GitHub Open Source Insight
Computed at Sep 11, 2026GitHub repo leaderboard by stars, growth rate and activity.
usestrix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Python61,565 starslast pushed YesterdayKeygraphHQ
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
TypeScript47,886 starslast pushed 2 days ago0x4m4
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Python11,760 starslast pushed 1 month ago1N3
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.
Shell11,218 starslast pushed 2 months agoWe5ter
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
—9,041 starslast pushed 4 weeks agourbanadventurer
AIPentest
The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.
Go6,492 starslast pushed 3 days agoOWASP
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
Python5,558 starslast pushed Yesterdayjonaslejon
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
Python4,303 starslast pushed 2 weeks agot3l3machus
A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.
Python3,489 starslast pushed 2 years ago
| # | Repo | Language | Stars | 30-day trend | Last updated |
|---|---|---|---|---|---|
| 1 | usestrix Open-source AI penetration testing tool to find and fix your app’s vulnerabilities. | Python | 61,565 | last pushed Yesterday | |
| 2 | KeygraphHQ Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production. | TypeScript | 47,886 | last pushed 2 days ago | |
| 3 | 0x4m4 HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities. | Python | 11,760 | last pushed 1 month ago | |
| 4 | 1N3 Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections. | Shell | 11,218 | last pushed 2 months ago | |
| 5 | We5ter A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑 | — | 9,041 | last pushed 4 weeks ago | |
| 6 | urbanadventurer Next generation web scanner | Ruby | 6,829 | last pushed 5 months ago | |
| 7 | AIPentest The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next. | Go | 6,492 | last pushed 3 days ago | |
| 8 | OWASP Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management | Python | 5,558 | last pushed Yesterday | |
| 9 | jonaslejon 💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh | Python | 4,303 | last pushed 2 weeks ago | |
| 10 | t3l3machus A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell. | Python | 3,489 | last pushed 2 years ago |
All · 11,474