Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring your own AI model API; sessions stay local.
☆438Oct 7, 2026Updated 3 weeks ago
Alternatives and similar repositories for pentest-harness
Users that are interested in pentest-harness are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Local-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI…☆335Updated this week
- Open-source AI-powered offensive security harness for automated penetration testing.☆3,285Oct 20, 2026Updated last week
- Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-…☆976Updated this week
- Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path anal…☆453Updated this week
- Open-source AI security harness. Includes a web UI for code analysis, pentesting, vulnerability research, reverse engineering, verificati…☆533Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous…☆889Updated this week
- Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADC…☆215Aug 24, 2026Updated 2 months ago
- A web security workbench built for AI agents.☆329Oct 14, 2026Updated 2 weeks ago
- sharing some outputs for science☆23Sep 26, 2026Updated last month
- ☆92Sep 19, 2026Updated last month
- AI-powered vulnerability scanner extension for Burp Suite with multi-provider support (Ollama, OpenAI, Claude, Gemini)☆466Oct 3, 2026Updated 3 weeks ago
- Burp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integrati…☆371Aug 15, 2026Updated 2 months ago
- Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.☆1,270Updated this week
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆5,474Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Agentic AI security scanner that hunts exploitable vulnerabilities like an adversary, proves them with executable PoCs, and fixes them te…☆787Updated this week
- Privacy focused NixOS pentesting environment with a customizable desktop and security tools.☆60Updated this week
- Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full writ…☆1,319Sep 1, 2026Updated last month
- Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists wi…☆3,072Updated this week
- Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/1…☆125Jul 31, 2026Updated 2 months ago
- AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph pla…☆348Oct 6, 2026Updated 3 weeks ago
- Reusable prompts for a structured, evidence-first bug bounty hunting workflow☆801Oct 3, 2026Updated 3 weeks ago
- ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, a…☆646Updated this week
- A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report…☆485Oct 14, 2026Updated 2 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- exploit for Log4j2 (issue 4255)☆17Aug 27, 2026Updated 2 months ago
- Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.☆2,377Updated this week
- ☆55Jul 21, 2026Updated 3 months ago
- Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.☆59Sep 25, 2026Updated last month
- Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian☆336Sep 1, 2026Updated last month
- A modern Python-based Red Team Operations Workbench for managing engagements, intelligence, evidence, and reporting.☆16Aug 26, 2026Updated 2 months ago
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆5,328Updated this week
- AutoPentestX – Automated Pentesting & Vulnerability Reporting Tool☆1,571Feb 2, 2026Updated 8 months ago
- Bypass llm guardrails by confusing it with fabricated tool output.☆596Sep 1, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox a…☆1,082Updated this week
- Burp Suite extension to find hardcoded secrets & hidden endpoints in JavaScript. 150+ detection patterns, active JS fetch, low-noise fals…☆97Sep 10, 2026Updated last month
- The ultimate pentesting companion. Keep all your pentesting artifacts in one place.☆71Jul 27, 2026Updated 3 months ago
- A Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI☆129Updated this week
- Claude Code plugin for writing triager-grade bug bounty reports☆342Aug 25, 2026Updated 2 months ago
- Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.☆246Aug 9, 2026Updated 2 months ago
- Open-source, self-hosted web pentesting suite with agentic scanning, analyst tools, API testing, model checkpoints and MCP integrations.☆357Oct 19, 2026Updated last week