Tools

aptrs/aptrs

Automated pentest reporting with custom templates, project tracking, customer dashboard and client management tools. Streamline your security…

baguswiratmaadi/reverie

Automated Pentest Tools Designed For Parrot Linux

bhavsec/autopentest-ai

Agentic Pentesting MCP server that discovers, exploits, and reports web application vulnerabilities.

baguswiratmaadi/catnip

Cat-Nip Automated Basic Pentest Tool - Designed For Kali Linux

sarthak4126/web-app-pentesting

Web application penetration testing lab — vulnerable Flask app, automated scanner, and professional pentest report. Covers OWASP Top 10, SQLi, XSS,…

uphiago/recon-skills

Field-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…

zan8in/afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

spidersuite/spidersuite

Advanced cross-platform web crawler for security professionals, enabling automated reconnaissance, information gathering, and OSINT data collection…

al0ne/vxscan

python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。

bhavsec/reconspider

🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

1n3/goohak

Automatically Launch Google Hacking Queries Against A Target Domain

0xdsm/pinkerton

🕵️ Python project to crawl for JavaScript files and search for secrets like API keys, authorization tokens, hardcoded credentials, etc.

infobyte/faraday-cli

Faraday's Command Line Interface

c0oki3s/veilgate

Asymmetric defense against adversarial AI agents. VeilGate evaluates each incoming request, redirects suspected agents into a per-IP-consistent…

dwisiswant0/findom-xss

A fast DOM based XSS vulnerability scanner with simplicity.

1n3/prism-ap

An automated Wireless RogueAP MITM attack framework.

alpkeskin/mosint

Automated email OSINT tool that verifies emails, checks data breaches and password leaks, finds related emails/domains, scans pastebin dumps, and…

owtf/owtf

Modular penetration testing framework integrating multiple tools for automated web application security assessment, aligned with OWASP Testing Guide,…