vxcontrol / pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
vxcontrol / pentagi
Armur-Ai / Pentest-Swarm-AI
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
sebastianbergmann / phpunit
The PHP Unit Testing framework.
microsoft / playwright
Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.
hoppscotch / hoppscotch
Open-Source API Development Ecosystem • https://hoppscotch.io • Offline, On-Prem & Cloud • Web, Desktop & CLI • Open-Source Alternative to Postman, Insomnia
usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
usebruno / bruno
Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)
mochajs / mocha
☕️ Classic, reliable, trusted test framework for Node.js and the browser
Orange-OpenSource / hurl
Hurl, run and test HTTP requests with plain text.
keploy / keploy
Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.
vitest-dev / vitest
Next generation testing framework powered by Vite.
mockito / mockito
Most popular Mocking framework for unit tests written in Java
wix / Detox
Gray box end-to-end testing and automation framework for mobile apps
DevExpress / testcafe
A Node.js tool to automate end-to-end web testing.
We5ter / Scanners-Box
The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
karatelabs / karate
Test Automation Made Simple
AIPentest / CyberStrikeAI
The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.
autoscrape-labs / pydoll
Pydoll is a library for automating chromium-based browsers without a WebDriver, offering realistic interactions.
mapbox / pixelmatch
The smallest, simplest and fastest JavaScript pixel-level image comparison library
bats-core / bats-core
Bash Automated Testing System
pywinauto / pywinauto
Windows GUI Automation with Python (based on text properties)
goss-org / goss
Quick and Easy server testing/validation
google / EarlGrey
:tea: iOS UI Automation Test Framework
OWASP / Nettacker
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
kotest / kotest
Powerful, elegant and flexible test framework for Kotlin with assertions, property testing and data driven tests.
jonaslejon / malicious-pdf
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
unionai-oss / pandera
A light-weight, flexible, and expressive statistical data testing library
Netw0rkNoob / VulnClaw
基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。
getgauge / taiko
A node.js library for testing modern web applications
kelvinBen / AppInfoScanner
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
stryker-mutator / stryker-js
Mutation testing for JavaScript and friends
lackeyjb / playwright-skill
General-purpose Playwright automation for coding agents
CyberStrikeus / CyberStrike
Open-source AI-powered offensive security harness for automated penetration testing.
GH05TCREW / pentestagent
PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.
getgauge / gauge
Light weight cross-platform test automation
alexei-led / pumba
Chaos testing, network emulation, and stress testing tool for containers
samugit83 / redamon
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
nsubstitute / NSubstitute
A friendly substitute for .NET mocking libraries.
typegoose / mongodb-memory-server
Manage & spin up mongodb server binaries with zero(or slight) configuration for tests.
flawiddsouza / Restfox
Offline-First Minimalistic HTTP & Socket Testing Client for the Web & Desktop
SpectoLabs / hoverfly
Lightweight service virtualization/ API simulation / API mocking tool for developers and testers
mojoaxel / awesome-regression-testing
🕶️ A curated list of resources around the topic: visual regression testing
gookit / goutil
💪 Helper Utils(900+): int, byte, string, array/slice, map, struct, dump, convert/format, error, web/http, cli/flag, OS/ENV, filesystem, system, test/assert, time and more. Go 常用的工具函数：数字，字符串，数组，Map，结构体，反射，文本，文件，错误，时间日期，特殊处理，格式化，常用信息获取等等
Jieyab89 / OSINT-Cheat-sheet
OSINT cheat sheet, list OSINT tools, wiki, dataset, article, book , red team OSINT for hackers and OSINT tips and OSINT branch. This repository will grow every time will research, there is a research, science and technology, tutorial. Please use it wisely.
TommyLemon / APIAuto
☔ 敏捷开发最强大易用的接口工具，机器学习零代码测试与 AI 问答、生成代码与静态检查、生成文档与光标悬浮注释，腾讯、华为、SHEIN、传音、工行等使用 ☔ The most advanced tool for HTTP API. Machine learning no-code testing and AI assistant, generating codes and static analysis, generating comments and floating hints. Used by Tencent, Huawei, SHEIN, TRANSSION, ICBC, etc.
yogsec / Hacking-Tools
A curated list of penetration testing and ethical hacking tools, organized by category. This compilation includes tools from Kali Linux and other notable sources.
Kong / insomnia-mockbin
Insomnia Mockbin is the underlying backend for the API mocks capability of Insomnia. It is built and used by Kong, the author of the open-source Kong Gateway.
reportportal / reportportal
Main Repository. ReportPortal starts here - see readme below.
unkn0wn-root / resterm
Terminal API client for HTTP, GraphQL, gRPC, WebSocket and SSE. Plain .http files you can diff and version, with scripted tests, workflows, mocks, recorder, and a CLI runner for CI.
GreenmaskIO / greenmask
Database anonymization and test data management
AngusKit / AngusTester
AI-native software testing platform — one YAML test language covering API, Web, mobile, messaging, data, and LLM scenarios. Self-hostable.
kubeshop / testkube
☸️ The Open Testing Platform for AI-Driven Engineering Teams
microsoft / coyote
Coyote is a library and tool for testing concurrent C# code and deterministically reproducing bugs.
la10736 / rstest
Fixture-based test framework for Rust
NHAS / reverse_ssh
SSH based reverse shell
microsoft / pict
Pairwise Independent Combinatorial Tool
JoasASantos / NeuroSploit
NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations.
testdouble / testdouble.js
A minimal test double library for TDD with JavaScript
rubycdp / cuprite
Headless Chrome/Chromium driver for Capybara