Open source penetration-testing-tools projects
Every project in the registry tagged penetration-testing-tools, ranked by real GitHub adoption.
Next generation web scanner
Modlishka. Reverse Proxy.
基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — su
Automatic SSTI detection tool with interactive interface
Pen Test Report Generation and Assessment Collaboration
Related tags
Frequently asked questions
How many open source penetration-testing-tools projects are there?
This registry tracks 6 projects tagged penetration-testing-tools, with 21,706 GitHub stars between them. The most-adopted is WhatWeb at 6,977 stars.
Are these penetration-testing-tools projects free to use?
Yes — 6 of the 6 carry an explicit open-source licence across 4 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which penetration-testing-tools project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these penetration-testing-tools projects still maintained?
5 of the 6 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.