Source snapshots of the most popular open-source AI penetration-testing / security tooling. Refreshed daily · old versions are kept.
| Tool | Version | Updated | Added | Snapshots |
|---|---|---|---|---|
| strixApache-2.0 Autonomous pentest agents Autonomous AI pentesting agents — run code dynamically, find vulnerabilities, validate them with real PoCs. | v1.7.0 tag | 2026-10-09 | 2026-10-09 | strix-v1.7.0.tar.gz 4.9 MB |
| shannonAGPL-3.0 Autonomous pentest agents Fully autonomous AI pentester for web apps and APIs — white-box, reads your source code. | v3.5.0 tag | 2026-10-28 | 2026-10-09 | shannon-v3.4.0.tar.gz 51.5 MB shannon-v3.5.0.tar.gz 51.5 MB |
| pentagiMIT Autonomous pentest agents Fully autonomous multi-agent penetration testing system (self-hosted, Docker + web UI). | v2.2.0 tag | 2026-10-09 | 2026-10-09 | pentagi-v2.2.0.tar.gz 50.2 MB |
| DecepticonApache-2.0 Autonomous pentest agents Autonomous hacking agent for red-team engagements. | v2.2.2 tag | 2026-10-28 | 2026-10-09 | +4 older Decepticon-v1.5.0.tar.gz 26.3 MB Decepticon-v1.5.3.tar.gz 26.3 MB Decepticon-v1.5.4.tar.gz 26.5 MB Decepticon-v1.6.0.tar.gz 26.6 MB Decepticon-v2.0.0.tar.gz 26.6 MB Decepticon-v2.1.1.tar.gz 26.7 MB Decepticon-v2.2.0.tar.gz 26.7 MB Decepticon-v2.2.2.tar.gz 26.5 MB |
| redamon Autonomous pentest agents Self-hosted AI pentesting framework — maps attack surface into a graph, autonomous exploitation. | v6.14.1 tag | 2026-10-09 | 2026-10-09 | redamon-v6.14.1.tar.gz 196.9 MB |
| Pentest-Swarm-AIAGPL-3.0 Autonomous pentest agents Swarm of AI agents orchestrating recon, classification, exploitation and reporting. | v0.3.7 tag | 2026-10-31 | 2026-10-09 | Pentest-Swarm-AI-v0.2.31.tar.gz 6.1 MB Pentest-Swarm-AI-v0.3.1.tar.gz 6.2 MB Pentest-Swarm-AI-v0.3.2.tar.gz 6.2 MB Pentest-Swarm-AI-v0.3.3.tar.gz 6.2 MB Pentest-Swarm-AI-v0.3.6.tar.gz 6.3 MB Pentest-Swarm-AI-v0.3.7.tar.gz 6.3 MB |
| LuaN1aoAgent Autonomous pentest agents Autonomous AI pentest agent with graph-based cognitive reasoning. | v2.0.0 tag | 2026-10-09 | 2026-10-09 | LuaN1aoAgent-v2.0.0.tar.gz 1.7 MB |
| xalgorixApache-2.0 Autonomous pentest agents Autonomous AI pentesting agents — real-time recon, vulnerability detection, exploitation. | v4.6.174 tag | 2026-10-31 | 2026-10-09 | +1 older xalgorix-v4.6.154.tar.gz 7.5 MB xalgorix-v4.6.157.tar.gz 7.5 MB xalgorix-v4.6.159.tar.gz 7.5 MB xalgorix-v4.6.163.tar.gz 7.5 MB xalgorix-v4.6.170.tar.gz 7.6 MB xalgorix-v4.6.172.tar.gz 7.6 MB xalgorix-v4.6.173.tar.gz 7.7 MB xalgorix-v4.6.174.tar.gz 7.7 MB |
| nebulaBSD-2-Clause Autonomous pentest agents AI-powered pentesting assistant — automated recon, note-taking, vulnerability analysis. | nebula-v3.0.38 tag | 2026-11-01 | 2026-10-09 | +12 older nebula-nebula-v3.0.31.tar.gz 26.8 MB nebula-nebula-v3.0.32.tar.gz 26.9 MB nebula-nebula-v3.0.33.tar.gz 26.9 MB nebula-nebula-v3.0.34.tar.gz 26.9 MB nebula-nebula-v3.0.35.tar.gz 26.9 MB nebula-nebula-v3.0.36.tar.gz 26.9 MB nebula-nebula-v3.0.37.tar.gz 26.9 MB nebula-nebula-v3.0.38.tar.gz 26.9 MB |
| Tool | Version | Updated | Added | Snapshots |
|---|---|---|---|---|
| PentestGPTMIT LLM-assisted pentest frameworks The original LLM pentesting agent framework (USENIX Security 2024). | v1.0.0 tag | 2026-10-09 | 2026-10-09 | PentestGPT-v1.0.0.tar.gz 33.1 MB |
| cai LLM-assisted pentest frameworks Cybersecurity AI framework — build your own security AI agents. ⚠ Archived by upstream in Aug 2026 — kept for reference; the framework is still widely used. | HEAD-6dc7925 head | 2026-10-09 | 2026-10-09 | cai-HEAD-6dc7925.tar.gz 216.5 MB |
| Cairn LLM-assisted pentest frameworks State-space search engine for autonomous agents — first proven on AI penetration testing. | v0.2.1 tag | 2026-10-09 | 2026-10-09 | Cairn-v0.2.1.tar.gz 2.9 MB |
| pentestagentMIT LLM-assisted pentest frameworks AI agent framework for black-box security testing (bug bounty / red team / CTF). | HEAD-8dde193 head | 2026-10-27 | 2026-10-09 | pentestagent-HEAD-87d763a.tar.gz 3.3 MB pentestagent-HEAD-8dde193.tar.gz 3.3 MB |
