penetration-testing-tools

Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go, Claude API, and 7+ native security tools.

cybersecurity penetration-testing bug-bounty offensive-security ai-agents penetration-testing-framework penetration-testing-tools

Updated Aug 22, 2026
Go

NHAS / reverse_ssh

Sponsor

Star

SSH based reverse shell

shell tunnel ssh golang terminal reverse-shell proxy sftp hacking scp pentesting pentest static-binary security-tools conpty penetration-testing-tools

Updated Aug 16, 2026
Go

cyberark / kubesploit

Star

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

agent kubernetes golang security containers http2 post-exploitation security-tools c2 penetration-testing-framework command-and-control red-teams penetration-testing-tools redteam-tools

Updated Feb 3, 2025
Go

8000

Hackmanit / Web-Cache-Vulnerability-Scanner

Star

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

security security-audit scanner hacking penetration-testing pentesting bugbounty hacking-tool vulnerability-scanners security-scanner security-tools web-cache penetration-testing-tools

Updated Jan 21, 2026
Go

Fahrj / reverse-ssh

Star

Statically-linked ssh server with reverse shell functionality for CTFs and such

ssh golang security terminal backdoor reverse-shell hacking penetration-testing remote-shell remote-admin-tool security-tools conpty penetration-testing-tools

Updated Jul 19, 2026
Go

rhaidiz / broxy

Star

An HTTP/HTTPS intercept proxy written in Go.

go golang security proxy http-proxy hacking penetration-testing interceptor qt5-gui websecurity http-security http-interceptor qt-wrapper wapt penetration-testing-tools broxy

Updated Feb 11, 2022
Go

hueristiq / xurlfind3r

Star

A command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.

go golang osint penetration-testing bug-bounty web-security ethical-hacking reconnaissance red-teaming penetration-testing-tools ethical-hacking-tools osint-tools contentdiscovery bug-bounty-tools red-teaming-tools

Updated Feb 23, 2026
Go

Cgboal / SonarSearch

Sponsor

Star

A rapid API for the Project Sonar dataset

dns osint subdomain enumeration penetration-testing bugbounty rapid7 subdomain-enumeration penetration-testing-tools osint-tool sonar-api

Updated May 5, 2023
Go

mhmdiaa / second-order

Star

Second-order subdomain takeover scanner

security crawler mapping crawling wordlist penetration-testing infosec pentesting recon wordlist-generator security-tools web-application-security reconnaissance penetration-testing-tools

Updated Mar 29, 2026
Go

edoardottt / lit-bb-hack-tools

Sponsor

Star

Little Bug Bounty & Hacking Tools⚔️

cli tools hacking bug-bounty infosec bugbounty hacktoberfest hacking-tool ctf-tools security-tools cli-tool hacking-tools penetration-testing-tools bug-bounty-recon infosectools ctf-tool

Updated Mar 30, 2026
Go

trickest / mksub

Star

Generate tens of thousands of subdomain combinations in a matter of seconds

security subdomain enumeration penetration-testing infosec pentesting recon bugbounty security-tools reconnaissance subdomain-scanner subdomain-enumeration pentesting-tools penetration-testing-tools bugbountytips subdomain-finder infosectools

Updated Sep 25, 2023
Go

mhmdiaa / chronos

Star

Wayback Machine OSINT Framework

security mapping wordlist penetration-testing infosec pentesting recon wayback-machine wordlist-generator security-tools web-application-security reconnaissance wordlists penetration-testing-tools

Updated Jul 28, 2024
Go

trickest / dsieve

Star

Filter and enrich a list of subdomains by level

security subdomain enumeration penetration-testing infosec pentesting bugbounty subdomain-scanner subdomain-enumeration pentesting-tools penetration-testing-tools subdomain-finder infosectools

Updated Sep 25, 2023
Go

trickest / mkpath

Star

Make URL path combinations using a wordlist

security enumeration penetration-testing fuzzing pentesting recon reconnaissance directory-bruteforce pentesting-tools penetration-testing-tools bugbountytips webappsecurity

Updated Sep 25, 2023
Go

trickest / find-gh-poc

Star

Find CVE PoCs on GitHub

security exploit hacking penetration-testing poc vulnerability pentesting cve software-security red-team security-tools software-vulnerability software-vulnerabilities penetration-testing-tools latest-cve cve-poc

Updated Aug 1, 2025
Go

hueristiq / xsubfind3r

Star

A command-line utility designed to discover subdomains for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.

go docker golang osint docker-image penetration-testing bug-bounty ethical-hacking reconnaissance red-teaming subdomain-enumeration subdomain-discovery asset-discovery penetration-testing-tools ethical-hacking-tools osint-tools red-team-tools bug-bounty-tools

Updated Feb 23, 2026
Go

Improve this page

Add a description, image, and links to the penetration-testing-tools topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the penetration-testing-tools topic, visit your repo's landing page and select "manage topics."

Learn more

Navigation Menu

penetration-testing-tools

Here are 74 public repositories matching this topic...

vxcontrol / pentagi

drk1wi / Modlishka

cdk-team / CDK

BishopFox / cloudfox

Armur-Ai / Pentest-Swarm-AI

NHAS / reverse_ssh

cyberark / kubesploit

Hackmanit / Web-Cache-Vulnerability-Scanner

Fahrj / reverse-ssh

rhaidiz / broxy

hueristiq / xurlfind3r

Cgboal / SonarSearch

mhmdiaa / second-order

edoardottt / lit-bb-hack-tools

trickest / mksub

mhmdiaa / chronos

trickest / dsieve

trickest / mkpath

trickest / find-gh-poc

hueristiq / xsubfind3r

Improve this page

Add this topic to your repo