Open source pentesting projects
Every project in the registry tagged pentesting, ranked by real GitHub adoption.
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabi
🕵️♂️ Collect a dossier on a person by username from 3000+ sites
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simpl
A Modern Orchestration Engine for Security
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance throu
Pen Test Report Generation and Assessment Collaboration
Related tags
Frequently asked questions
How many open source pentesting projects are there?
This registry tracks 7 projects tagged pentesting, with 123,627 GitHub stars between them. The most-adopted is shannon at 48,105 stars.
Are these pentesting projects free to use?
Yes — 7 of the 7 carry an explicit open-source licence across 4 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which pentesting project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these pentesting projects still maintained?
6 of the 7 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.