Open Source Security Arsenal

BlackWidow A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

wapiti Web vulnerability scanner written in Python3

rapidscan :new: The Multi-Tool Web Vulnerability Scanner.

BBScan A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers

crawlergo A powerful browser crawler for web vulnerability scanners

w3af w3af: web application attack and audit framework, the open source web vulnerability scanner.

awesome-web-hacking A list of web application security

guardian-cli Guardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to orchestrate intelligent, step-by-step penetration testing workflows while maintaining ethical hacking standards.

Hacking-Tools A curated list of penetration testing and ethical hacking tools, organized by category. This compilation includes tools from Kali Linux and other notable sources.

Pentest-Swarm-AI Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go, Claude API, and 7+ native security tools.

Penetration-Testing-Tools A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

MailSniper MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.