Go
MyCode83/godirb
Fast and easy-to-use directory brute-forcer written in Go.
MITSep 8, 2026 · metrics 2.10.0
All tags
Catalogue tag
#pentesting
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
81 records
Go
Slashas632/goPort
Fast concurrent TCP/UDP port scanner in Go with Lua plugin support
Apache-2.0Oct 18, 2026 · metrics 2.10.0
—
momenbasel/keyFinder
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
MITSep 14, 2026 · metrics 2.10.0
Go
thelicato/secbutler
The perfect butler for pentesters, bug-bounty hunters and security researchers
MITSep 13, 2026 · metrics 2.10.0
PyPI
infinition/Bjorn
Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.
MITSep 16, 2026 · metrics 2.10.0
Go
spiperac/shiv
Web intercepter, repeater and proxy.
GPL-3.0Sep 7, 2026 · metrics 2.10.0
crates.io
Keysweep/Keysweep
A fast, modular security testing toolkit written in Rust for bruteforcing, fuzzing, and hash cracking.
MITSep 12, 2026 · metrics 2.10.0
PyPI · npm
l4rm4nd/PyADRecon-ADWS
An implementation of PyADRecon using ADWS instead of LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain. Evades EDR detections through ADWS.
MITOct 20, 2026 · metrics 2.10.0
npm · PyPI
matank001/Moxy
Moxy is an open-source DAST tool designed for modern web application security testing. It provides an easy-to-use interface with agentic capabilities to assist and automate pentesting workflows.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go
safetylab/ShadowSecurityScanner
Free, open-source network vulnerability scanner & penetration testing tool that ranks findings by real-world exploitability (EPSS + CISA KEV). Single desktop app for Windows, macOS, Linux. No cloud, no telemetry. MIT.
MITSep 12, 2026 · metrics 2.10.0
PyPI
Hackerest/pwneye
Your ONVIF and RTSP camera companion for discovering and hacking real-world security cameras 🎥
GPL-3.0Sep 11, 2026 · metrics 2.10.0
Go
11lunaric11/securitychecker
Recon tool for pentesters & bug bounty hunters: check robots.txt, security.txt (RFC 9116) and /.well-known/ across many targets. CLI + web UI, single static Go binary.
MITSep 10, 2026 · metrics 2.10.0
—
gwen001/vhost-brute
A PHP tool to brute force vhost configured on a server.
MITSep 18, 2026 · metrics 2.10.0
Go
mehulgupta1/subhound
Advanced subdomain enumeration for Linux & macOS — one Go binary that orchestrates subfinder, dnsx, httpx, asnmap & more into a fast discover→resolve→probe pipeline.
No licenseOct 19, 2026 · metrics 2.10.0
Go
rix4uni/gf
A wrapper around grep, to help you grep for things
MITSep 8, 2026 · metrics 2.10.0
PyPI
aaaguirrep/offensive-docker
Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.
MITSep 16, 2026 · metrics 2.10.0
—
agnusdei1207/pentesting-public
A High-Efficiency Penetration-Testing Agent
Custom licenseSep 9, 2026 · metrics 2.10.0
Go
joda32/dnswizard
A configurable DNS proxy for lab and development work. Point a name at your laptop without editing hosts files everywhere.
AGPL-3.0Sep 18, 2026 · metrics 2.10.0
—
Frissi0n/GTFONow
Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
MITSep 16, 2026 · metrics 2.10.0
Go
iss4cf0ng/OpenShell
OpenShell is a lightweight, open-source reverse shell management server written in Go.
MITSep 19, 2026 · metrics 2.10.0
npm
ReversecLabs/awspx
A graph-based tool for visualizing effective access and resource relationships in AWS environments.
GPL-3.0Sep 16, 2026 · metrics 2.10.0