Offensive Security GitHub Repositories (2026) · Open Source Tools

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.

Open-source AI-powered offensive security harness for automated penetration testing.

A canvas for red team infrastructure and cyber ranges. Compose a topology, export runnable Terraform and Ansible, and deploy it yourself. Your cloud credentials never leave your machine.

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.

Extract Windows credentials directly from VM memory snapshots and virtual disks

Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.

one-stop resource for all things offensive security.

Adversary Simulators High-Fidelity Intelligence and Reporting Toolkit

Open-source agentic security operations platform:

A post exploitation framework for advanced Red Team operations

An Axum-based Rust web framework with Lean 4-verifiable application kernels that run on servers, bare-metal embedded devices, and GPUs, plus integrated security testing.