Data / Repositories / Penetration testing
Penetration testing repositories on GitHub: 16 ranked by stars
16 public repositories tagged Penetration testing are on GitHub, with 157,846 stars between them; 9 had a push in the last 30 days. Most are written in Python (6), Go (2), TypeScript (2). The most starred: usestrix/strix (68,539), vxcontrol/pentagi (29,064), maurosoria/dirsearch (14,951).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Language | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|---|
| usestrix/strix | Open-source AI penetration testing tool to find and fix your app’s vulnerabilities. | Python | 68,539 | 7,595 | Apache-2.0 | Oct 14 | Oct 14 |
| vxcontrol/pentagi | Fully autonomous AI Agents system capable of performing complex penetration testing tasks | Go | 29,064 | 4,370 | MIT | Oct 9 | Oct 14 |
| maurosoria/dirsearch | Web path scanner | Python | 14,951 | 2,453 | Oct 7 | Oct 14 | |
| A-poc/RedTeam-Tools | Tools and Techniques for Red Team / Penetration Testing | 9,819 | 1,315 | Apr 18 | Oct 11 | ||
| six2dez/reconftw | reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities | Shell | 8,178 | 1,240 | MIT | Sep 26 | Oct 11 |
| infoslack/awesome-web-hacking | A list of web application security | 7,289 | 1,363 | MIT | Sep 18 | Oct 11 | |
| jekil/awesome-hacking | Awesome hacking is an awesome collection of hacking tools. | Python | 4,008 | 642 | May 16 | Oct 11 | |
| GH05TCREW/pentestagent | PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows. | Python | 3,180 | 629 | MIT | Oct 12 | Oct 14 |
| CyberStrikeus/CyberStrike | Open-source AI-powered offensive security harness for automated penetration testing. | TypeScript | 3,148 | 516 | AGPL-3.0 | Oct 14 | Oct 14 |
| danieldurnea/FBI-tools | OSINT Tools for gathering information and actions forensics | 2,700 | 379 | Mar 12, 2025 | Oct 11 | ||
| Ch0pin/medusa | Mobile Edge-Dynamic Unified Security Analysis | JavaScript | 2,357 | 319 | GPL-3.0 | Sep 6 | Oct 14 |
| jiwoochris/artex-global | ARTEX 한국어판 · AI 자율 침투 테스트 프레임워크(upstream: Autumn-27/ARTEX, AGPL-3.0) | Go | 1,893 | 2,100 | AGPL-3.0 | Oct 14 | Oct 21 |
| wgpsec/AboutSecurity | Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。 | Python | 1,790 | 248 | Oct 10 | Oct 14 | |
| Wh0am123/MCP-Kali-Server | MCP configuration to connect AI agent to a Linux machine. | Python | 848 | 171 | MIT | Mar 17 | Oct 14 |
| badchars/osint-mcp-server | OSINT intelligence MCP server for AI agents — 37 tools, 12 sources. Shodan, VirusTotal, Censys, SecurityTrails, DNS reconnaissance, WHOIS, certificate transparency, BGP routing… | TypeScript | 62 | 8 | MIT | Mar 17 | Oct 14 |
| nsasoft/nsauditor-ai | NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration.… | JavaScript | 20 | 6 | MIT | Oct 12 | Oct 14 |
By language
- Python 6
Related topics
- Security 11
- Hacking 9
- Security tools 7
- Bug bounty 6
- Pentesting 6
- Cybersecurity 5
- Security automation 5
- AI agents 4
- Pentest 4
- AI security 3
- Pentesting tools 3
- Osint 3
Read from GitHub by SpecStream between October 11, 2026 and October 21, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.