Penetration Testing GitHub Repositories (2026) · Open Source Tools

Next generation web scanner

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

A Security Tool for Bug Bounty, Pentest and Red Teaming.

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Pentest Report Generator

Mobile Edge-Dynamic Unified Security Analysis

ScanT3r - Module based Bug Bounty Automation Tool ( use Lotus instead github.com/bugBlocker/lotus )

Set of tools to audit SIP based VoIP Systems

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

Pentest Report Generator

one-stop resource for all things offensive security.

Supervised, Hermes-native penetration testing profile with 35 routed playbooks, guarded target execution, persistent engagement state, evidence-backed findings, and release-gated reporting.

Open-source agentic security operations platform:

A post exploitation framework for advanced Red Team operations

Pen Test Report Generation and Assessment Collaboration

An Axum-based Rust web framework with Lean 4-verifiable application kernels that run on servers, bare-metal embedded devices, and GPUs, plus integrated security testing.