usebruno / bruno

Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)

MobSF / Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

HackTricks-wiki / hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

quantskills / quantskills

QuantSkills组织的全景导航 ：面向 AI Agent 的开源量化 Skill & Agent 生态，从数据、因子研究、回测验证到风险监控与交易自动化。｜Open-source Quant Skills & Agents for AI-driven research, backtesting, risk and trading automation.——Panoramic navigator for the QuantSkills organization

GoogleChromeLabs / chrome-for-testing

—

Spielewoy / autoprompt-skill

Autoprompt is a coding-agent skill that cuts failures by 45% on agentic coding tasks.

Jueze-2019 / dsh-redteam-mode

DSH RedTeam 模式：把 DeepSeek Harness 变成红队作战指挥台——一个靶标名称拉起信息收集/漏洞检测/漏洞利用/内网渗透四个角色，资产与战果实时落入本地 SQLite 事实库（仅供已授权测试）

Superalgos / Superalgos

Free, open-source crypto trading bot, automated bitcoin / cryptocurrency trading software, algorithmic trading bots. Visually design your crypto trading bot, leveraging an integrated charting system, data-mining, backtesting, paper trading, and multi-server crypto bot deployments.

goldbergyoni / nodejs-testing-best-practices

Beyond the basics of Node.js testing. Including a super-comprehensive best practices list and an example app (April 2025)

lackeyjb / playwright-skill

General-purpose Playwright automation for coding agents

Ch0pin / medusa

Mobile Edge-Dynamic Unified Security Analysis

datacontract / datacontract-cli

Open-source data contract testing for Snowflake, Databricks, BigQuery, Kafka & 15 more. Built on the Open Data Contract Standard (ODCS). MIT.

BrainicHQ / DoHSpeedTest

An intuitive web tool for real-time testing of DNS over HTTPS (DoH) server speeds directly in your browser, designed to enhance and optimize your internet browsing experience.

capt-meelo / loupe

Browser-based Android console, APK decompiler and security analyzer. Mirror, logcat, shell, Frida, jadx, and static and dynamic analysis, with no drivers or adb server.

naodeng / dsh-qa

dsh-qa · QA Workbench — A local software testing workbench plugin for DeepSeek Harness. Zero-dependency test project & iteration management with AI-assisted requirements, test cases, defects, milestones, reports, kanban and calendar.

mochajs / mocha

☕️ Classic, reliable, trusted test framework for Node.js and the browser

avajs / ava

Node.js test runner that lets you develop with confidence 🚀

jasmine / jasmine

Simple JavaScript testing framework for browsers and node.js

wix / Detox

Gray box end-to-end testing and automation framework for mobile apps

DevExpress / testcafe

A Node.js tool to automate end-to-end web testing.

sinonjs / sinon

Test spies, stubs and mocks for JavaScript.

chaijs / chai

BDD / TDD assertion framework for node.js and the browser that can be paired with any testing framework.

postmanlabs / newman

Newman is a command-line collection runner for Postman

mapbox / pixelmatch

The smallest, simplest and fastest JavaScript pixel-level image comparison library

tape-testing / tape

tap-producing test harness for node and browsers

pa11y / pa11y

Pa11y is your automated accessibility testing pal

codeceptjs / CodeceptJS

Supercharged End 2 End Testing Framework for NodeJS

qunitjs / qunit

🔮 An easy-to-use JavaScript unit testing framework.

americanexpress / jest-image-snapshot

✨ Jest matcher for image comparisons. Most commonly used for visual regression testing.

getgauge / taiko

A node.js library for testing modern web applications

cypress-io / cypress-example-recipes

Various recipes for testing common scenarios with Cypress

testem / testem

Test'em 'Scripts! A test runner that makes Javascript unit testing fun.

pwndoc / pwndoc

Pentest Report Generator

TommyLemon / APIAuto

☔ 敏捷开发最强大易用的接口工具，机器学习零代码测试与 AI 问答、生成代码与静态检查、生成文档与光标悬浮注释，腾讯、华为、SHEIN、传音、工行等使用 ☔ The most advanced tool for HTTP API. Machine learning no-code testing and AI assistant, generating codes and static analysis, generating comments and floating hints. Used by Tencent, Huawei, SHEIN, TRANSSION, ICBC, etc.

mountebank-testing / mountebank

Over the wire test doubles

Kong / insomnia-mockbin

Insomnia Mockbin is the underlying backend for the API mocks capability of Insomnia. It is built and used by Kong, the author of the open-source Kong Gateway.

MuYunyun / blog

Life is a moment :notebook_with_decorative_cover:

testdouble / testdouble.js

A minimal test double library for TDD with JavaScript

pashov / skills

Pashov Audit Group Skills

smartcontractkit / hardhat-starter-kit

A repo for boilerplate code for testing, deploying, and shipping chainlink solidity code.

privacytests / privacytests

Source code for privacytests.org. Includes browser testing code and site rendering.

BMayhew / awesome-sites-to-test-on

A curated list of sites to practice testing on

NickColley / jest-axe

Custom Jest matcher for aXe for testing accessibility ♿️🃏

IBMa / equal-access

IBM Equal Access Accessibility Checker contains tools to automate accessibility checking from a browser or in a continuous development/build environment

testing-library / svelte-testing-library

:chipmunk: Simple and complete Svelte DOM testing utilities that encourage good testing practices

ivam3 / i-Haklab

i-Haklab is a hacking laboratory for Termux that contains open source tools for pentesting, scan/find vulnerabilities, explotation and post-explotation recommended by Ivam3 with automation hacking commands and many guides and tutorials to learn use it.

MetaMask / test-dapp

The sample dapp used for e2e testing and metamask-extension QA

pa11y / pa11y-ci

Pa11y CI is a CI-centric accessibility test runner, built using Pa11y

jest-community / snapshot-diff

Diffing snapshot utility for Jest

Hazyzh / jest-html-reporters

🌈 Reporter for jest test framework. 🌈

cm45t3r / candlestick

Candlestick patterns detection.

NdagiStanley / vue-django

@Django integrated with a full-featured @Webpack + (@vuejs / vue-loader) setup with hot reload, linting, testing & css extraction.

pliablepixels / gap-trap

Turns vibe coding into high quality code. Sets up rules and gates in your repo so AI-written code stays correct without you reviewing every line.

Arcanum-Sec / wraith

WRAITH — a modern browser-hooking framework (BeEF + blind-XSS successor) for red teams, researchers, and educators. For authorized security testing, research & education only.

dmoka / quicke2e

Plain-English end-to-end tests for web apps. A small decision model picks each click; code decides pass or fail; a passing run exports a Playwright spec.

anthonyli / laya-pilot

Generate replayable Excel test cases from live browser pages, or run existing Excel cases, using Playwright and local Laya or a compatible decision API.

upgundecha / awesome-cloud-emulators

A curated list of cloud emulators and local cloud development tools for AWS, Azure, and Google Cloud. Explore Moto, Azurite, LocalStack, Firebase, and more for integration testing and CI/CD.

TetraLogical / accessible-components-library

Accessible components with working examples, code, guidance, and the test scenarios we use to check them.

0x4meliorate / Mimic

Frameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic phishing simulations, easily injected via reverse proxy.

Rikinshah787 / dotpals

See what your coding agent actually did. A desktop pal and notch for Claude Code, Codex, Cursor, Gemini CLI and any agent: test results read from the output, faked passes caught, and an MCP server any AI tool can ask. New: talk to Blu, who sees your screen, draws on it as it explains and uses your apps.