cyberstars
cyberstars / purpose / pentest

Tools for pentest

Scoped offensive engagements and assessments.

190 tools indexed

Network service exploitation.

ExploitScanActive DirectoryNetworks
PythonBSD-2-Clause

WiFi firmware patches: monitor mode + injection.

InterceptScanWireless
CGPL-3.0

Classic web server scanner.

ScanWeb apps
PerlGPL-2.0

Nmap

The classic network mapper and port scanner.

ScanReconNetworksEndpoints
CNPSL

Nox

Modular Go framework for attack surface management and scanning

ScanReconWeb appsNetworks
GoGPL-3.0

Template-based vulnerability scanner.

ScanWeb appsNetworks
GoMIT

In-depth attack surface mapping.

ReconScanWeb appsNetworks
GoApache-2.0

Modern intentionally vulnerable web app.

AutomateWeb apps
TypeScriptMIT

Automated pentest + vuln scanner.

ScanExploitWeb appsNetworks
PythonApache-2.0

Open-source web app scanner.

ScanInterceptWeb apps
JavaApache-2.0

Completely ridiculous API (training target).

AutomateWeb apps
JavaScriptApache-2.0

Runtime mobile exploration via Frida.

AnalyzeInterceptMobile apps
PythonGPL-3.0

File-based agent workspace for source-guided whitebox security review

AnalyzeScanSource codeWeb apps
PythonMIT

AI-powered OSINT agent with REPL, CLI and MCP server.

ReconAutomateWeb appsNetworks
PythonMIT

The scan engine behind Greenbone vulnerability management.

ScanNetworksEndpoints
GPL-2.0

PTF

Pentest Testers Framework installer.

AutomateEndpoints
PythonBSD-3-Clause

Pacu

Open-source AWS exploitation framework.

ExploitReconCloud
PythonBSD-3-Clause

Burp extension for parameter discovery.

ReconFuzzWeb apps
JavaApache-2.0

Autonomous AI agents that run full penetration tests in a sandbox.

ScanExploitWeb appsNetworks
GoMIT

Autonomous multi-agent AI penetration testing agent in your terminal

ScanExploitNetworksActive Directory
TypeScriptMIT

Human-in-the-loop agentic AI CLI for pentesters and bug hunters

ReconExploitWeb apps
TypeScriptApache-2.0

Active Directory health audit.

ScanHardenActive Directory
C#Proprietary

Offline WPS pin brute-force.

CrackWireless
CGPL-3.0

PowerShell post-exploitation framework.

ExploitReconActive DirectoryEndpoints
PowerShellBSD-3-Clause