| pentest-copilotMIT LLM-assisted pentest frameworks Browser-based AI hacking assistant with agentic command execution. | HEAD-cd512ed head | 2026-10-09 | 2026-10-09 | pentest-copilot-HEAD-cd512ed.tar.gz 19.3 MB |
| hackingBuddyGPTMIT LLM-assisted pentest frameworks Teaching and research harness for LLM-assisted pentesting in minimal code. | v0.5.0 tag | 2026-10-09 | 2026-10-09 | hackingBuddyGPT-v0.5.0.tar.gz 1.1 MB |
| pentest-agents LLM-assisted pentest frameworks Bug-bounty agent framework for Claude Code, Codex, Gemini, Cursor etc. (48 agents). | HEAD-41d49b6 head | 2026-10-09 | 2026-10-09 | pentest-agents-HEAD-41d49b6.tar.gz 2.9 MB |
| Tool | Version | Updated | Added | Snapshots |
|---|---|---|---|---|
| hexstrike-aiMIT MCP & agent tool bridges MCP server that lets AI agents drive 150+ security tools (12+ agents, FastMCP). | HEAD-d689933 head | 2026-10-09 | 2026-10-09 | hexstrike-ai-HEAD-d689933.tar.gz 2.0 MB |
| MCP-Kali-ServerMIT MCP & agent tool bridges MCP bridge connecting AI agents to a Kali Linux machine. | HEAD-00154c0 head | 2026-10-09 | 2026-10-09 | MCP-Kali-Server-HEAD-00154c0.tar.gz 10.6 KB |
| reaMIT MCP & agent tool bridges REA (Reverse Engineer Anything): MCP server that lets AI agents reverse engineer apps, runtime behavior and native binaries (Ghidra, IDA Pro, Hopper, JADX, Frida). | rea-agents-6.8.0 tag | 2026-10-26 | 2026-10-17 | rea-rea-agents-6.5.0.tar.gz 11.2 MB rea-rea-agents-6.6.0.tar.gz 12.9 MB rea-rea-agents-6.7.0.tar.gz 12.9 MB rea-rea-agents-6.8.0.tar.gz 18.5 MB |
| Tool | Version | Updated | Added | Snapshots |
|---|---|---|---|---|
| vulnhuntrAGPL-3.0 AI vulnerability discovery & fuzzing LLM-powered zero-shot vulnerability discovery in Python source code. ⚠ Upstream dormant since Feb 2025 — kept for reference; still widely cited. | HEAD-ead88c5 head | 2026-10-09 | 2026-10-09 | vulnhuntr-HEAD-ead88c5.tar.gz 79.4 KB |
| oss-fuzz-genApache-2.0 AI vulnerability discovery & fuzzing LLM-powered fuzzing — generates and validates OSS-Fuzz targets. | v1.0 tag | 2026-10-09 | 2026-10-09 | oss-fuzz-gen-v1.0.tar.gz 859.6 KB |
| Tool | Version | Updated | Added | Snapshots |
|---|---|---|---|---|
| promptfooMIT LLM / AI red teaming Test and red-team prompts, agents and RAGs — pentesting for AI systems. | 0.125.1 tag | 2026-10-25 | 2026-10-09 | promptfoo-0.124.1.tar.gz 174.6 MB promptfoo-0.125.0.tar.gz 175.2 MB promptfoo-0.125.1.tar.gz 175.2 MB |
| garakApache-2.0 LLM / AI red teaming LLM vulnerability scanner — probes, detectors, automated reporting. | v0.17.1 tag | 2026-10-17 | 2026-10-09 | garak-v0.17.0.tar.gz 3.8 MB garak-v0.17.1.tar.gz 3.8 MB |
| AI-Infra-Guard LLM / AI red teaming Full-stack AI red-teaming platform — agent, skills and MCP scanning. | v4.6.8 tag | 2026-10-29 | 2026-10-09 | AI-Infra-Guard-v4.6.5.tar.gz 102.5 MB AI-Infra-Guard-v4.6.6.tar.gz 102.6 MB AI-Infra-Guard-v4.6.7.tar.gz 102.6 MB AI-Infra-Guard-v4.6.8.tar.gz 102.6 MB |
| PyRITMIT LLM / AI red teaming Microsoft's Python Risk Identification Toolkit for generative AI red teaming. | v1.1.0 tag | 2026-10-09 | 2026-10-09 | PyRIT-v1.1.0.tar.gz 72.0 MB |
| deepteamApache-2.0 LLM / AI red teaming Red-teaming framework for LLMs and AI agents (vulnerability scanning, attacks). | v1.0.9 tag | 2026-10-09 | 2026-10-09 | deepteam-v1.0.9.tar.gz 26.7 MB |
| agentic_securityApache-2.0 LLM / AI red teaming Agentic LLM vulnerability scanner and AI red-team kit. | 0.7.5 tag | 2026-10-09 | 2026-10-09 | agentic_security-0.7.5.tar.gz 9.9 MB |
| Tool | Version | Updated | Added | Snapshots |
|---|---|---|---|---|
| cleanyourtv Miscellaneous Debloat any Android / Google TV over Wi-Fi (ADB) and give it an Apple TV-style home screen. ⚠ Not a pentest tool; archived on request. | v3.2.0 tag | 2026-10-30 | 2026-10-26 | cleanyourtv-v3.0.0.tar.gz 15.6 MB cleanyourtv-v3.1.0.tar.gz 20.5 MB cleanyourtv-v3.2.0.tar.gz 25.0 MB |