Best Open Source pentesting Libraries
A curated list of the most popular GitHub repositories tagged with pentesting. Select any project to visualize its architecture and dive into the codebase using RepoMind's AI engine.
#1sherlock-project/sherlock
Hunt down social media accounts by username across social networks
#2sqlmapproject/sqlmap
Automatic SQL injection and database takeover tool
#3KeygraphHQ/shannon
Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
#4bee-san/RustScan
🤖 The Modern Port Scanner 🤖
#5soxoj/maigret
🕵️♂️ Collect a dossier on a person by username from thousands of sites
#6promptfoo/promptfoo
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, Llama, and more. Simple declarative configs with command line and CI/CD integration.
#7smicallef/spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
#8ffuf/ffuf
Fast web fuzzer written in Go
#9HackTricks-wiki/hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
#10blacklanternsecurity/bbot
The recursive internet scanner for hackers. 🧡
#111N3/Sn1per
Attack Surface Management Platform
#12dstotijn/hetty
An HTTP toolkit for security research.
#13OWASP/wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
#14Ullaakut/cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
#15jassics/security-study-plan
Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
#16OWASP/Nettacker
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
#17rix4uni/medium-writeups
This repository updates latest Bug Bounty medium writeups every 10 minutes, https://readmedium.com/Medium_URL, https://archive.ph/Medium_URL, https://freedium.cfd/Medium_URL
#18rix4uni/cvemapping
This repo Gathers all available cve exploits from github.⚠️ Be careful Malware.
#19ebrasha/cidr-ip-ranges-by-country
CIDR IP ranges by country for geolocation, firewall rules, network filtering, and cybersecurity – updated hourly for IPv4 and IPv6. Curated by EbraSha – Abdal Security Group
#20rix4uni/scope
An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms (like Hackerone/Bugcrowd/Intigriti/etc) (updates every 10 minutes)