Open-source penetration-testing software

1322 open-source libraries, tools and applications tagged penetration-testing, ranked by how closely penetration-testing is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.

1322 products, primary matches first, then adoption-weighted; health v2 shown.

Product	Health v2	Stars	Maturity
tillson/git-hound GitHound is a Go-based CLI tool that hunts for exposed API keys, secrets, and credentials across all of GitHub using GitHub dorks, pattern …	64	1468	active
JailbrokenAI/wallbreaker Wallbreaker is a Claude-Code-style terminal harness for red-teaming LLMs, driving an autonomous agent loop that runs jailbreak attacks (PAI…	54	1464	active
ChiChou/grapefruit Grapefruit is an open-source mobile security testing suite for iOS and Android that provides a browser-based GUI over Frida for runtime ins…	88	1392	active
yeswehack/PwnFox PwnFox is a Firefox extension paired with a Burp Suite extension that provides tools for web security audits, such as one-click Burp proxy …	23	1350	active
dwisiswant0/go-dork go-dork is a fast command-line dork scanner written in Go that automates Google dorking across multiple search engines. It supports Google,…	23	1306	stable
utkusen/promptmap promptmap2 is an automated prompt injection scanner for custom LLM applications, supporting white-box testing of system prompts and black-b…	50	1278	active
trailofbits/anamorpher Anamorpher is a tool for crafting and visualizing image scaling attacks that hide multi-modal prompt injections in images, revealed only wh…	52	1080	active
mitmproxy/android-unpinner A Python CLI tool that removes certificate pinning from Android APKs so traffic can be intercepted with mitmproxy, without requiring a root…	51	1043	active
greatscottgadgets/facedancer A Python library for emulating USB devices using hardware peripherals like Cynthion or GreatFET. It also supports MITM proxying of USB conn…	72	1031	active
martinvigo/email2phonenumber A Python OSINT tool that discovers a target's phone number from just their email address by abusing password reset flows that leak masked p…	32	2808	maintenance
kgretzky/pwndrop pwndrop is a self-deployable file hosting service aimed at red teamers, letting users upload and share payloads over HTTP, HTTPS, and WebDA…	23	2277	maintenance
initstring/cloud_enum A Python command-line OSINT tool that enumerates publicly exposed resources across AWS, Azure, and Google Cloud using keyword mutations and…	90	2148	maintenance
greatscottgadgets/ubertooth Ubertooth is an open source wireless development platform for Bluetooth experimentation, providing host software, firmware, and hardware de…	52	2148	maintenance
FIRMADYNE FIRMADYNE is an automated, scalable platform for emulating and dynamically analyzing Linux-based embedded firmware using QEMU with instrume…	32	2114	maintenance
mstsc.js RDPY is a pure Python implementation of the Microsoft Remote Desktop Protocol (RDP) built on the Twisted event-driven network engine, suppo…	32	1733	maintenance
gwen001/github-search A collection of Python, PHP, and Bash scripts that perform targeted searches on GitHub via its search API to find secrets, keys, private re…	23	1515	maintenance
ptswarm/reFlutter A Python-based framework that repacks Flutter Android and iOS apps with a patched Flutter engine library to enable dynamic analysis. It red…	10	1462	maintenance
hubert3/iSniff-GPS iSniff-GPS is a passive WiFi sniffing tool that captures SSID probes, ARPs, and MDNS packets from nearby iOS devices to infer their previou…	32	1287	maintenance
sh4hin/Androl4b AndroL4b is an Ubuntu MATE-based virtual machine preloaded with Android security, reverse engineering, and malware analysis tools such as R…	32	1172	maintenance
samyk/keysweeper KeySweeper is an open-source, open-hardware Arduino-based device disguised as a USB wall charger that passively sniffs, decrypts, and logs …	32	1126	maintenance
ajinabraham/CMSScan CMSScan is a self-hosted security dashboard that scans WordPress, Drupal, Joomla, and vBulletin websites for vulnerabilities by wrapping wp…	32	1081	maintenance
NoDataFound/hackGPT hackGPT is a Python/Jupyter-based chatbot application that leverages OpenAI and ChatGPT APIs for security-oriented tasks like malware analy…	72	1212	experimental