Topics / #security-testing

Security-testing projects on GitHub

Testing applications for vulnerabilities with scanners and exploits.

As of , the most-starred Security-testing projects on GitHub are shannon (49K stars), sqlmap (38.7K stars) and pentagi (30.8K stars). GitHub.Locker tracks 8 Security-testing repositories with 183.5K stars combined. The fastest-growing on October 16 was security-audit-skill, with +375 stars in a day.

8Projects
183.5KStars in total
+694Stars in a day
Browse in the catalog →github.com/topics/security-testing ↗

Hot right now

Most stars gained in a day · Oct 16

+375

security-audit-skill

cloudflare/security-audit-skill · ★ 30.4K

A Cloudflare coding-agent skill that turns your agent into a security auditor: it orchestrates isolated agents through a structured, multi-phase audit and returns independently verified, machine-readable findings.

+219

pentagi

vxcontrol/pentagi · ★ 30.8K

PentAGI (Penetration testing Artificial General Intelligence) is a fully autonomous AI agent system that performs complex penetration testing tasks for you.

+81

shannon

KeygraphHQ/shannon · ★ 49K

Shannon is an autonomous AI pentester that analyzes your web application's source code, maps attack vectors, and then executes real exploits against the running app to prove vulnerabilities before they reach production — 'no exploit, no report'.

+10

sqlmap

sqlmapproject/sqlmap · ★ 38.7K

sqlmap is an open-source penetration testing tool that automates detecting and exploiting SQL injection flaws and taking over the underlying database server.

The all-time top

8 projects · by stars

  1. #1 · KeygraphHQ/shannon

    shannon

    Shannon is an autonomous AI pentester that analyzes your web application's source code, maps attack vectors, and then executes real exploits against the running app to prove vulnerabilities before they reach production — 'no exploit, no report'.

    49K
  2. #2 · sqlmapproject/sqlmap

    sqlmap

    sqlmap is an open-source penetration testing tool that automates detecting and exploiting SQL injection flaws and taking over the underlying database server.

    38.7K
  3. #3 · vxcontrol/pentagi

    pentagi

    PentAGI (Penetration testing Artificial General Intelligence) is a fully autonomous AI agent system that performs complex penetration testing tasks for you.

    30.8K
  1. 4

    security-audit-skill

    30.4Kcloudflare/security-audit-skill · JavaScript

    A Cloudflare coding-agent skill that turns your agent into a security auditor: it orchestrates isolated agents through a structured, multi-phase audit and returns independently verified, machine-readable findings.

  2. 5

    thc-hydra

    12.4Kvanhauser-thc/thc-hydra · C

    Hydra is a parallelized network login cracker by van Hauser / THC: a proof-of-concept tool showing researchers and security consultants how easily a remote system can be broken into through weak passwords. It supports over 50 protocols.

  3. 6

    Sublist3r

    11.1Kaboul3la/Sublist3r · Python

    Sublist3r is a Python tool that enumerates subdomains of a target website using OSINT, helping penetration testers and bug hunters gather subdomains for a domain they are targeting.

  4. 7

    LaZagne

    11KAlessandroZ/LaZagne · Python

    LaZagne is an open-source tool that retrieves passwords stored locally on a computer by reverse-engineering the storage method of each software (plaintext, APIs, custom algorithms, databases, etc.).

  5. 8

    Myrqen

    137stijnswapped/Myrqen · TypeScript

    Myrqen is a security testing tool that runs inside a coding agent (Claude Code, Codex, or OpenCode) you already use: its own static analysis engine finds vulnerability candidates in your TypeScript/JavaScript code, then the agent dynamically verifies them against the app running on your machine.

Often tagged together