Scanners-Box

English | 简体中文 | Español

Introduction

The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵

[!TIP] 📅 Tired of hunting all over the place for AI agent tools? → Scanners-Box Daily AI Tool Picks

Contents

[!IMPORTANT] 🤖 AI & Autonomous Agents

The focus zone of Scanners Box — AI-driven autonomous security tooling.

• AI Autonomous Cybersecurity Agents
• LLM-Powered Vulnerability Scanners
• Security Auditing for AI Agents & Apps
• AI Agent Runtime Controls
• Security Auditing for Agent Skills
• Autonomous Vulnerability Discovery and Remediation Skills

• Scanners for Smart Contracts
• Red Team vs Blue Team
• Mobile App Packages Analysis
• Binary Executables Analysis
• Privacy Compliance
• Subdomain Enumeration or Takeover
• Database SQL Injection Vulnerability or Brute Force
• Weak Usernames or Passwords Enumeration For Web
• IoT Hardware Automated Audit
• Mutiple types of Cross-site scripting Detection
• Enterprise sensitive information Leak Scan
• Malware Detection
• Vulnerability Assessment for Middleware
• Special Vulnerability Categories Scannners for Web
• Dynamic or Static Code Analysis
• Modular Design Scanners or Vulnerability Detecting Framework
• Advanced Persistent Threat Detect

---

AI Autonomous Cybersecurity Agents

• https://github.com/vxcontrol/pentagi - Fully autonomous multi-agent pentesting system in Go — runs whole engagements inside an isolated Docker sandbox with 20+ built-in tools (nmap, metasploit, sqlmap), long-term memory, optional Neo4j knowledge graph, and a web console for human-in-the-loop monitoring

• https://github.com/oritera/Cairn - A general-purpose state-space search engine validated on autonomous penetration testing — no predefined roles or workflows, purely goal-driven pathfinding

• https://github.com/KeygraphHQ/shannon - Autonomous white-box AI pentester for web apps & APIs — analyzes source code, identifies attack vectors, and executes real exploits pre-production

• https://github.com/SickHackPark/SickHackShark - Multi-agent AI platform for CTF automation — covers recon, scanning, exploitation, and flag capture end-to-end

• https://github.com/SanMuzZzZz/LuaN1aoAgent - LuaN1ao (鸾鸟) - A next-generation Autonomous Penetration Testing Agent powered by LLMs, integrating P-E-R Agent Collaboration with Causal Graph Reasoning to simulate security expert thinking patterns

• https://github.com/Ed1s0nZ/CyberStrikeAI - An AI-native security testing platform in Go, integrating 100+ tools, intelligent orchestration, role-based testing, skills system, full lifecycle management, and a built-in lightweight C2 framework for authorized engagements

• https://github.com/ASCIT31/Dark-Moon - Autonomous AI pentesting engine performing continuous offensive security across web, cloud, AD and Kubernetes. Uses agentic reasoning, real exploit execution and attack path analysis to deliver proof-based vulnerabilities.