#pentesting

An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.

The ultimate WinRM shell for hacking/pentesting

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

Burp Suite plugin for the Dradis Framework

Find S3 AWS/GCP/Azure buckets while surfing. S3DNS acts as DNS server, follows CNAMEs and matches any bucket pattern

🚀 Caido releases, wiki and roadmap

Dradis connector for the Acunetix scanner

Nessus plugin for the Dradis Framework

All-In-One Network Security Dashboard

Metasploit Framework plugin for the Dradis Framework

Nikto plugin for the Dradis Framework

Qualys plugin for the Dradis Framework

ZAP plugin for the Dradis Framework

A Go library for parsing and decrypting macOS Keychain files (login.keychain-db)

Brakeman scanner plugin for the Dradis Framework

A CVSSv4 score calculator for the Dradis Framework

Nexpose plugin for the Dradis Framework

Dradis connector for the AppSpider (was NTOSpider) scanner

OpenVAS plugin for the Dradis Framework

23-tool MCP server for CVE & vulnerability intelligence. NVD, EPSS, CISA KEV, GitHub Advisory, OSV — unified in one server. Risk scoring, bulk triage, exploit search. 2 dependencies, runs with npx.

Next generation web scanner

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

The perfect butler for pentesters, bug-bounty hunters and security researchers

Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.