Open source pentesting projects

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabi

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simpl

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data corr

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Gather and update all available and newest CVEs with their PoC.

Next generation web scanner

A Modern Orchestration Engine for Security

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Cameradar hacks its way into RTSP videosurveillance cameras

A AI general-purpose state-space search engine, validated first on autonomous penetration testing.

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and w

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

A high performance offensive security tool for reconnaissance and vulnerability scanning

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

All In One Web Recon

Semi-automatic OSINT framework and package manager

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access

802.11 Attack Tool

OSINT Tool: Generate username lists for companies on LinkedIn

Automatic SSTI detection tool with interactive interface

GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the

🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepS

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

A modular vulnerability scanner with automatic report generation capabilities.

OWASP Web Recon & Directory Discovery Platform

Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance throu

Dradis Framework: Collaboration and reporting for IT Security teams

Pen Test Report Generation and Assessment Collaboration

VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/

🛡⚔️AI-Powered Penetration Testing Framework with automated vulnerability scanning, multi-agent system, and compliance reporting🛡⚔️