GitHub repo leaderboard by stars, growth rate and activity.

• vxcontrol

  #1vxcontrol/pentagi

  Fully autonomous AI Agents system capable of performing complex penetration testing tasks

  Go22,779 starslast pushed 23 hours ago
• urbanadventurer

  #2urbanadventurer/WhatWeb

  Next generation web scanner

  Ruby6,830 starslast pushed 5 months ago
• t3l3machus

  #3t3l3machus/Villain

  Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

  Python4,450 starslast pushed 1 year ago
• Netw0rkNoob

  #4Netw0rkNoob/VulnClaw

  基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

  Python3,302 starslast pushed 6 days ago
• Armur-Ai

  #5Armur-Ai/Pentest-Swarm-AI

  Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go, Claude API, and 7+ native security tools.

  Go2,488 starslast pushed 3 days ago
• vladko312

  #6vladko312/SSTImap

  Automatic SSTI detection tool with interactive interface

  Python1,638 starslast pushed 2 weeks ago
• NHAS

  #7NHAS/reverse_ssh

  SSH based reverse shell

  Go1,458 starslast pushed 3 days ago
• SanMuzZzZz

  #8SanMuzZzZz/LuaN1aoAgent

  LuaN1aoAgent is a fully autonomous AI-driven penetration testing agent powered by graph-based cognitive reasoning.

  TypeScript1,304 starslast pushed 3 weeks ago
• Hackmanit

  #9Hackmanit/Web-Cache-Vulnerability-Scanner

  Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

  Go1,206 starslast pushed 8 months ago
• Fahrj

  #10Fahrj/reverse-ssh

  Statically-linked ssh server with reverse shell functionality for CTFs and such

  Go1,056 starslast pushed 2 months ago

#	Repo	Language	Stars	30-day trend	Last updated
1	vxcontrol vxcontrol/pentagi Fully autonomous AI Agents system capable of performing complex penetration testing tasks	Go	22,779		last pushed 23 hours ago
2	urbanadventurer urbanadventurer/WhatWeb Next generation web scanner	Ruby	6,830		last pushed 5 months ago
3	t3l3machus t3l3machus/Villain Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).	Python	4,450		last pushed 1 year ago
4	Netw0rkNoob Netw0rkNoob/VulnClaw 基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。	Python	3,302		last pushed 6 days ago
5	Armur-Ai Armur-Ai/Pentest-Swarm-AI Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go, Claude API, and 7+ native security tools.	Go	2,488		last pushed 3 days ago
6	vladko312 vladko312/SSTImap Automatic SSTI detection tool with interactive interface	Python	1,638		last pushed 2 weeks ago
7	NHAS NHAS/reverse_ssh SSH based reverse shell	Go	1,458		last pushed 3 days ago
8	SanMuzZzZz SanMuzZzZz/LuaN1aoAgent LuaN1aoAgent is a fully autonomous AI-driven penetration testing agent powered by graph-based cognitive reasoning.	TypeScript	1,304		last pushed 3 weeks ago
9	Hackmanit Hackmanit/Web-Cache-Vulnerability-Scanner Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).	Go	1,206		last pushed 8 months ago
10	Fahrj Fahrj/reverse-ssh Statically-linked ssh server with reverse shell functionality for CTFs and such	Go	1,056		last pushed 2 months ago

All · 11,658