GitHub stars · StarDay

10x4m4 / hexstrike-aiHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.PythonMIT · Permissive13,392

2We5ter / Scanners-BoxThe Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents - A matrix of all-domain open-source network security tools for geeks, enterprises, and AI agentsLicense not declared9,181

3AIPentest / CyberStrikeAIThe system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.GoApache-2.0 · Permissive8,434

4urbanadventurer / WhatWebNext generation web scannerRubyGPL-2.0 · Share derivative source6,989

5OWASP / NettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability ManagementPythonApache-2.0 · Permissive5,713

6jonaslejon / malicious-pdf💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.shPythonBSD-2-Clause · Permissive4,517

7arch3rPro / Pentest-Windows⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M ChipsLicense not declared3,607

8t3l3machus / hoaxshellA Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.PythonBSD-2-Clause · Permissive3,504

9CyberStrikeus / CyberStrikeOpen-source AI-powered offensive security harness for automated penetration testing.TypeScriptAGPL-3.0 · Share derivative source3,408

10harsh-bothra / learn365This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.License not declared1,994

11SECFORCE / spartaNetwork Infrastructure Penetration Testing ToolPythonGPL-3.0 · Share derivative source1,667

12bountyyfi / lonkeroLonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.RustLicense not declared1,099

13johnnyxmas / ScanCannonA script for credentials-based attack surface enumeration and general reconnaissance of massive external networksShellLicense not declared480