🛡 The reference playbook for pentesting AI chatbots & LLM-powered apps in one place. Ready-to-use payloads covering the full OWASP LLM Top 10 plus frontier vectors (MCP · RAG · A2A · computer-use · voice)
☆39Jun 18, 2026Updated 4 months ago
Alternatives and similar repositories for AI-Pentest-Playbook
Users that are interested in AI-Pentest-Playbook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A multi-agent application-security review harness for Claude Code (and, later, other AI agents). One router skill dispatches to a full of…☆43Oct 15, 2026Updated last week
- Grepleaks — your AI pentest environment. An AI pentest agent that lives in your terminal.☆34Sep 24, 2026Updated 3 weeks ago
- JSHawk is a powerful, context-aware JavaScript security scanner that hunts for exposed credentials, API keys, and sensitive information i…☆17Apr 13, 2026Updated 6 months ago
- ☆12Feb 20, 2022Updated 4 years ago
- Cybersecurity Intelligent Pentesting Helper for Ethical Researcher (CIPHER). Fine tuned LLM for penetration testing guidance based on wri…☆43Dec 24, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An agent that can help triage vulnerabilities across multiple codebases☆19Mar 14, 2026Updated 7 months ago
- offsec-ai is a Python library and CLI that combines classic network reconnaissance with modern AI/LLM security testing.☆33Oct 10, 2026Updated last week
- A Shodan-based tool to discover publicly exposed Ollama instances and list available LLM models.☆25May 27, 2025Updated last year
- AI agents for Pentesting☆11Nov 5, 2024Updated last year
- ☆15Feb 18, 2025Updated last year
- ☆19Jun 28, 2026Updated 3 months ago
- Track C2 servers, tools, and botnets over time by framework and location☆16Aug 17, 2025Updated last year
- A standalone tool for logging shell commands to GhostWriter automatically☆19Aug 24, 2024Updated 2 years ago
- ☆50Jul 7, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Turning Gandalf against itself. Use LLMs to automate playing Lakera Gandalf challenge without needing to set up an account with a platfor…☆32Oct 16, 2023Updated 3 years ago
- My OSCP cheat sheet☆23Aug 4, 2024Updated 2 years ago
- A cheat sheet for common pentesting techniques.☆18Feb 10, 2020Updated 6 years ago
- A Collection of Proof of Concepts for non-published Web Exploits and Common CVEs☆10Nov 29, 2020Updated 5 years ago
- Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring …☆426Oct 7, 2026Updated 2 weeks ago
- Deobfuscator for DashO 8.x String Obfuscation☆15Sep 22, 2017Updated 9 years ago
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆33May 23, 2026Updated 5 months ago
- Local-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI…☆332Sep 14, 2026Updated last month
- ☆17Aug 4, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Weaponizing CLRvoyance for Post-Ex .NET Execution☆38Jul 15, 2021Updated 5 years ago
- Precompiled Decompyle++ (pycdc) binaries for Windows & Linux☆10Oct 2, 2025Updated last year
- AzDevRecon is a powerful web-based enumeration tool for offensive security professionals, red teamers, and pentesters targeting Azure Dev…☆32Oct 13, 2025Updated last year
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆12Oct 27, 2023Updated 2 years ago
- Verizon Burp Extensions: AI Suite☆145Apr 22, 2025Updated last year
- Demos for Black Hat Europe 2025's The Forensic Trail On GitHub: Hunting For Supply Chain Activity☆28Updated this week
- ☆22Apr 10, 2025Updated last year
- Autonomous AI agents for bug bounty hunting, 18 parallel hunters, built-in validator, zero setup.☆22Apr 16, 2026Updated 6 months ago
- shellcode obfuscater and runner in golang☆11Aug 13, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A curated list of AI-powered pentesting tools, frameworks, MCP servers, and resources for autonomous cybersecurity operations☆92Updated this week
- The one shot API attacker tool - finds the API url from the given root simulate the automated attacks☆35Jul 21, 2026Updated 3 months ago
- An autonomous agent that acts as a DEF CON-level Certified Ethical Hacker, using tools such as Nuclei, sqlmap, ffuf, Burp, ZAP, and the S…☆56Apr 3, 2026Updated 6 months ago
- ☆36Sep 21, 2024Updated 2 years ago
- XBot - Advanced AI Cybersecurity Agent | Gemini system prompt for automated penetration testing and security assessments☆86Nov 29, 2025Updated 10 months ago
- Inject code into .net applications☆14Nov 7, 2018Updated 7 years ago
- Purple Team Workshop by @jorgeorchilles☆12Jul 31, 2026Updated 2 months ago