Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.

Automated Adversary Emulation Platform

Infection Monkey - An open-source adversary emulation platform

Open Source Vulnerability Management Platform

PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.

Automated Security Testing For REST API's

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

A AI general-purpose state-space search engine, validated first on autonomous penetration testing.

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

Firmware Analysis and Comparison Tool

AI-powered penetration testing assistant for automating recon, note-taking, and vulnerability analysis.

Distributed alerting for the masses!

Agent-native reverse-engineering lab with a 197-article knowledge base, MCP tools, and CTF/APK/PE automation workflows.[有通用AI越狱bug😂😉]

A command-line tool to get valuable information out of AWS CloudTrail