npm
CyberStrikeus/CyberStrike
Open-source AI-powered offensive security harness for automated penetration testing.
AGPL-3.013 вер. 2026 р. · метрики 2.10.0
Усі теги
Тег каталогу
#bug-bounty
Усі репозиторії публічного реєстру з цим тегом — із тем GitHub або ключових слів, які публікують їхні реєстри пакетів. Здоров'я вимірюється за тією ж версіонованою методологією, що й решта реєстру.
29 записів
PyPI
usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Apache-2.016 вер. 2026 р. · метрики 2.10.0
PyPI · crates.io
maurosoria/dirsearch
Web path scanner
Без ліцензії19 жовт. 2026 р. · метрики 2.10.0
Go · npm
xalgorix/xalgorix
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
Apache-2.09 вер. 2026 р. · метрики 2.10.0
npm · Go · PyPI
Armur-Ai/Pentest-Swarm-AI
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
AGPL-3.028 вер. 2026 р. · метрики 2.10.0
Go
Chocapikk/wpprobe
A fast WordPress plugin enumeration tool
MIT21 жовт. 2026 р. · метрики 2.10.0
Go
vigolium/vigolium
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision
Власна ліцензія8 вер. 2026 р. · метрики 2.10.0
Go
zan8in/afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
MIT28 серп. 2026 р. · метрики 2.10.0
—
0xSteph/pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
MIT16 вер. 2026 р. · метрики 2.10.0
Go
cc1a2b/JShunter
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.
MIT6 вер. 2026 р. · метрики 2.10.0
npm · PyPI
glferreira-devsecops/Cascavel
🐍 Cascavel — The zero-friction offensive security engine. Automate Red Team scans, validate exposures (CTEM), and generate compliance reports in one command.
Власна ліцензія19 вер. 2026 р. · метрики 2.10.0
Go · npm
Autumn-27/ScopeSentry
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
Без ліцензії18 вер. 2026 р. · метрики 2.10.0
PyPI
s0md3v/wappalyzer-next
detect technologies with wappalyzer alternative
GPL-3.030 вер. 2026 р. · метрики 2.10.0
Go
MikeRoss27/scanforge
One CLI to orchestrate your entire pentest and bug bounty recon workflow.
MIT20 вер. 2026 р. · метрики 2.10.0
npm
iAMv1/omnisectester
Nation-state grade, defense-in-depth security testing framework. Tests web apps, extensions, desktop, mobile, cloud, AI/LLM, hardware, and supply chain from a single CLI.
MIT22 вер. 2026 р. · метрики 2.10.0
—
momenbasel/keyFinder
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
MIT14 вер. 2026 р. · метрики 2.10.0
Go
dinosn/leaklens
Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery
Apache-2.016 вер. 2026 р. · метрики 2.10.0
npm
3516634930/Payloader
渗透测试Payload速查平台 | Pentest Payload Quick Reference | XSS/SQLi/SSRF/RCE | React+TypeScript
AGPL-3.011 вер. 2026 р. · метрики 2.10.0
crates.io
ethicalhackingplayground/pathbuster
A path-normalization pentesting tool.
MIT12 вер. 2026 р. · метрики 2.10.0
Go
CypherNova1337/paramvoid
Fast HTTP parameter discovery - finds the undocumented query and body parameters a server quietly accepts. Single static Go binary, bundled wordlist, no dependencies.
MIT13 жовт. 2026 р. · метрики 2.10.0
Go
11lunaric11/securitychecker
Recon tool for pentesters & bug bounty hunters: check robots.txt, security.txt (RFC 9116) and /.well-known/ across many targets. CLI + web UI, single static Go binary.
MIT10 вер. 2026 р. · метрики 2.10.0
Go
mehulgupta1/subhound
Advanced subdomain enumeration for Linux & macOS — one Go binary that orchestrates subfinder, dnsx, httpx, asnmap & more into a fast discover→resolve→probe pipeline.
Без ліцензії19 жовт. 2026 р. · метрики 2.10.0
Go
rix4uni/gf
A wrapper around grep, to help you grep for things
MIT8 вер. 2026 р. · метрики 2.10.0
PyPI
aaaguirrep/offensive-docker
Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.
MIT16 вер. 2026 р. · метрики 2.10.0
Go
LocaMartin/replacex
Enhanced qsreplace-style CLI for replacing, appending, and deduplicating URL query values.
Без ліцензії19 жовт. 2026 р. · метрики 2.10.0
npm
LasCC/HackTools
The all-in-one browser extension for offensive security professionals 🛠
Без ліцензії16 вер. 2026 р. · метрики 2.10.0
Go
hackthacker-sec/recontool
Unified reconnaissance CLI for subdomain discovery, HTTP probing, asset discovery, OSINT, and Wayback data combining subfinder, httpx, chaos, uncover, and Wayback CDX in one tool
MIT9 вер. 2026 р. · метрики 2.10.0
npm
xaccefy/pi-xpi
XPI — offensive security tools for Pi Agent: casefile, exploit search, web lookup, code intelligence, todo tracker
MIT6 вер. 2026 р. · метрики 2.10.0
Go
ps1-blacklist/wpfather
WPFather - WordPress Vulnerability Scanner & Security Recon Tool with 16 Modules | Zero Config Single Binary
Власна ліцензія8 вер. 2026 р. · метрики 2.10.0