An easy to use and powerful chaos engineering experiment toolkit.(阿里巴巴开源的一款简单易用、功能强大的混沌实验注入工具)
An all-in-one hacking tool to remotely take over Android devices.
Autonomous Hacking Agent for Red Team
Reverse engineering and pentesting for Android applications
Windows GUI Automation with Python (based on text properties)
TSP自托管、零运维的 A 股「自建策略 + 监控 + 回测」量化工作台 | LLM能力驱使策略定制+个股分析+复盘 | 自由接入第三方数据源与个性化扩展数据 | 个人开源
The Network Execution Tool
🐢 Open-Source Evaluation & Testing library for LLM Agents
Automated Αll-in-One OS command injection exploitation tool.
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
Collection of Testflight public app link(iOS/iPad OS/macOS/tvOS/visionOS)
Python-based continuous integration testing framework; your pull requests are more than welcome!
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
AI-powered bug bounty hunting toolkit that works with or without subscription.
Asynchronous Python framework for event-driven services. A thin client for Kafka, RabbitMQ, NATS, Redis and MQTT with full access to native broker features, plus AsyncAPI docs, in-memory tests and observability out of the box.
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
MCP server for market analysis in AI assistants: screeners, multi-timeframe technical analysis, backtests and sentiment for crypto, stocks, forex and futures. 39 tools. Self-host free, or use the hosted version, TradingMCP.
Mimesis is a Python library for generating fake but realistic data in multiple languages and locales.
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
A light-weight, flexible, and expressive statistical data testing library
Installs the latest UMU/GE-Proton and Non Steam Launchers under 1 Proton prefix folder and adds them to your steam library. Installs... Battle.net, Epic Games, Ubisoft, GOG, EA App, Amazon Games, itch.io , Legacy Games, The Humble Games Collection, IndieGala, Rockstar Games Launcher,PS Plus, Glyph, VKPlay & HoYoPlay, Waydroid and Games on SD Card.
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
NVIDIA Isaac Sim™ is an open-source application on NVIDIA Omniverse for developing, simulating, and testing AI-driven robots in realistic virtual environments.
An ansible-native testing framework for collections, playbooks, and roles with configurable workflows for testing any system or service
Snoop — инструмент разведки на основе открытых данных (OSINT world)
Awesome hacking is an awesome collection of hacking tools.
Command line driven CI frontend and development task automation tool.
基于 AI Agent + MCP 工具链 + 渗透 Skill 编排, 配合大语言模型, 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。
Eleven free Claude skills that clone any app: reverse-engineer it, rebuild it, test it for bugs, then fix what its users hate. Free, MIT.
Catch API bugs before your users do
Algorithmic Trading in Python with Machine Learning
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具,可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如:Title、Domain、CDN、指纹信息、状态信息等。
Misc; latest version of waifu2x; 2D video to stereo 3D video conversion
Automated NoSQL database enumeration and web application exploitation tool.
A collection of custom security tools for quick needs.
Full-screen console debugger for Python
PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
HarnessRouter Community Edition: the self-hosted, Apache-2.0 edition of the unified interface for agent harnesses. Run Codex, Claude Code, Hermes, PI, DSH, and more through one API, with sessions, streaming, files, cancellation, and failure handling. Implements the Unified Harness Protocol (UHP), an open standard. Your keys, your infrastructure.
Fully featured and community-driven hacking environment
Automatically mock your HTTP interactions to simplify and speed up testing
bt - flexible backtesting for Python
(⌐■_■) - Raspberry Pi instrumenting Bettercap for Wi-Fi pwning.
The strictest and most opinionated python linter ever!
Recent Fuzzing Paper
The fastest way to run Qwen 3.8 Flash Next, Qwen 3.8 27B and Ternary Bonsai 2 27B on a Mac: 125 tok/s in OpenCode on an M5 Max, and a 27B model on 16 GB Macs. Native MTP speculative decoding on Apple Silicon, exact at any temperature. OpenAI and Anthropic compatible local server.
A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.
Load and performance benchmark tool
cocotb: Python-based chip (RTL) verification
A tool for refurbishing and modernizing Python codebases
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
AKQuant is a high-performance quantitative research and trading framework built on Rust and Python! 开源量化回测框架
Data Contracts engine for the modern data stack. https://www.soda.io
DPI detection tool for internet censorship testing. Identifies TLS, TCP, HTTP, DNS blocking and 16-20KB connection drops
Testcontainers is a Python library that providing a friendly API to run Docker container. It is designed to create runtime environment to use during your automatic tests.
Bleeding edge django template focused on code quality and security.
Framework for quantitative trading. Complete framework for development, backtesting, and deploying automated trading algorithms and trading bots.
Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
AI agents that actually place the trade. 12 brokers, real backtests, stocks options futures forex crypto and prediction markets.
Automation-friendly framework for Continuous Testing by