penetration-testing-tool

Cybersecurity Harness

API Pentesting Tools are specialized security tools used to test and analyze the security of Application Programming Interfaces (APIs).

PolarDNS is a specialized authoritative DNS server suitable for penetration testing and vulnerability research.

Penetration Testing AI Assistant based on open source LLMs.

Moodle community-based vulnerability scanner

Barcha is your Swiss‑Army knife for SQL Injection reconnaissance 🔍. Written in Go, it automates: Shodan enumeration of SSL hosts 🕵️‍♂️ Liveness & redirect checks (ignores bad certs) 🔄 Automated Ghauri tests for each host 🛡️ SQLite logging of every scan 🔖

A powerful command-line tool for website reconnaissance and information gathering

Aura-sec is a simple, fast, and extensible network port scanner built with Python. Designed for security professionals, students, and enthusiasts, Aura-sec makes it easy to scan network hosts for open ports and services. The tool is lightweight and user-friendly, making it ideal for both learning and practical network security tasks.

🆘 Precompiled binaries for Ghostpack and other for Windows and Linux.

An automated way to discover practical, hands on penetration testing projects using Claude, with structured learning roadmaps, relevant security tools, and progressive challenges to build real world cybersecurity skills.

An elite, self-orchestrating cyber-offensive platform built for relentless surface expansion, real-time intelligence gathering, precision vulnerability triage, and automated targeted exploitation.

The Advanced Web Vulnerability Scanner is a modular, Python-based tool designed to scan websites for common application layer web vulnerabilities.

Hunting Pro is a powerful subdomain enumeration and URL extraction tool designed for security professionals.

AI-powered automated penetration testing agent. Finds and exploits vulnerabilities in web apps, WordPress, and REST APIs using Claude AI with Tor routing.

A collection of awesome penetration testing and offensive cybersecurity resources.

Single-binary, web-UI penetration-testing scan orchestrator — one Go binary drives ~34 modules (nmap, nuclei, wpscan, hydra, impacket, netexec…) into structured findings. Async & cancellable, with RBAC, 2FA, a VPN killswitch, an assets inventory and CSV/JSON/PDF reports.

SubTracker is a cross-platform (Linux, Windows, macOS) command-line tool written in Go that discovers subdomains for a given target domain by calling the AgniOps Subdomain Scan API. Users must supply their own API key before any scan can run.

AI-powered offensive security framework

A lightweight, fast reconnaissance and web hygiene scanner focused on safe, controlled checks rather than noisy scanning. It analyzes security headers, cookie flags, CORS policy, HTTP methods, TLS certificates, and subdomain takeover risk, with wildcard-DNS-aware host discovery to minimize false

reversync is a secure, asynchronous Python reverse shell framework using SSL and asyncio for remote command execution.