Kwetsbaarhedenbeheer

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

This repository contains the scanner component for Greenbone Community Edition.

EMBA - The firmware security analyzer

OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

hydra

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Gather and update all available and newest CVEs with their PoC.

An all-in-one hacking tool to remotely take over Android devices.

All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.

Open source vulnerability DB and triage service.

Pentest Report Generator

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Cameradar hacks its way into RTSP videosurveillance cameras

A AI general-purpose state-space search engine, validated first on autonomous penetration testing.

A collection of various awesome lists for hackers, pentesters and security researchers

Automated Penetration Testing Agentic Framework Powered by Large Language Models

Open Source Cloud Native Application Protection Platform (CNAPP)

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

Dradis Framework: Collaboration and reporting for IT Security teams

Pen Test Report Generation and Assessment Collaboration

Set of tools to audit SIP based VoIP Systems

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

A list of web application security

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

SIP Security Assessment Framework for VoIP Pentesters. Presented at DEFCON, BlackHat & Offzone.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Study Notes For Web Hacking / Web安全学习笔记

AI-powered bug bounty hunting toolkit that works with or without subscription.

Knock Subdomain Scan

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

Open-source AI-powered offensive security harness for automated penetration testing.

802.11 Attack Tool

🧵 CLI tool for directly patching container images!

This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org

Open Source Vulnerability Management Platform

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.

Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.

Mobile Edge-Dynamic Unified Security Analysis

The SpecterOps project management and reporting engine

Automatic SSTI detection tool with interactive interface

SSH-MITM - ssh audits made simple