Discover the best Red Team open source repositories on GitHub. Explore trending tools, live star counts, source code, and developer projects updated daily.
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
Open-source AI red teaming toolkit from Microsoft. Test generative AI systems with automated scans, adaptive multi-turn attacks, and a web UI.
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution
Turns an Android phone and supported ESP32 board into a portable, no-root wireless security research toolkit.
🐛 Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports
Adversary Emulation Framework
The Network Execution Tool
Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.
A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.
Adversary Simulators High-Fidelity Intelligence and Reporting Toolkit
A list of over 400+ fresh, working captive portals specifically designed around the marauder firmware. Files are all in .html format.
Curso completo de Segurança Cibernética com conteúdos gratuitos em português.
Supervised, Hermes-native penetration testing profile with 35 routed playbooks, guarded target execution, persistent engagement state, evidence-backed findings, and release-gated reporting.
RUDY is an acronym used to describe a Denial of Service (DoS) tool used by hackers to perform slow-rate a.k.a. “Low and slow” attacks.
RISE: Red-teaming via Iterative Strategy Evolution (NeurIPS 2026)
Signature based honeypot detector tool written in Golang
A post exploitation framework for advanced Red Team operations
Gulp it before burp — Ultra-fast native Rust web security testing, DAST scanner & HTTP/HTTPS/WebSocket proxy suite