All repos — GH Trending Explorer

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

AIPentest / CyberStrikeAI

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.

KeygraphHQ / shannon

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

keploy / keploy

Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.

usebruno / bruno

Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)

Jieyab89 / OSINT-Cheat-sheet

OSINT cheat sheet, list OSINT tools, wiki, dataset, article, book , red team OSINT for hackers and OSINT tips and OSINT branch. This repository will grow every time will research, there is a research, science and technology, tutorial. Please use it wisely.

CyberStrikeus / CyberStrike

Open-source AI-powered offensive security harness for automated penetration testing.

samugit83 / redamon

Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.

Netw0rkNoob / VulnClaw

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排，配合大语言模型，自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

s0ld13rr / pentestcode

PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous operations.

hoppscotch / hoppscotch

Open-Source API Development Ecosystem • https://hoppscotch.io • Offline, On-Prem & Cloud • Web, Desktop & CLI • Open-Source Alternative to Postman, Insomnia

stryker-mutator / stryker-js

Mutation testing for JavaScript and friends

JoasASantos / NeuroSploit

NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations.

urbanadventurer / WhatWeb

Command-line web scanner that fingerprints websites to identify their CMS, servers, JavaScript libraries, and other technologies.

security reverse-engineering cli

lackeyjb / playwright-skill

General-purpose Playwright automation for coding agents

vitest-dev / vitest

Next generation testing framework powered by Vite.

OWASP / Nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

GH05TCREW / pentestagent

PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.

sebastianbergmann / phpunit

Unit testing framework for PHP, implementing the xUnit architecture.

testing programming-language

We5ter / Scanners-Box

The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵

unionai-oss / pandera

A light-weight, flexible, and expressive statistical data testing library

mochajs / mocha

☕️ Classic, reliable, trusted test framework for Node.js and the browser

mapbox / pixelmatch

The smallest, simplest and fastest JavaScript pixel-level image comparison library

pywinauto / pywinauto

Windows GUI Automation with Python (based on text properties)

jonaslejon / malicious-pdf

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

GreenmaskIO / greenmask

Database anonymization and test data management

godot-gdunit-labs / gdUnit4

Embedded unit testing framework for Godot 4 supporting GDScript and C#. Features test-driven development, embedded test inspector, extensive assertions, mocking, scene testing.

kubeshop / testkube

☸️ The Open Testing Platform for AI-Driven Engineering Teams

xalgorix / xalgorix

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

microsoft / testfx

This repository holds the source code of Microsoft.Testing.Platform (MTP), a lightweight alternative to VSTest, as well as MSTest adapter and framework.

hueristiq / xurlfind3r

A command-line tool for discovering URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.

argos-ci / argos

The open source visual testing platform for teams and AI agents. Review the product, not just the code.

Haryy985 / yunkun-console-preview

云鲲自动化渗透控制台：功能介绍、使用流程、新增与优化、界面预览。当前仓库仅含文章与截图，暂无产品源码。

donislawdev / TestingFilesGenerator

Generate test files for QA and automated testing, 31+ formats at any exact byte size, with ready-made presets, reusable recipes, and manifests that define expected results. 100% offline GUI + CLI

wix / Detox

Gray box end-to-end testing and automation framework for mobile apps

autoscrape-labs / pydoll

Pydoll is a library for automating chromium-based browsers without a WebDriver, offering realistic interactions.

typegoose / mongodb-memory-server

Manage & spin up mongodb server binaries with zero(or slight) configuration for tests.

mojoaxel / awesome-regression-testing

🕶️ A curated list of resources around the topic: visual regression testing

NHAS / reverse_ssh

SSH based reverse shell

test-zeus-ai / testzeus-hercules

Hercules is the world’s first open-source testing agent, enabling UI, API, Security, Accessibility, and Visual validations – all without code or maintenance. Automate testing effortlessly and let Hercules handle the heavy lifting! ⚡

Hakky54 / certificate-ripper

🔐 A CLI tool to extract server certificates

tlsfuzzer / tlsfuzzer

SSL and TLS protocol test suite and fuzzer

turkaysoft / glow

Advanced System Analysis Software

Orange-OpenSource / hurl

Hurl, run and test HTTP requests with plain text.

karatelabs / karate

Test Automation Made Simple

google / EarlGrey

:tea: iOS UI Automation Test Framework

getgauge / gauge

Light weight cross-platform test automation

flawiddsouza / Restfox

Offline-First Minimalistic HTTP & Socket Testing Client for the Web & Desktop

SpectoLabs / hoverfly

Lightweight service virtualization/ API simulation / API mocking tool for developers and testers

gookit / goutil

💪 Helper Utils(900+): int, byte, string, array/slice, map, struct, dump, convert/format, error, web/http, cli/flag, OS/ENV, filesystem, system, test/assert, time and more. Go 常用的工具函数：数字，字符串，数组，Map，结构体，反射，文本，文件，错误，时间日期，特殊处理，格式化，常用信息获取等等

unkn0wn-root / resterm

Terminal API client for HTTP, GraphQL, gRPC, WebSocket and SSE. Plain .http files you can diff and version, with scripted tests, workflows, mocks, recorder, and a CLI runner for CI.

microsoft / pict

Pairwise Independent Combinatorial Tool