Pentesting

A curated collection of 70 cybersecurity projects organized by difficulty tier (Foundations through Advanced) designed to teach practical security...

PentestingEverything is a comprehensive, searchable knowledge base for penetration testing and application security across 23 domains including web,...

Blackbird is a specialized OSINT (Open Source Intelligence) tool for searching usernames and emails across 600+ social platforms, designed for...

pentest-ai is an AI-driven penetration testing tool that verifies exploit findings by re-executing them rather than trusting scanner output,...

Metabigor is an OSINT reconnaissance tool written in Go that performs network discovery, certificate transparency searches, IP enrichment, and...

Claude-BugHunter is a specialized skill bundle for the Claude Code system that transforms Claude into a bug-hunting and red-team operator, bundling...

pentest-ai-agents is a collection of 50 Claude Code subagents that extend Claude into an offensive security research assistant, covering recon, web...

Cairn is a state-space search engine designed for AI-driven autonomous penetration testing and vulnerability discovery. It uses a blackboard...

Pentest Copilot is an AI-driven penetration testing agent that autonomously executes security tools on attack boxes, analyzes results, and iterates...

JADX-AI-MCP is a specialized MCP (Model Context Protocol) server and JADX plugin designed for security professionals and reverse engineers to analyze...

Decepticon is an autonomous red-team agent powered by LLMs that automates penetration testing and adversarial security engagements. It goes beyond...

NeuroSploit is an autonomous, multi-model penetration testing framework that uses LLMs to automate security assessments against URLs, source code,...

GoSearch is a Go-based OSINT tool that searches for usernames across 305+ websites and integrates with breach databases (HudsonRock, ProxyNova,...

reconFTW is an automated reconnaissance framework designed for bug bounty hunters and penetration testers to enumerate subdomains, perform security...

Custom AI Agent is a Burp Suite extension that integrates multiple AI backends (11 providers including Anthropic, Ollama, Gemini) and MCP protocol...

AboutSecurity is a structured penetration testing knowledge base organized into 200+ skill methodologies, attack payloads, vulnerability data, and...

Maigret is a Python CLI tool for username-based reconnaissance that checks 3000+ websites for accounts and aggregates publicly available information...

Promptfoo is a CLI and library for evaluating, testing, and red-teaming LLM applications, enabling users to compare model performance across multiple...

HexStrike AI MCP Agents is a specialized MCP (Model Context Protocol) server that integrates 150+ cybersecurity tools with autonomous AI agents...

OWASP Nettacker is a Python-based automated penetration testing and vulnerability scanning framework that helps security professionals conduct...

Cybersecurity AI (CAI) is an open-source framework for building AI-powered offensive and defensive security automation tools. It is specialized for...

sqlmap is a mature penetration testing tool that automates SQL injection detection and exploitation, along with database server takeover...

Secator is a task and workflow automation framework for security assessments that integrates dozens of well-known pentesting and OSINT tools (arjun,...

BBOT is a recursive internet scanner built for security professionals conducting reconnaissance, bug bounties, and attack surface management. It...

HackTricks is a comprehensive wiki documenting hacking techniques, CTF tricks, penetration testing methods, and security research findings. It serves...

Ciphey is a fast cryptographic decoding tool written in Rust that automatically decrypts encrypted data, decodes encodings, and cracks hashes without...

IPRanges aggregates public IP address ranges from major cloud providers, search engine crawlers, and CDN services (Google, AWS, Microsoft, OpenAI,...

NetExec is a network execution and reconnaissance tool for penetration testing and red-team operations, primarily targeting Active Directory and...

Shannon is an autonomous AI pentester that performs white-box security testing of web applications and APIs by analyzing source code to identify...

Hetty is an HTTP toolkit for security research that functions as an open-source alternative to Burp Suite Pro, featuring a MITM proxy with request...