Intentionally vulnerable OWASP LLM Top 10 training platform
AutomateWeb apps
cyberstars / target / web
Tools for web apps
HTTP/S applications and APIs.
137 tools indexed
Passive credential-leak discovery across breach sources
ReconWeb apps
Local-LLM CLI that drives recon tools and AI-analyzes targets.
ReconScanWeb appsNetworks
Username OSINT across 3000+ sites.
ReconWeb apps
Self-hostable email OSINT platform, no API keys required.
ReconWeb apps
Graph-based OSINT and link analysis.
ReconAnalyzeWeb appsNetworks
Exploit development and delivery platform.
ExploitAutomateNetworksEndpoints
Nika
—Cross-file taint-analysis SAST for Java microservices
ScanAnalyzeSource codeWeb apps
Classic web server scanner.
ScanWeb apps
Nox
—Modular Go framework for attack surface management and scanning
ScanReconWeb appsNetworks
Template-based vulnerability scanner.
ScanWeb appsNetworks
Adversary emulation for AI agents, LLM apps and MCP servers
ScanFuzzWeb apps
Local-first link-analysis and geospatial board for investigations.
ReconWeb apps
In-depth attack surface mapping.
ReconScanWeb appsNetworks
Modern intentionally vulnerable web app.
AutomateWeb apps
Automated pentest + vuln scanner.
ScanExploitWeb appsNetworks
Open-source web app scanner.
ScanInterceptWeb apps
Completely ridiculous API (training target).
AutomateWeb apps
Benchmark prompt-injection attacks on LLMs.
FuzzAnalyzeWeb appsSource code
File-based agent workspace for source-guided whitebox security review
AnalyzeScanSource codeWeb apps
AI-powered OSINT agent with REPL, CLI and MCP server.
ReconAutomateWeb appsNetworks
Open-source Burp-style web security testing suite.
InterceptScanWeb apps
Burp extension for parameter discovery.
ReconFuzzWeb apps
Autonomous AI agents that run full penetration tests in a sandbox.
ScanExploitWeb appsNetworks