vxcontrol / pentagi

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

Armur-Ai / Pentest-Swarm-AI

Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.

AIPentest / CyberStrikeAI

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.

j3ssie / osmedeus

A Modern Orchestration Engine for Security

Ullaakut / cameradar

Cameradar hacks its way into RTSP videosurveillance cameras

zan8in / afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

edoardottt / cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

x90skysn3k / brutespray

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

jiwoochris / artex-global

ARTEX 한국어판 · AI 자율 침투 테스트 프레임워크(upstream: Autumn-27/ARTEX, AGPL-3.0)

jm33-m0 / emp3r0r

Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents.

NHAS / reverse_ssh

SSH based reverse shell

trhhubsd / ARTEX

ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军

edoardottt / scilla

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

xalgorix / xalgorix

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

Ullaakut / nmap

Idiomatic nmap library for go developers

goshs-labs / goshs

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.

praetorian-inc / titus

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

halilkirazkaya / arsenal-ng

The classic launcher, evolved. Fast, Go-based command library equipped with 200+ cybersecurity cheat-sheets. Just install and start hacking.

hueristiq / xurlfind3r

A command-line tool for discovering URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.

Kxiandaoyan / CyberStrikeAI

AI 辅助的授权渗透测试平台（基于 Ed1s0nZ/CyberStrikeAI 二次开发）：单/多智能体交战、本地近5年 CVE 语料与每日增量同步、GitHub-C2 交接、经验总结人审入库、HITL 审批与审计。

CSPF-Founder / redactproxy

A local proxy that keeps client data out of Claude Code.