#pentest (30 Repositories)
Ranked open-source repositories tagged with #pentest, scored by pull request acceptance likelihood and maintainer engagement velocity.
47.0%
35.3h
30 repositories tagged #pentest
yaklang/yakit
Cyber Security ALL-IN-ONE Platform
htrgouvea/spellbook
Framework for rapid development of offensive security tools
BlackArch/blackarch
An ArchLinux based distribution for penetration testers and security researchers.
oasm-platform/open-asm
AI-powered open-source platform for Attack Surface Management (OASM)
g0h4n/RustHound-CE
Active Directory data ingestor for BloodHound Community Edition written in Rust. 🦀
wgpsec/AboutSecurity
Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。
owtf/owtf
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
CommonHuman-Lab/nyxstrike
AI Powered penetration testing Platform for offensive security research
c0tton-fluff/caido-mcp-server
MCP server for Caido proxy integration. Enables AI assistants like Claude Code to browse, analyse, and interact with HTTP traffic.
BitterSecurity/Decepticon
Autonomous Hacking Agent for Red Team
scipag/nac_bypass
Script collection to bypass Network Access Control (NAC, 802.1x)
Chocapikk/wpprobe
A fast WordPress plugin enumeration tool
anmolksachan/AI-ML-Free-Resources-for-Security-and-Prompt-Injection
AI/ML Pentesting Roadmap for Beginners
edoardottt/favirecon
Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.
howmp/dsh-pentest
面向 DeepSeek Harness（dsh）的渗透测试模式 @CloverSecLabs
lolc2/lolc2.github.io
lolC2 is a collection of C2 frameworks that leverage legitimate services to evade detection
swisskyrepo/InternalAllTheThings
Active Directory and Internal Pentest Cheatsheets
swisskyrepo/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
sensepost/objection
📱 objection - runtime mobile exploration
Ch0pin/medusa
Mobile Edge-Dynamic Unified Security Analysis
six2dez/reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
ksg97031/frida-gadget
Automated tool for patching APKs to enable the use of Frida gadget by downloading the library and injecting code into the main activity.
transilienceai/communitytools
Open-source Claude Code skills, agents, and slash commands for AI-powered penetration testing, bug bounty hunting, and security research
sspsec/Scan-Spring-GO
Spring 全家桶漏洞扫描工具 | 17 个漏洞模块 + MCP 服务端（AI 自动化渗透）| Go 实现
christophetd/CloudFlair
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera
🎩 🤟🏻 [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337
cdxiaodong/cain-agent
Real-world AI penetration testing engineer for authorized assessments — built-in cloud module covering AWS/Azure/GCP + Aliyun/Tencent/Huawei clouds. Built on Claude Agent SDK
KKingZero/Zypheron-CLI
ZYPHERON CLI Powerful command-line interface for automated security testing. Integrate ZYPHERON into your DevSecOps pipeline. Get CLI
six2dez/dorks_hunter
Simple Google Dorks search tool
GoSecure/pyrdp
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact