#pentesting (30 Repositories)
Ranked open-source repositories tagged with #pentesting, scored by pull request acceptance likelihood and maintainer engagement velocity.
71.8%
50.3h
30 repositories tagged #pentesting
OWASP/wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
hashtopolis/server
Hashtopolis - distributed password cracking with Hashcat
CERT-Polska/Artemis
A modular vulnerability scanner with automatic report generation capabilities.
e-m-b-a/emba
EMBA - The firmware security analyzer
pensarai/apex
AI-powered offensive security testing using autonomous agents, directly in your terminal.
factionsecurity/faction
Pen Test Report Generation and Assessment Collaboration
praetorian-inc/nerva
Fast service fingerprinting CLI for 170+ protocols (TCP/UDP/SCTP) - built by Praetorian
BlackArch/blackarch
An ArchLinux based distribution for penetration testers and security researchers.
NovaCode37/Prism-platform
Self-hosted OSINT platform. Point it at a domain, IP, email, phone or username and 26 modules run in parallel: WHOIS, DNS, threat intel, breaches, username search. One dashboard, an exposure score, an entity graph, HTML and PDF reports.
chainreactors/aiscan
AI-driven pi-like agent for cyber security — single binary for pentest, red team, bug bounty
GamehunterKaan/AutoPWN-Suite
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
Nariod/RustPacker
Template-based shellcode packer written in Rust, with indirect syscall support. Made with <3 for pentesters.
HackTricks-wiki/hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
m14r41/PentestingEverything
Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...
CommonHuman-Lab/nyxstrike
AI Powered penetration testing Platform for offensive security research
ipa-lab/hackingBuddyGPT
Helping Ethical Hackers use LLMs in 50 Lines of Code or less..
maurosoria/dirsearch
Web path scanner
NetSPI/gcpwn
Pentesting framework for GCP & Google Workspace that enumerates/downloads data that feeds into a BloodHound Opengraph model. Includes credential management, workspace management, exploit scripts, etc.
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
OWASP/mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
BitterSecurity/Decepticon
Autonomous Hacking Agent for Red Team
chainreactors/cyber-harness
AI-driven pi-like agent for cyber security — single binary for pentest, red team, bug bounty
Ullaakut/cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
j3ssie/osmedeus
A Modern Orchestration Engine for Security
reconmap/reconmap
Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.
Mr-xn/BurpSuite-collections
有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file
ffuf/ffuf
Fast web fuzzer written in Go
yv1ing/Z3r0
AI-native red-team workbench for authorized penetration testing and vulnerability research, with specialist agents, sandboxed tooling, evidence records, and replayable timelines.
r4ulcl/WiFiChallengeLab-docker
Virtualized Wi-Fi pentesting laboratory without the need for physical Wi-Fi cards, using mac80211_hwsim. Docker version of WiFiChallenge Lab with modifications in the challenges and improved stability. Ubuntu virtual machine with virtualized networks and clients to perform Wi-Fi attacks on OPN, WPA2, WPA3 and Enterprise networks.
Teapot174/ESP-HACK
Open Source ESP32 Project for Pentesting.