A curated list of AI-powered pentesting tools, frameworks, MCP servers, and resources for autonomous cybersecurity operations
☆89Oct 9, 2026Updated last week
Alternatives and similar repositories for awesome-ai-pentesting
Users that are interested in awesome-ai-pentesting are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An AI-native penetration testing workbench where you and AI agents work together to accelerate your pentest workflow.☆100Updated this week
- ☆97Updated this week
- ARTEX 한국어판 ·AI 기반 침해사고 대응 기능 추가 (upstream: Autumn-27/ARTEX, AGPL-3.0)☆193Updated this week
- 🔎 Username, email & phone OSINT — 9,700+ lookup checks from 19 projects, with profile enrichment, bulk searches, evidence graphs and exp…☆137Updated this week
- ☆39Sep 8, 2026Updated last month
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Tools that lower the barrier to security research on Meta's products, for vetted Meta Bug Bounty researchers. Designed to live where rese…☆243Updated this week
- AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assess…☆64Updated this week
- AKCA Advanced Web Security Scanner☆238Oct 10, 2026Updated last week
- Agentic AI security scanner that hunts exploitable vulnerabilities like an adversary, proves them with executable PoCs, and fixes them te…☆737Updated this week
- A de-metaified Meta Glasses client.☆56Updated this week
- KEV-gated continual-learning XSS specialist with execution-authoritative browser verification☆156Sep 28, 2026Updated 2 weeks ago
- shell script protector (obfuscation, embedded interpreter, DRM) - invisible to kernel tracing☆71Sep 23, 2026Updated 3 weeks ago
- Claude Code plugin for writing triager-grade bug bounty reports☆269Aug 25, 2026Updated last month
- AI Native IDE for reverse engineering☆296Updated this week
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Spot trading bot - RSI + EMA signals, backtest, paper and live trading via CCXT. Built on Investing Algorithm Framework.☆270Sep 24, 2026Updated 3 weeks ago
- Reusable prompts for a structured, evidence-first bug bounty hunting workflow☆616Oct 3, 2026Updated 2 weeks ago
- A canvas for red team infrastructure and cyber ranges. Compose a topology, export runnable Terraform and Ansible, and deploy it yourself.…☆162Oct 6, 2026Updated last week
- This document curates open-source projects, academic papers, capability benchmarks, and commercial solutions (international & China) in A…☆374Sep 10, 2026Updated last month
- A Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI☆124Updated this week
- Give AI agents their own macOS displays. Keep your screen, cursor, and focus.☆101Updated this week
- Snaffler in Python☆121Oct 1, 2026Updated 2 weeks ago
- Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when a…☆65Oct 6, 2026Updated last week
- Comprehensive, data-driven security assessment checklists across 23 platforms web, API, mobile, cloud, Active Directory, Kubernetes, LLM,…☆85Sep 16, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Open-source, model-independent Agent Skill for evidence-based software reconstruction with REA. Optional integration, portable installer,…☆64Updated this week
- 🛡️ A curated list of resources on agent skills security: attacks, defenses, frameworks, and benchmarks for securing AI agent tool use an…☆260Updated this week
- Local-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI…☆335Sep 14, 2026Updated last month
- Claude Code Monitor : Monitor & audit every action Claude Code takes on your computer.☆65Sep 28, 2026Updated 2 weeks ago
- A GUI for Sliver☆167Updated this week
- The multiplayer AI offensive security OS - open, self-improving, extensible. Find, verify, and fix vulnerabilities.☆512Updated this week
- A smart fuzzing and parameter injection tool designed to discover reflections and identify potential XSS attack vectors.☆38Updated this week
- Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealt…☆172Oct 8, 2026Updated last week
- jev + fs = findme☆26Sep 19, 2026Updated 3 weeks ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Agentic solution for recording browsers or screens. Work in progress.☆32Sep 26, 2026Updated 3 weeks ago
- ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, a…☆629Oct 1, 2026Updated 2 weeks ago
- Peer-metadata capture for chat-app calls (WhatsApp, Signal, Telegram ..etc). Authorized/consent use only. and more..☆249Sep 26, 2026Updated 3 weeks ago
- Introducing the most popular GSM Data Receiver, the ultimate solution for those seeking to retrieve valuable card details + pin from ATMs…☆14Jan 23, 2026Updated 8 months ago
- ScopeWeaver: English and Korean localization of ARTEX, with preserved AGPL-3.0 attribution.☆656Updated this week
- A collection of jailbreak prompts and exploit techniques for local and frontier AI models, with modern methods for Qwen3.5, Gemma 4, Llam…☆477Updated this week
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆64Sep 11, 2026Updated last month