HypothesisWorks / hypothesis

The property-based testing library for Python

py-why / dowhy

DoWhy is a Python library for causal inference that supports explicit modeling and testing of causal assumptions. DoWhy is based on a unified language for causal inference, combining causal graphical models and potential outcomes frameworks.

apache / caldera

Automated Adversary Emulation Platform

chaosblade-io / chaosblade

An easy to use and powerful chaos engineering experiment toolkit.（阿里巴巴开源的一款简单易用、功能强大的混沌实验注入工具）

pywinauto / pywinauto

Windows GUI Automation with Python (based on text properties)

Giskard-AI / giskard-oss

🐢 Open-Source Evaluation & Testing library for LLM Agents

OWASP / Nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

jonaslejon / malicious-pdf

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

jekil / awesome-hacking

Awesome hacking is an awesome collection of hacking tools.

schemathesis / schemathesis

Catch API bugs before your users do

jayofelony / pwnagotchi

(⌐■_■) - Raspberry Pi instrumenting Bettercap for Wi-Fi pwning.

sodadata / soda-core

Data Contracts engine for the modern data stack. https://www.soda.io

coding-kitties / investing-algorithm-framework

Framework for quantitative trading. Complete framework for development, backtesting, and deploying automated trading algorithms and trading bots.

pytest-dev / pytest-xdist

pytest plugin for distributed testing and loop-on-failures testing modes.

wgpsec / AboutSecurity

Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。

0xSteph / pentest-ai

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

pytest-dev / pytest-asyncio

Asyncio support for pytest

skforecast / skforecast

Python library for time series forecasting using scikit-learn compatible models, statistical methods, and foundation models

Hacking-Notes / Hacker-Roadmap

A detailed plan to achieve proficiency in hacking and penetration testing, with pathways including obtaining a degree in cybersecurity or earning relevant certifications.

yashab-cyber / hackpilot

HackPilot Enterprise is a production-ready, cloud-native AI-powered penetration testing platform designed for enterprise security teams. It combines advanced AI, machine learning, microservices architecture, and comprehensive security frameworks to deliver professional-grade cybersecurity assessments.

chAng-L19 / codex-redteam-mode

针对于红队攻击思维做出的red team模式(破限项目，封号概不负责）##可自行适配其他Agent。项目问题请提issue

JackJuly / linkook

🔍 An OSINT tool for discovering linked social accounts and associated emails across multiple platforms using a single username.

Zyrexnn / Cybermes

Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.

dedsec1121fk / DedSec

Official repository of the DedSec Project.

15r10nk / inline-snapshot

inline-snapshot boosts efficiency when writing tests by generating code with the expected values and simplifies snapshot tests with pytest.

Nikolay-Shirokov / cc-1c-skills

Набор навыков для AI(ИИ)-агентов (Claude Code, Cursor, Codex и др.), помогающий охватить полный цикл разработки на платформе 1С:Предприятие 8.3. Даёт модели абстракции над XML-форматами и CLI конфигуратора, а также глаза и руки для тестирования через веб-клиент. AI skills for 1C:Enterprise 8.3.

tlsfuzzer / tlsfuzzer

SSL and TLS protocol test suite and fuzzer

citizenlab / test-lists

URL testing lists intended for discovering website censorship

agent-next / polymarket-paper-trader

Paper trading simulator for Polymarket

idavidov13 / agentic-playwright

Production-grade Playwright + TypeScript Scaffold for Agentic Testing. Harness for all major AI coding agents baked in.

xiaoguai009 / codex-armor-toolkit

Codex 全破甲｜面向 GPT-6 Astra 的指令配置工具，适用于渗透测试、逆向分析与开发工作流。

LINGYK352 / Watchtower

Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.

glask1d / WebHawk

The WebHawk Framework is a tool used for authorized enumeration and exploitation of webservers.

AlexJ1ang / sse-agent-bench

Configuration-driven evaluation, regression testing, replay, and load testing for SSE-streaming LLM agents

AllenPan-Git / SimpleQuant

低代码的 A 股量化回测工具 · Low-code quant backtesting for China A-shares

lupingQAQ / JGD

Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + dual-model adversarial auditing → weaponized PoC. Solving the last mile.

robotframework / robotframework

Generic automation framework for acceptance testing and RPA

fivetran / great_expectations

Always know what to expect from your data.

microsoft / promptflow

Build high-quality LLM apps - from prototyping, testing to production deployment and monitoring.

platformio / platformio-core

Your Gateway to Embedded Software Development Excellence :alien:

infobyte / faraday

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

ihebski / DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

Flagsmith / flagsmith

Flagsmith is an open-source feature flag platform with remote config, experimentation, and self-hosted or cloud deployment options.

Pennyw0rth / NetExec

The Network Execution Tool

commixproject / commix

Automated Αll-in-One OS command injection exploitation tool.

buildbot / buildbot

Python-based continuous integration testing framework; your pull requests are more than welcome!

ansible / molecule

An ansible-native testing framework for collections, playbooks, and roles with configurable workflows for testing any system or service

kelvinBen / AppInfoScanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

codingo / NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

gwen001 / pentest-tools

A collection of custom security tools for quick needs.

GH05TCREW / pentestagent

PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.

kevin1024 / vcrpy

Automatically mock your HTTP interactions to simplify and speed up testing

pmorissette / bt

bt - flexible backtesting for Python

wcventure / FuzzingPaper

Recent Fuzzing Paper

Syslifters / sysreptor

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

yandex / yandex-tank

Load and performance benchmark tool

dosisod / refurb

A tool for refurbishing and modernizing Python codebases

OWASP / masvs

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

Runnin4ik / dpi-detector

DPI detection tool for internet censorship testing. Identifies TLS, TCP, HTTP, DNS blocking and 16-20KB connection drops

testcontainers / testcontainers-python

Testcontainers is a Python library that providing a friendly API to run Docker container. It is designed to create runtime environment to use during your automatic tests.