Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104 (100%) on the XBOW validation benchmarks, powered by Kimi K3.
☆126Jul 31, 2026Updated 3 months ago
Alternatives and similar repositories for pentestkit
Users that are interested in pentestkit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The autonomous pentester that proves its findings — AI-driven, evidence-first, behind-login.☆27Updated this week
- Local-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI…☆342Oct 23, 2026Updated 2 weeks ago
- The entire knowledge around the detection lifecycle, encoded into skills. More details at https://detectionskills.io/☆57Oct 14, 2026Updated 3 weeks ago
- Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring …☆461Oct 7, 2026Updated 3 weeks ago
- Red-team your RAG pipeline for prompt injection, source-document leakage, and cross-document smuggling, in CI. The gap between RAG eval (…☆30Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-…☆1,006Updated this week
- ⚡ Rust-accelerated temporal graph engine for cybersecurity threat hunting. Ingests 100M+ edges from PCAP/CSV on a single machine. Sub-sec…☆15Jul 30, 2026Updated 3 months ago
- A web security workbench built for AI agents.☆388Updated this week
- Offline multi-language call graph generator in Rust — point at any folder, get a graph.☆46Oct 23, 2026Updated 2 weeks ago
- ☆53Aug 5, 2026Updated 3 months ago
- Cybersecurity Research & Offensive Security Platform☆65Updated this week
- ☆36Sep 22, 2026Updated last month
- Harness fo malware analysis☆43Aug 23, 2026Updated 2 months ago
- AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph pla…☆355Oct 6, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Python CLI that creates GitHub repos with safe defaults — branch protection, Dependabot, secret scanning, and pre-flight security scannin…☆38Updated this week
- A bug bounty tool for bypassing 401/403 access restrictions and testing endpoint accessibility.☆55Sep 28, 2026Updated last month
- A marketplace for LLM skills☆739Updated this week
- An AI CTF challenges to learn some of the risks that AI Chatbots pose☆77Sep 20, 2026Updated last month
- Sectiv is a skill-driven AI security review for Burp Suite. Pick captured traffic and a review goal (IDOR, XSS, SQLi, SSRF…), and ge…☆81Updated this week
- Agentic AI security scanner that hunts exploitable vulnerabilities like an adversary, proves them with executable PoCs, and fixes them te…☆801Updated this week
- Reusable prompts for a structured, evidence-first bug bounty hunting workflow☆915Oct 3, 2026Updated last month
- Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI …☆19Jul 21, 2026Updated 3 months ago
- This repository documents the VectorFreed RCE chain and includes a PoC for CVE-2026-96889.☆21Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Local forensic scanner that extracts credentials from AI tool conversation history. For authorized red team and DLP use only.☆66Updated this week
- Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.☆247Aug 9, 2026Updated 2 months ago
- ☆22Jul 13, 2026Updated 3 months ago
- PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous…☆929Updated this week
- Whisper pair bluetooth exploit for linux (POC for educational purposes)☆24Jan 26, 2026Updated 9 months ago
- wp2shell — WordPress Core Pre-Auth RCE (CVE-2026-63030 + CVE-2026-60137). Exploit toolkit + remediation.☆16Jul 19, 2026Updated 3 months ago
- Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands…☆770Updated this week
- Enable Touch ID for sudo on macOS☆20Sep 25, 2026Updated last month
- ☆139Oct 26, 2026Updated last week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Local-first permission gateway for AI agents with scoped connector access, human approval, audit trails, and encrypted local credentials.☆19Updated this week
- Google Gemini API key discovery and security scanning tool.☆43Updated this week
- Hardener Plus is an advanced security auditing platform for modern web architectures. It employs dynamic profiling and deep heuristics to…☆82Sep 10, 2026Updated last month
- Active Directory snapshots from Linux and macOS in the AD Explorer .dat format. Opens in AD Explorer, works with ADExplorerSnapshot.py an…☆38Sep 11, 2026Updated last month
- EAA is a curated catalog of techniques and real-world cases involving abuse of local AI agents through their runtime, configuration, stat…☆100Updated this week
- AI Native IDE for reverse engineering☆298Oct 30, 2026Updated last week
- Repo for arxiv paper "A Systematic Study of Code Obfuscation Against LLM-based Vulnerability Detection".☆15Dec 18, 2025Updated 10 months ago