Popular GitHub Repositories for Pentesting

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.

Helping Ethical Hackers use LLMs in 50 Lines of Code or less..

A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery

用于将MCP服务器整合到JDEX的插件

本项目通过大模型联动爬虫，检索Github上所有存有有价值漏洞信息与漏洞POC或规则信息的项目，并自动识别项目的目录结构、Readme信息后进行总结分析并分类，所汇总的项目可以帮助安全行业从业者收集漏洞信息、POC信息、规则等。

强大的MCP（模型上下文协议）安全机制

Blackdagger is a DAG-based automation tool specifically used in DevOps, DevSecOps, MLOps, MLSecOps, and Continuous Red Teaming (CART).

Automated web vulnerability scanning with LLM agents

? LLM-powered agent for automated Google Dorking in bug hunting & pentesting.

CLI tool for the Horizon3.ai API

Pentest Copilot is an AI-powered browser based ethical hacking assistant tool designed to streamline pentesting workflows.

连接AI智能体到Linux机器的MCP配置

???? your way into Claude 3.5’s new Computer Use API! Deploy Metasploit, automate exploits, and make Claude your AI-powered hakcer sidekick. Drink all the AI's HACK ALL THE THINGS. Shenanigans included. ?????

AI-Powered Cybersecurity Port Analyzer - Day 1 of 30-Day Hack Tool Challenge | AI Destekli Siber Güvenlik Port Analiz Arac? - 30 Günde 30 Hack Arac? Yar??mas? 1. Gün

ScanHound es una herramienta de escaneo de redes que permite detectar servicios abiertos y representarlos visualmente en Neo4j y en un DashBoard con consultas preestablecidas.

MCP for Security: A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.

非教育用途：一个面向专业渗透测试人员的服务器，包含Nmap、Go/Dirbuster、Nikto、JtR、密码字典生成器等工具。

Automate your pentesting tasks with the help of AI! This script uses advanced language models to optimize tool selection, generate commands, execute these commands, and intelligently analyze the results.

基于大型语言模型的自动化 JavaScript 代码分析代理，用于漏洞挖掘和渗透测试。

Use machine learning to generate wordlists for cracking!