Fully autonomous AI Agents system capable of performing complex penetration testing tasks
Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端
在浏览器中用微信官方基础库运行小程序,支持 Chrome DevTools 调试与 Playwright E2E 测试
OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.
NeuraVision — AI content generation platform (PHP backend engine: auth, credits, generation, analytics)
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
PS5 Backport — closed-source early testing beta. Windows x64; Linux and macOS to follow after Windows testing.
Plataforma de trading gratis y de código abierto para Mac (con guía para portarla a Windows con Claude): footprint, DOM, backtesting anti-sobreoptimización y estrategias con IA. 100 % local.
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
Modern C++23 Runtime Patching Framework for 2026 Windows Memory Analysis
Privacy focused NixOS pentesting environment with a customizable desktop and security tools.
Full pre-activated desktop edition of Claude AI local tools. Everything included in the installer.
Run reduced-order battery, thermal, converter and BESS control models with transparent equations and repeatable testing.
Exodus Fake Balance - wallet UI simulation tool for BTC, ETH, SOL, XRP, and 200+ assets. Customize displayed balances in a controlled demo environment with persistent visual settings and screenshot-ready previews. Designed for testing, demonstrations, and UI prototyping without altering actual blockchain balances or transactions.
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.
The PHP Unit Testing framework.
✅ The Node.js best practices list (July 2026)
Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.
JavaScript API for Chrome and Firefox
Hunt down social media accounts by username across social networks
Storybook is the industry standard workshop for building, documenting, and testing UI components in isolation
Open-Source API Development Ecosystem • https://hoppscotch.io • Offline, On-Prem & Cloud • Web, Desktop & CLI • Open-Source Alternative to Postman, Insomnia
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Fast, easy and reliable testing for anything that runs in a browser.
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)
Delightful JavaScript Testing.
:hedgehog: PostHog is the leading platform for building self-driving products. Our developer tools – AI observability, analytics, session replay, flags, experiments, error tracking, logs, and more – capture all the context agents need to diagnose problems, uncover opportunities, and ship fixes. Steer it all from Slack, web, desktop, or the MCP.
GoogleTest - Google Testing and Mocking Framework
🕵️♂️ Collect a dossier on a person by username from 6K websites
Automatic SQL injection and database takeover tool
An AI prompt optimizer for writing better prompts and getting better AI results.
"Vibe-Trading: Your Personal Trading Agent"
A modern load testing tool, using Go and JavaScript
This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org
Write scalable load tests in plain Python 🚗💨
A toolkit with common assertions and mocks that plays nicely with the standard library
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
HTTP load testing tool and library. It's over 9000!
Learn Go with test-driven development
☕️ Classic, reliable, trusted test framework for Node.js and the browser
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
A modern, C++-native, test framework for unit-tests, TDD and BDD - using C++14, C++17 and later (C++11 support is in v2.x branch, and C++03 on the Catch1.x branch)
Code for Machine Learning for Trading, 3rd edition — from data sourcing to live execution.
Node.js test runner that lets you develop with confidence 🚀
Open source software that helps you create and deploy high-frequency crypto trading bots
🤖 The Modern Port Scanner 🤖
Faker is a Python package that generates fake data for you.
Hurl, run and test HTTP requests with plain text.
AdonisJS is a TypeScript-first web framework for building web apps and API servers. It comes with support for testing, modern tooling, an ecosystem of official packages, and more.
Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.
Next generation testing framework powered by Vite.
Fast web fuzzer written in Go
📦BetterGI · 更好的原神 - 自动拾取 | 自动剧情 | 全自动钓鱼(AI) | 全自动七圣召唤 | 自动伐木 | 自动刷本 | 自动采集/挖矿/锄地 | 一条龙 | 全连音游 | 自动烹饪 | 桌面分身 - UI Automation Testing Tools For Genshin Impact
Painless E2E Automation for Mobile and Web
Simple JavaScript testing framework for browsers and node.js