#penetration-testing-tools (18 Repositories)
Ranked open-source repositories tagged with #penetration-testing-tools, scored by pull request acceptance likelihood and maintainer engagement velocity.
37.1%
28.2h
18 repositories tagged #penetration-testing-tools
Netw0rkNoob/VulnClaw
基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。
factionsecurity/faction
Pen Test Report Generation and Assessment Collaboration
Armur-Ai/Pentest-Swarm-AI
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
samugit83/redamon
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
ctrsploit/ctrsploit
A penetration toolkit for container environment
drk1wi/Modlishka
Modlishka. Reverse Proxy.
cdk-team/CDK
📦 Make security testing of K8s, Docker, and Containerd easier.
BishopFox/cloudfox
Automating situational awareness for cloud penetration tests.
itaymigdal/Nimbo-C2
Nimbo-C2 is yet another (simple and lightweight) C2 framework
redeye-framework/Redeye
Redeye is a tool intended to help you manage your data during a pentest operation
Stratus-Security/Subdominator
The Internets #1 Subdomain Takeover Tool
helich0pper/Karkinos
Penetration Testing and Hacking CTF's Swiss Army Knife with: Reverse Shell Handling - Encoding/Decoding - Encryption/Decryption - Cracking Hashes / Hashing
cyberark/Evasor
A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies
CervantesSec/cervantes
Cervantes is an open-source, collaborative platform designed specifically for pentesters and red teams. It serves as a comprehensive management tool, streamlining the organization of projects, clients, vulnerabilities, and reports in a single, centralized location.
msrofficial/WiFuX
An Educational tool for WiFi penetration using Termux/Linux. ( Legal Use Only )
InfosecMatter/Minimalistic-offensive-security-tools
A repository of tools for pentesting of restricted and isolated environments.
Esc4iCEscEsc/skanuvaty
Dangerously fast DNS/network/port scanner
R0X4R/Garud
An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.