Open AI offensive-security OS for finding and fixing bugs.
ScanExploitWeb appsSource code
cyberstars / action / scan
Tools that scan
Discover hosts, services, vulnerabilities or assets.
150 tools indexed
Automated Active Directory pentesting tool for Linux.
ScanExploitActive DirectoryNetworks
AI-driven single-binary pentest agent from the chainreactors toolkit
ScanExploitNetworksWeb apps
AI autonomous penetration-testing platform.
ScanExploitWeb appsNetworks
BloodHound-style attack-path mapping for AI agent infrastructure.
ReconExploitCloudNetworks
Wi-Fi security auditing suite.
CrackInterceptWireless
GUI WiFi auditing tool built on the aircrack-ng suite.
ScanInterceptWireless
Akto
—Open-source API security testing and discovery platform
ScanMonitorWeb apps
802.11 attack tool for capturing WPA handshakes and key material
ScanInterceptWireless
Mobile and web app information-gathering scanner for pentesters.
ReconScanMobile appsWeb apps
CLI malware scanner for binaries, source and scripts.
ScanAnalyzeBinariesSource code
Agentic platform for automated source-code vulnerability discovery.
ScanAnalyzeSource code
BBOT
—Recursive internet scanner for recon and attack-surface mapping.
ScanReconWeb appsNetworks
Python AST-based security linter.
ScanAnalyzeSource code
Offline-first mobile app security intelligence platform.
ScanAnalyzeMobile appsSource code
Configurable, fast secrets scanner from the Gitleaks creator.
ScanSource codeCloud
MCP security-audit toolbelt for reconnaissance, analysis and validation.
ScanAnalyzeWeb appsSource code
Drive Burp Suite from an LLM.
AutomateScanWeb apps
Intercepting proxy for web application testing.
InterceptScanWeb apps
CISA's DFIR tool.
AnalyzeScanEndpoints
Fast CORS misconfig scanner.
ScanWeb apps
Discover and attack RTSP surveillance cameras.
ScanCrackNetworks
Web vulnerability scanner with custom POCs.
ScanWeb apps
Policy-as-code for infrastructure.
ScanHardenIaCCloud