Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

security security-audit owasp ci-cd cybersecurity penetration-testing pentesting appsec offensive-security ethical-hacking security-automation sarif security-tools devsecops security-testing api-security red-teaming ai-security pentesting-tools ai-penetration-testing

• Updated Nov 11, 2026
• TypeScript

Automatic SQL injection and database takeover tool

python database detection dbms sql-injection pentesting exploitation appsec webappsec sqlinjection security-testing api-security database-security webapp-security security-testing-tool

• Updated Nov 12, 2026
• Python

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

react graphql golang open-source self-hosted penetration-testing openai gpt offensive-security autonomous-agents security-automation security-tools ai-agents security-testing multi-agent-system penetration-testing-tools anthropic ai-security-tool

• Updated Oct 22, 2026
• Go

Automated Adversary Emulation Platform

cybersecurity red-team security-automation security-testing mitre-attack adversary-emulation caldera

• Updated Oct 12, 2026
• Python

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

cybersecurity infosec application-security pentesting study-guide appsec aws-security study-plan security-testing api-security azure-security appsec-tutorials gcp-security devsecops-university cybersecurity-education study-planner

• Updated Oct 10, 2026

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

security waf owasp bugbounty web-application-firewall security-tools web-application-security security-testing graphql-security api-security rest-security grpc-security

• Updated Oct 28, 2026
• Go

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

proof-of-concept security-vulnerability poc-library security-testing

• Updated Feb 25, 2023
• Go

Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.

security password cybersecurity penetration-testing pentest-tool security-testing default-password default-credentials

• Updated Dec 23, 2018
• Python

Hacking Toolkit

windows linux security-audit networking hacking python3 penetration-testing pentesting scapy pentest network-analysis security-tools pentest-tool security-testing pentesting-networks

• Updated Dec 30, 2025
• Python

secureCodeBox (SCB) - continuous secure delivery out of the box

kubernetes security owasp kubernetes-operator hacktoberfest security-automation security-tools devsecops security-testing zaproxy securecodebox

• Updated Nov 11, 2026
• Go

A friendly car security exploration tool for the CAN bus

python fuzzing can-bus security-scanner ecu security-testing xcp

• Updated Jun 12, 2026
• Python

Awesome Python Security resources 🕶🐍🔐

python security awesome static-analysis awesome-list security-tools security-testing

• Updated Aug 24, 2023

PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous operations.

penetration-testing openai gpt pentest offensive-security autonomous-agents security-automation ai-agents security-testing multi-agent-system ai-security penetration-testing-tools anthropic ai-security-tool autonomous-agents-system

• Updated Nov 5, 2026
• TypeScript

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

python scanner static-analysis hacking bug-bounty infosec pentesting ctf bugbounty ctf-tools webappsec security-tools itsecurity bug-bounties security-testing

• Updated Apr 22, 2026
• Python

The AI Agent for Cyber Security.

cli typescript mcp owasp cybersecurity penetration-testing bug-bounty web-security appsec ethical-hacking red-team security-automation devsecops vulnerability-scanner security-testing dast ai-security ai-agent llm mcp-tools

• Updated May 8, 2026
• TypeScript

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

android kotlin webview kotlin-android apk bug-bounty pentesting android-studio ctf vulnerabilities flutter android-security security-testing flutter-security flutter-xss

• Updated Jun 25, 2021
• Kotlin

Resources for Application Security including Web, API, Android, iOS and Thick Client

android security hacking cybersecurity penetration-testing infosec application-security pentesting bugbounty appsec security-testing penetration-testing-notes

• Updated Jun 6, 2023

MCP for Security: A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.

mcp cybersecurity web-security pentesting ai-assistants security-automation security-tools security-testing hacking-tools ai-security model-context-protocol security-integrations mcp-pentest mcp-security mcp-ai

• Updated Mar 30, 2026
• TypeScript

Red Team Attack Lab for TTP testing & research

security ansible vagrant lab hacking penetration-testing infosec pentesting red-team security-tools security-testing redteam

• Updated May 15, 2023
• PowerShell

Open-source adversary emulation for AI agents and MCP servers.

cli typescript mcp jailbreak owasp browser-extension red-team ai-agents security-testing adversary-emulation ai-security prompt-injection llm-security owasp-llm-top-10 agentic-ai mcp-server ai-red-teaming

• Updated Nov 3, 2026
• TypeScript