A structured penetration testing knowledge base with methodologies, tool lists and reference PDFs across 23 security domains, from web and mobile to cloud and Wi-Fi.
2.3K+54 this week494TypeScriptMITUpdated 23 days ago
#security-testing
Best open-source security testing tools (2026)
These projects actively look for security flaws before release, covering web endpoint discovery, mobile app reverse engineering, automated penetration testing, and adversarial testing of AI agents. Pick by target first: web apps, mobile apps, or LLM-based systems, then check whether you need features like headless browser support. Katana is a fast, configurable crawler with standard and headless modes, suited to endpoint discovery. OWASP MASTG is a comprehensive manual for Android and iOS testing methods rather than a tool. ARTEX runs penetration tests autonomously with LLM agents and is licensed under AGPL-3.0, which requires derivative distributions to share their source.
Sort:Recently added
6 repositories
Open-source AI system that autonomously runs penetration tests using LLM agents, with a Go backend and Next.js web UI.
1.7K+400 this week625GoAGPL-3.0Well maintainedUpdated yesterday
Open-source adversarial testing engine, SDK and CLI that attacks AI agents via live endpoints and turns failures into firewall rules.
234+10 this week22PythonApache-2.0Well maintainedUpdated yesterday
A comprehensive OWASP manual describing technical processes for mobile app security testing and reverse engineering on Android and iOS.
13.3K+12 this week2.8KPythonCC-BY-SA-4.0Updated 13 hours ago
Command-line and library scanner that red-teams system prompts and agent instructions for prompt extraction and injection vulnerabilities.
744112TypeScriptOtherWell maintainedUpdated last month
A fast, configurable web crawler and spider framework from ProjectDiscovery, with standard and headless browser modes for discovering endpoints.
17.8K+35 this week1.2KGoMITWell maintainedUpdated yesterday