initstring / cloud_enum
Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
initstring / cloud_enum
Blazemeter / taurus
Automation-friendly framework for Continuous Testing by
pybuilder / pybuilder
Software build automation tool for Python.
msoedov / agentic_security
Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪
owtf / owtf
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
GhostManager / Ghostwriter
The SpecterOps project management and reporting engine
pmh1314520 / WebRPA
A powerful no-code automation tool. Build workflows via drag-and-drop modules for web scraping, form filling and automated testing. | 一款功能强大的自动化工具，通过拖拽模块的方式快速构建自动化工作流，无需编写任何代码即可实现网页数据采集、表单填写、自动化测试等任务。【QQ交流群：115069513】
fsociety-team / fsociety
A Modular Penetration Testing Framework
vulnersCom / getsploit
Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.
ScottfreeLLC / AlphaPy
Python AutoML for Trading Systems and Sports Betting
dtmilano / AndroidViewClient
Android ViewServer and ADB client
khscience / OSkhQuant
看海量化回测平台 khQuant 开源版 V2.2：免费开源的 A 股量化回测桌面软件。不用开户、不用装 QMT，BaoStock / Tushare 下载数据到本地 DuckDB，Python 写策略，一键出回测报告。
scanapi / scanapi
Automated Integration Testing and Live Documentation for your API
ssh-mitm / ssh-mitm
SSH-MITM - ssh audits made simple
pytest-dev / pytest-bdd
BDD library for the pytest runner
Dropnation / contract-fuzzer
Ethereum smart contract fuzzer
ashishb / adb-enhanced
🔪Swiss-army knife for Android testing and development 🔪 ⛺
se2p / pynguin
The PYthoN General UnIt Test geNerator is a test-generation tool for Python
pschanely / CrossHair
An analysis tool for Python that blurs the line between testing and type systems.
freelabz / secator
secator - the pentester's swiss knife
topscoder / nuclei-wordfence-cve
80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒
conorluddy / ios-simulator-skill
An IOS Simulator Skill for Agents. Use it to optimise their ability to build, run and interact with your apps, and to proxy xcodebuild to save token waste. Works with Claude, Codex, etc
ipa-lab / hackingBuddyGPT
Helping Ethical Hackers use LLMs in 50 Lines of Code or less..
kiwitcms / Kiwi
open source test management system with over 2 million downloads!
mrwadams / attackgen
AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details.
CERT-Polska / Artemis
A modular vulnerability scanner with automatic report generation capabilities.
devpi / devpi
Python PyPi staging server and packaging, testing, release tool
blackhillsinfosec / WifiForge
WifiForge is a tool developed by Black Hills InfoSec to help train Pentesters on different Wi-Fi attack vectors and Wireless capabilities.
test-zeus-ai / testzeus-hercules
Hercules is the world’s first open-source testing agent, enabling UI, API, Security, Accessibility, and Visual validations – all without code or maintenance. Automate testing effortlessly and let Hercules handle the heavy lifting! ⚡
larlarua / AutoCVE
Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation.
taverntesting / tavern
A command-line tool and Python library and Pytest plugin for automated testing of RESTful APIs, with a simple, concise and flexible YAML-based syntax
chaxiu / munk-ai
Self-improving AI testing engine across Android, iOS, and Web.
GamehunterKaan / AutoPWN-Suite
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
berylliumsec / nebula
Cybersecurity Harness
AKCodez / hackingtool-plugin
Claude Code plugin: 183+ pentesting & OSINT tools from Z4nzu/hackingtool. Auto-runs what it can, hands off the rest.
pikpikcu / airecon
AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI. It is designed to automate security assessments, penetration testing, and bug bounty reconnaissance — without any API keys or cloud dependency.
redis / memtier_benchmark
NoSQL Redis and Memcache traffic generation and benchmarking tool.
adamchainz / time-machine
Travel through time in your tests.
geerlingguy / sbc-reviews
Jeff Geerling's SBC review data - Raspberry Pi, Radxa, Orange Pi, etc.
stanislav-web / OpenDoor
OWASP Web Recon & Directory Discovery Platform
Cyber-Buddy / APKHunt
APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.
jianweiweng05 / qsx-strategy-score
Free strategy scorecard for trading backtests. Detect overfitting, weak edge, drawdown risk, and random-timing luck from returns, equity curves, or trade logs.
cdxiaodong / cain-agent
Real-world AI penetration testing engineer for authorized assessments — built-in cloud module covering AWS/Azure/GCP + Aliyun/Tencent/Huawei clouds. Built on Claude Agent SDK
FLOCK4H / Freeway
WiFi Penetration Testing & Auditing Tool
syrupy-project / syrupy
:pancakes: The most popular pytest snapshot plugin
gbeced / basana
A Python async and event driven framework for algorithmic trading, with a focus on crypto currencies.
ttlns / Selenium-Driverless
a stealthy browser automation framework
nose-devs / nose2
The successor to nose, based on unittest2
EONRaider / RootWire
RootWire: A network traffic monitor for GNU/Linux — Live Capture, PCAP Replay, NDJSON Output. Formerly Packet-Sniffer.
ADScanPro / adscan
Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.
MrPowers / chispa
PySpark test helper methods with beautiful error messages
MattKeeley / Spoofy
Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.
chadi0x / TheBigBrother
The Big Brother is a weaponized OSINT platform featuring username enumeration (473+ platforms), quad-vector visual intelligence, Sky Radar tracking, crypto wallet analysis, SSL intelligence, digital footprint reconstruction, EXIF extraction, advanced dorking, and network reconnaissance.
tiliondev / fortress
Stealth Chromium engine that stops scrapers and browser agents from getting blocked, with one line of code change.
google / mobly
E2E test framework for tests with complex environment requirements.
pytest-dev / pyfakefs
Provides a fake file system that mocks the Python file system modules.
AmazingAng / old-coder
An old coder's strategy for the agent era: don't read the code — make it run the gauntlet. Evidence-first development skill for coding agents, inspired by Uncle Bob.
EnricoMi / publish-unit-test-result-action
GitHub Action to publish unit test results on GitHub
google / openhtf
The open-source hardware testing framework.
autotest / autotest
Autotest - Fully automated tests on Linux