Open source pentesting-tools projects
Every project in the registry tagged pentesting-tools, ranked by real GitHub adoption.
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and w
All In One Web Recon
Automatic SSTI detection tool with interactive interface
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
Related tags
Frequently asked questions
How many open source pentesting-tools projects are there?
This registry tracks 5 projects tagged pentesting-tools, with 16,267 GitHub stars between them. The most-adopted is Nettacker at 5,702 stars.
Are these pentesting-tools projects free to use?
Yes — 5 of the 5 carry an explicit open-source licence across 4 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which pentesting-tools project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these pentesting-tools projects still maintained?
5 of the 5 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.