Autonomous Penetration Testing Agent Framework with External State Memory & Anti-False-Falsification Guardrails.
☆27Sep 9, 2026Updated last month
Alternatives and similar repositories for PentestPi
Users that are interested in PentestPi are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An autonomous AI agent framework for authorized CTF and security labs☆137Sep 20, 2026Updated last month
- Oktos 是一款红队后渗透平台，作为 XRED.TEAM 的一部分。它采用了模块化设计，支持 BOF 动态加载、多信道异步通信与内存免杀，内置的 AI 助手可辅助编排或自动执行后渗透任务，为红队提供隐蔽、高效、智能的作战能力。☆200Updated this week
- a forensic carver with a soft heart · 基于 Rust、Tauri 2 与 Vue 3 的桌面磁盘取证与数据恢复工具：只读解析镜像、文件系统与加密卷，提供原类型预览、全局搜索、时间线、文件雕刻与插件分析☆54Updated this week
- JeecgBoot综合漏洞利用工具版本更新☆17Feb 18, 2025Updated last year
- IIS PUT WebDAV GetShell Exploit☆18Aug 15, 2020Updated 6 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Beacon Object File (BOF) for identifying dependent child services of a given parent.☆19Jun 20, 2025Updated last year
- net-audit-skills☆54Jun 1, 2026Updated 4 months ago
- 新一代反制型蜜罐平台：通过反向代理在真实业务系统中无损植入蜜饵与虚拟路由，利用功能性伪装与反向提示词注入反控 AI 渗透 Agent，实现攻击捕获、画像溯源与上线反制。☆146Updated this week
- Tool developed using csharp (.net 4.5) for compressing and encrypting files to shorten transfer times. Supports multi-file compression an…☆14Feb 15, 2024Updated 2 years ago
- 针对红队渗透智能体蜜罐☆59Updated this week
- Drone and UAV Digital Forensic☆21Apr 27, 2026Updated 5 months ago
- 云安全漏洞挖掘与利用 Skill。S3 桶爆破枚举、公开桶敏感文件发现、SSRF→IMDS 凭证窃取探测、K8s 未授权访问检测、容器逃逸条件识别、 AK/SK 凭证验证与权限枚举、存储桶供应链攻击利用。☆33Jul 14, 2026Updated 3 months ago
- 阿波罗钓鱼演练平台(ApolloFish)的网页钓鱼模板、邮箱钓鱼模板共享仓库。☆26Jan 20, 2026Updated 9 months ago
- 根据域名生成备份文件字典（不扫描）☆22Feb 14, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- FuzzHound是一款专为 API 安全测试设计的智能 Fuzz 工具，支持 Swagger/OpenAPI 文档自动解析，提供多种 Fuzz 模式和漏洞检测能力。像猎犬一样嗅探 API 中的安全漏洞！☆27Apr 21, 2026Updated 6 months ago
- 本系统基于 **Windows + WSL (Kali Linux)** 双环境搭建，是一套整合多类AI安全工具的一体化渗透测试平台。系统将大语言模型能力与传统渗透测试工具深度结合，覆盖Web安全、内网攻防、二进制逆向、API测试、流量分析等多个安全领域，可实现渗透测试全流…☆44Aug 26, 2026Updated last month
- CyberMatrix 是一个基于 AI 的代码安全分析工具，专注于自动化检测和分析代码中的潜在安全漏洞。采用赛博朋克风格的现代化界面，提供直观的安全分析体验。☆44Feb 21, 2025Updated last year
- 用友NC漏洞批量检测工具，支持POC显示、单一检测、批量检测、结果导出、AI交互等☆45Sep 8, 2025Updated last year
- 将传统的k8s攻击手法进行整合，融入cdk的相关exp，接入llm并提供attack接口完成k8s自动化渗透。☆31Jul 12, 2026Updated 3 months ago
- ☆29Apr 14, 2024Updated 2 years ago
- MySQL Log Analysis☆11Feb 22, 2016Updated 10 years ago
- WxappRevealer 是一款跨平台、独立可执行的命令行工具，专注于对 WeChat 小程序（`.wxapkg`）的智能反编译与敏感信息检索☆29Dec 12, 2025Updated 10 months ago
- ToShell 是一个轻量 C2 框架，由 服务端（Team Server）+ Web 控制台 + 多平台植入端 组成，覆盖「生成载荷 → 会话管理 → 任务执行」的完整链路。单二进制即可部署整套服务，开箱即用。☆196Sep 28, 2026Updated 3 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- "闪紫"（英文名shiningZ）社工字典生成工具，支持ABC自定义排列组合、ABC列字典AI扩展、AI提示词联想字典、自定义AI提示、字典去重、结果导出等☆33Oct 27, 2025Updated 11 months ago
- Local tool-call review gateway for coding agents: Go + Vue, human and model review, audit trails, and usage dashboard.☆20Oct 12, 2026Updated last week
- AI Code Audit Prompt Words☆28Feb 12, 2026Updated 8 months ago
- 哥斯拉webshell管理工具二开☆402Sep 16, 2026Updated last month
- Sharing of self-developed red team tools...记得freebuf关注我P1cker☆11Jan 12, 2021Updated 5 years ago
- 设计页面时提供灵感☆11Apr 21, 2019Updated 7 years ago
- 自研C2 功能展示。cs+spark的结合体。省去了本地客户端，便于团队操作。后续开源社区版。☆16Oct 30, 2024Updated last year
- burp被动插件扫反射xss☆13Nov 29, 2023Updated 2 years ago
- EWSTool是一个针对EXCHANGE邮件服务器的后渗透利用工具。使用ews接口，实现人 员邮箱列表获取、搜索邮件、下载邮件等实用功能。☆66Mar 12, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 基于 Claude Code / Codex 的 SRC 漏洞挖掘 Agent 技能体系 —— 将顶尖安全研究员的方法论沉淀为可调度、可复用的 Skill 知识资产。☆123Sep 15, 2026Updated last month
- ☆17Jul 31, 2026Updated 2 months ago
- Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + du…☆26Oct 8, 2026Updated 2 weeks ago
- Stealthy Payload loader with Anti-EDR Capabilities☆134Apr 21, 2025Updated last year
- 一款针对Spring框架的漏洞扫描及漏洞利用图形化工具☆238Jun 13, 2026Updated 4 months ago
- Open-source, self-hosted attack surface management platform with distributed agents for asset discovery, scan orchestration, and vulnerab…☆43Updated this week
- PoC of Spring AMQP Deserialization Vulnerability (CVE-2023-34050)☆13Jan 29, 2024Updated 2 years ago