vxcontrol / pentagi
Self-hosted multi-agent system that autonomously plans and runs penetration tests using tools like nmap, Metasploit and sqlmap in Docker.
vxcontrol / pentagi
usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Armur-Ai / Pentest-Swarm-AI
Autonomous API and web-app penetration testing tool that runs a swarm of AI agents to chain exploits and prove vulnerabilities.
microsoft / playwright
Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.
KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
AIPentest / CyberStrikeAI
The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.
usebruno / bruno
Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)
hoppscotch / hoppscotch
Open-Source API Development Ecosystem • https://hoppscotch.io • Offline, On-Prem & Cloud • Web, Desktop & CLI • Open-Source Alternative to Postman, Insomnia
sqlmapproject / sqlmap
Automatic SQL injection and database takeover tool
Netw0rkNoob / VulnClaw
基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。
JoasASantos / NeuroSploit
NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations.
keploy / keploy
Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.
vitest-dev / vitest
Next generation testing framework powered by Vite.
CyberStrikeus / CyberStrike
Open-source AI-powered offensive security harness for automated penetration testing.
itsreyi / BlockSuite
Minecraft server security assessment toolkit. Intercept, analyze, and test from a single desktop app.
cypress-io / cypress
Fast, easy and reliable testing for anything that runs in a browser.
autoscrape-labs / pydoll
Pydoll is a library for automating chromium-based browsers without a WebDriver, offering realistic interactions.
unionai-oss / pandera
A light-weight, flexible, and expressive statistical data testing library
stryker-mutator / stryker-js
Mutation testing for JavaScript and friends
samugit83 / redamon
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
Jieyab89 / OSINT-Cheat-sheet
OSINT cheat sheet, list OSINT tools, wiki, dataset, article, book , red team OSINT for hackers and OSINT tips and OSINT branch. This repository will grow every time will research, there is a research, science and technology, tutorial. Please use it wisely.
reticlehq / reticle
AI agents can generate code, but still struggle to understand what they build. Reticle brings Jev-style machine-native runtime perception to web & desktop applications.
s0ld13rr / pentestcode
PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous operations.
sebastianbergmann / phpunit
The PHP Unit Testing framework.
We5ter / Scanners-Box
The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
bats-core / bats-core
Bash Automated Testing System
pywinauto / pywinauto
Windows GUI Automation with Python (based on text properties)
OWASP / Nettacker
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
jonaslejon / malicious-pdf
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
lackeyjb / playwright-skill
General-purpose Playwright automation for coding agents
typegoose / mongodb-memory-server
Manage & spin up mongodb server binaries with zero(or slight) configuration for tests.
kubeshop / testkube
☸️ The Open Testing Platform for AI-Driven Engineering Teams
microsoft / pict
Pairwise Independent Combinatorial Tool
godot-gdunit-labs / gdUnit4
Embedded unit testing framework for Godot 4 supporting GDScript and C#. Features test-driven development, embedded test inspector, extensive assertions, mocking, scene testing.
argos-ci / argos
The open source visual testing platform for teams and AI agents. Review the product, not just the code.
tlsfuzzer / tlsfuzzer
SSL and TLS protocol test suite and fuzzer
mochajs / mocha
☕️ Classic, reliable, trusted test framework for Node.js and the browser
Orange-OpenSource / hurl
Hurl, run and test HTTP requests with plain text.
mockito / mockito
Most popular Mocking framework for unit tests written in Java
wix / Detox
Gray box end-to-end testing and automation framework for mobile apps
DevExpress / testcafe
A Node.js tool to automate end-to-end web testing.
karatelabs / karate
Test Automation Made Simple
epi052 / feroxbuster
A fast, simple, recursive content discovery tool written in Rust.
mapbox / pixelmatch
The smallest, simplest and fastest JavaScript pixel-level image comparison library
goss-org / goss
Quick and Easy server testing/validation
google / EarlGrey
:tea: iOS UI Automation Test Framework
kotest / kotest
Powerful, elegant and flexible test framework for Kotlin with assertions, property testing and data driven tests.
getgauge / taiko
A node.js library for testing modern web applications
kelvinBen / AppInfoScanner
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
dmtrKovalenko / odiff
A very fast SIMD-first image comparison library (with nodejs API)
GH05TCREW / pentestagent
PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.
getgauge / gauge
Light weight cross-platform test automation
alexei-led / pumba
Chaos testing, network emulation, and stress testing tool for containers
nsubstitute / NSubstitute
A friendly substitute for .NET mocking libraries.
pwndoc / pwndoc
Pentest Report Generator
flawiddsouza / Restfox
Offline-First Minimalistic HTTP & Socket Testing Client for the Web & Desktop
Syslifters / sysreptor
A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.
SpectoLabs / hoverfly
Lightweight service virtualization/ API simulation / API mocking tool for developers and testers
mojoaxel / awesome-regression-testing
🕶️ A curated list of resources around the topic: visual regression testing
gookit / goutil
💪 Helper Utils(900+): int, byte, string, array/slice, map, struct, dump, convert/format, error, web/http, cli/flag, OS/ENV, filesystem, system, test/assert, time and more. Go 常用的工具函数：数字，字符串，数组，Map，结构体，反射，文本，文件，错误，时间日期，特殊处理，格式化，常用信息获取等等