep 9, 2026
Custom licenseSep 9, 2026 · metrics 2.10.0
Go
73Goodhealth index
RAJANAGORI/Nightingale
Nightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes preconfigured with all essential tools and utilities required for efficient Vulnerability Assessment and Penetration Testing (VAPT), streamlining the setup process for security professionals.
Shell · Dockerfile · Python★ 313Sep 16, 2026
GPL-3.0Sep 16, 2026 · metrics 2.10.0
PyPI
71Goodhealth index
ASCIT31/Dark-Moon
Autonomous AI pentesting engine across web, cloud, identity, CI/CD, IaC, databases, Active Directory, Kubernetes, IoT firmware and AI/LLM endpoints (OWASP LLM Top 10). Real exploits with proof for every finding. Privacy gateway: the LLM never sees your real IPs, hosts or creds; nothing leaves your perimeter.
Python · TypeScript · Shell★ 940Sep 16, 2026
GPL-3.0Sep 16, 2026 · metrics 2.10.0