Armur-Ai / Pentest-Swarm-AI
Autonomous API and web-app penetration testing tool that runs a swarm of AI agents to chain exploits and prove vulnerabilities.
Armur-Ai / Pentest-Swarm-AI
Autumn-27 / ScopeSentry
Distributed security asset discovery platform covering subdomain enumeration, port scanning, vulnerability scanning, and page monitoring.
skyhook-io / radar
The missing open-source Kubernetes UI with a built-in MCP server for AI agents. See what's broken, why, and what changed. Issues, Topology, event timeline, Helm, GitOps, live service traffic, and cluster audits - all in one Go binary.
akira-init1 / ChannelTerm
Shared terminal sessions for humans and AI agents, starting with serial and hardware debugging.
coze-dev / coze-loop
Next-generation AI Agent Optimization Platform: Cozeloop addresses challenges in AI agent development by providing full-lifecycle management capabilities from development, debugging, and evaluation to monitoring.
chromedp / chromedp
A faster, simpler way to drive browsers supporting the Chrome DevTools Protocol.
projectdiscovery / httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
projectdiscovery / naabu
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
projectdiscovery / subfinder
Fast passive subdomain enumeration tool.
vigolium / vigolium
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision
projectdiscovery / urlfinder
A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
go-delve / delve
Delve is a debugger for the Go programming language.
grafana / pyroscope
Continuous Profiling Platform. Debug performance issues down to a single line of code
git-bug / git-bug
Distributed, offline-first bug tracker integrated in git
j3ssie / osmedeus
A Modern Orchestration Engine for Security
buger / jsonparser
THE fastest alternative JSON parser for Go that does not require schema
stern / stern
⎈ Multi pod and container log tailing for Kubernetes
projectdiscovery / interactsh
An OOB interaction gathering server and client library
zan8in / afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
edoardottt / cariddi
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
okteto / okteto
Develop your applications directly in your Kubernetes Cluster
six2dez / OneListForAll
Rockyou for web fuzzing
projectdiscovery / uncover
Quickly discover exposed hosts on the internet using multiple search engines.
vmware-tanzu / sonobuoy
Sonobuoy is a diagnostic tool that makes it easier to understand the state of a Kubernetes cluster by running a set of Kubernetes conformance tests and other plugins in an accessible and non-destructive manner.
haccer / subjack
DNS Takeover tool written in Go
wallarm / gotestwaf
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
goforj / godump
Configurable Go value and struct dumps with colorized output, type visibility controls, and field redaction.
aarzilli / gdlv
GUI frontend for Delve
edoardottt / scilla
Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
xalgorix / xalgorix
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
0xPugal / fuzz4bounty
1337 Wordlists for Bug Bounty Hunting
Chocapikk / wpprobe
A fast WordPress plugin enumeration tool
intigriti / misconfig-mapper
Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!
R-s0n / ars0n-framework-v2
AI Native Bug Bounty Hunting Framework Designed to Help Beginners Compete w/ the Pros
halilkirazkaya / arsenal-ng
The classic launcher, evolved. Fast, Go-based command library equipped with 200+ cybersecurity cheat-sheets. Just install and start hacking.
hueristiq / xurlfind3r
A command-line tool for discovering URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.
vflame6 / leaker
Passive leak enumeration tool.
cc1a2b / JShunter
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.
edoardottt / csprecon
Discover new target domains using Content Security Policy
duckbugio / flock
Autonomous AI dev-team bot
akha-security / akca
AKCA Advanced Web Security Scanner
azrtydxb / procoder
Senior-developer discipline for AI coding agents. A commit gate that counts unchecked as failing, quality controllers that refuse to call unfinished work done, and a lessons loop that closes each escaped bug's class. One Go binary, no runtime deps, works with 20+ agents.
rootdr-backup / Reconner
Self-hosted bug-bounty platform — verification-first recon & DAST, continuous monitoring. Your data stays on your machine.
SeriousBug / webp-go-pure
A pure go implementation of webp encoding and decoding.
hackwither / reap
reconnaissance for agent attack surfaces
LuckyKuang / sub2api-plus
个人使用，不保证没有bug，使用前请仔细斟酌！
Spade-sec / jsowl
JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态扫描、运行时交互、AI 辅助分析与 MCP Server，输出 JSON 与交互式 HTML 报告，是渗透测试、红队信息收集与 Web 安全测试的高效自动化方案。
enowdev / antares
Antares: a self-hosted AI pentest agent and assistant in one binary. Authorized penetration testing with security specialists, 7,000+ procedures and reports, plus files, shell, a real browser, memory and RAG.