Armur-Ai / Pentest-Swarm-AI
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning โ supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
opentrap / opentrap
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
Autumn-27 / ScopeSentry
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
edoardottt / awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
OWASP / wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
usestrix / strix
Open-source AI penetration testing tool to find and fix your appโs vulnerabilities.
maurosoria / dirsearch
Web path scanner
projectdiscovery / subfinder
Fast passive subdomain enumeration tool.
projectdiscovery / nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
blacklanternsecurity / bbot
The recursive internet scanner for hackers. ๐งก
projectdiscovery / httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
yogeshojha / rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
six2dez / reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
ihebski / DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password ๐ก๏ธ
reddelexc / hackerone-reports
Top disclosed reports from HackerOne
j3ssie / osmedeus
A Modern Orchestration Engine for Security
vavkamil / awesome-bugbounty-tools
A curated list of various bug bounty tools
commixproject / commix
Automated ฮll-in-One OS command injection exploitation tool.
awarexone / Agentic-Bug-Hunter
AI-powered bug bounty hunting toolkit that works with or without subscription.
hahwul / dalfox
๐๐ฆ Dalfox is a powerful open-source XSS scanner and utility focused on automation.
elementalsouls / Claude-BugHunter
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
projectdiscovery / interactsh
An OOB interaction gathering server and client library
Astrosp / Awesome-OSINT-List
๐ก Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.
jonaslejon / malicious-pdf
๐ Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
zan8in / afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
arkadiyt / bounty-targets-data
This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports
edoardottt / cariddi
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
Findomain / Findomain
The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.
codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
gwen001 / pentest-tools
A collection of custom security tools for quick needs.
six2dez / OneListForAll
Rockyou for web fuzzing
CyberStrikeus / CyberStrike
Open-source AI-powered offensive security harness for automated penetration testing.
GH05TCREW / pentestagent
PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.
samugit83 / redamon
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
projectdiscovery / uncover
Quickly discover exposed hosts on the internet using multiple search engines.
elementalsouls / Claude-OSINT
8 Claude skills ยท 100+ recon capabilities ยท 80 secret-regex patterns ยท 80+ dorks ยท 9 read-only credential validators ยท 27 attack-path templates ยท ~10,000 lines of structured tradecraft. Drop-in SKILL.md files that turn Claude into a god-mode external recon operator for authorized red-team and bug-bounty engagements.
Impact-I / reFlutter
Flutter Reverse Engineering Framework
kpcyrd / sn0int
Semi-automatic OSINT framework and package manager
0xSteph / pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
Kritt-ai / open-kritt
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.
haccer / subjack
DNS Takeover tool written in Go
Flutter-Bounty-Hunters / super_editor
A Flutter toolkit for building document editors and readers
wallarm / gotestwaf
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
doyensec / inql
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
trickest / wordlists
Real-world infosec wordlists, updated regularly
wgpsec / AboutSecurity
Everything for pentest. | ๆธ้ๆต่ฏ็ฅ่ฏๅบ๏ผไปฅ AI Agent ๅฏๆง่ก็ๆ ผๅผๆฒๆทๅฎๅ จๆนๆณ่ฎบใ
0xSteph / pentest-ai
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
xdavidhu / awesome-google-vrp-writeups
๐ A list of writeups from the Google VRP Bug Bounty program
six2dez / burp-ai-agent
Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more
vavkamil / awesome-vulnerable-apps
Awesome Vulnerable Applications
Proviesec / google-dorks
Useful Google Dorks for WebSecurity and Bug Bounty
Uniswap / v3-periphery
๐ฆ ๐ฆ ๐ฆ Peripheral smart contracts for interacting with Uniswap v3
topscoder / nuclei-wordfence-cve
80k+ WordPress Nuclei templates, updated daily from Wordfence intelโfilter by severity/tags/CVE and scan in one line. ๐๐
edoardottt / scilla
Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
xalgorix / xalgorix
Autonomous AI pentesting agents โ real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
lord-alfred / ipranges
๐จ List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.
vigolium / vigolium
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision
hahwul / jwt-hack
JSON Web Token Hack Toolkit
pikpikcu / airecon
AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI. It is designed to automate security assessments, penetration testing, and bug bounty reconnaissance โ without any API keys or cloud dependency.
Zarcolio / sitedorks
Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.