Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

security hacking artificial-intelligence cybersecurity penetration-testing bug-bounty code-quality agents offensive-security ethical-hacking ctf-tools security-automation red-teaming ai-security pentesting-tools cybersecurity-tools llm-security ai-penetration-testing ai-hacking ai-pentesting

• Updated Nov 11, 2026
• Python

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

security security-audit owasp ci-cd cybersecurity penetration-testing pentesting appsec offensive-security ethical-hacking security-automation sarif security-tools devsecops security-testing api-security red-teaming ai-security pentesting-tools ai-penetration-testing

• Updated Nov 11, 2026
• TypeScript

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

windows debugger debugging security x64 x86-64 reverse-engineering disassembler hacking cybersecurity x86 dynamic-analysis ctf malware-analysis binary-analysis program-analysis offensive-security security-tools oscp exploit-development

• Updated Nov 9, 2026
• C++

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

react graphql golang open-source self-hosted penetration-testing openai gpt offensive-security autonomous-agents security-automation security-tools ai-agents security-testing multi-agent-system penetration-testing-tools anthropic ai-security-tool

• Updated Oct 22, 2026
• Go

autonomous red teaming platform; multi-agent offensive-security meta-harness

ai multi-agent agents offensive-security redteam

• Updated Sep 8, 2026
• TypeScript

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

exploit cheatsheet cybersecurity infosec pentesting bugbounty pentest offensive-security soc blueteam default-password blueteaming blueteam-tools offensive-security-projects

• Updated Sep 27, 2026
• Python

Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.

python raspberry-pi tamagotchi hacking bruteforce cybersecurity nmap pentesting offensive-security vulnerability-assessment network-scanning network-security e-paper hardware-hacking security-tools automated-pentesting

• Updated Jul 20, 2026
• Python

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

bug-bounty application-security web-security pentesting bugbounty offensive-security ethical-hacking red-team bugcrowd hackerone security-tools claude ai-security anthropic claude-code claude-skills

• Updated Nov 11, 2026
• Python

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

golang security pentesting post-exploitation offensive-security tunneling pivoting pentest-tool redteam

• Updated Sep 26, 2026
• Go

Red Teaming Tactics and Techniques

pentesting offensive-security oscp redteaming redteam redteam-infrastructure

• Updated Jun 13, 2026
• PowerShell

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

open-source hacking cybersecurity penetration-testing pentesting pentest offensive-security hacking-tool c2 redteam readteaming penetration-testing-tools redteam-tools

• Updated May 21, 2025
• Python

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

rust security virus scanner phishing wasm hacking audit trojan bug-bounty infosec pentesting beacon pentest offensive-security red-team security-tools c2 bug-hunting shellcodes

• Updated Oct 1, 2025
• Rust

📙 Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

markdown latex pandoc exam report offensive-security markdown-to-pdf oscp osce oswp reporting-tool osee oscp-prep oswe markdown-template exam-report osert

• Updated Aug 12, 2026
• Ruby

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

security cybersecurity penetration-testing infosec pentesting ctf capture-the-flag offensive offensive-security red-teaming defensive-security handbooks blue-teaming

• Updated Nov 12, 2026

A high performance offensive security tool for reconnaissance and vulnerability scanning

osint scanner hacking enumeration fuzzing pentesting offensive-security hacking-tool security-scanner vulnerability-assessment information-gathering reconnaissance pentest-tool vulnerability-scanner raccoon

• Updated Apr 21, 2026
• Python

OSWE, OSEP, OSED, OSEE

offensive-security offsec oscp osce osee oswe oswe-prep osep osed oswe-guide osep-prep osce3

• Updated Nov 2, 2026

OSCP Cheat Sheet

security cheatsheet penetration-testing pentesting offensive offensive-security offsec oscp cheat-sheet oscp-guide oscp-plus

• Updated Oct 22, 2026
• PowerShell

Open-source AI-powered offensive security harness for automated penetration testing.

security hacking artificial-intelligence cybersecurity penetration-testing bug-bounty code-quality agents offensive-security ethical-hacking ctf-tools security-automation red-teaming ai-security pentesting-tools cybersecurity-tools llm-security ai-penetration-testing ai-hacking ai-pentesting

• Updated Nov 12, 2026
• TypeScript

A curated list of awesome OSCP resources

penetration-testing awesome-list pentesting pentest offensive-security oscp oscp-tools oscp-prep

• Updated Apr 28, 2024

Automated NoSQL database enumeration and web application exploitation tool.

couchdb redis security-audit mongodb nosql scanner hacking databases enumeration penetration-testing nosql-databases sql-injection bugbounty mongodb-database offensive-security hacktoberfest hacking-tool security-tools web-application-security security-toolset

• Updated Oct 13, 2026
• Python