Awesome AI Pentesting 
A curated list of AI-powered tools, frameworks, and resources for penetration testing, bug bounty hunting, red teaming, and cybersecurity operations.
The intersection of Artificial Intelligence and offensive/defensive security is evolving rapidly. This list tracks the most impactful open-source projects that leverage LLMs, machine learning, and autonomous agents for cybersecurity.
Created by @skyvanguard — Cybersecurity & AI Researcher | TryHackMe Top 1% Global
Stars updated: July 2026
Contents
Autonomous AI Pentesting Agents
Fully autonomous agents that perform end-to-end penetration testing tasks with minimal human intervention.
| Tool | Description | AI Tool | Stars | |------|-------------|---------|-------| | Shannon | Fully autonomous AI hacker using Claude Agent SDK. 96.15% success rate on XBOW Benchmark. Finds and exploits real vulnerabilities in web apps. | Claude API (Agent SDK) | 
| | Strix | Open-source AI hackers that run code dynamically, find vulnerabilities, and validate them through actual proof-of-concepts. | Claude API | 
| | PentAGI | Fully autonomous AI agents system. Docker sandboxed, 20+ built-in tools (nmap, metasploit, sqlmap), Neo4j knowledge graph. | Multi-LLM (OpenAI, Claude, DeepSeek) | 
| | PentestGPT | Automated penetration testing agentic framework powered by LLMs. Published at USENIX Security 2024. | OpenAI API (GPT-4) | 
| | CAI | Open-source framework for building AI agents for real-world security testing. Top-10 in Dragos OT CTF 2025. | Multi-LLM (OpenAI, Claude, Ollama/local models) | 
| | Decepticon | Autonomous hacking agent for red teaming. Modular multi-agent architecture built on LangGraph with MCP tool integration. | Multi-LLM (via LiteLLM) | 
| | PentestAgent | AI agent framework for black-box security testing with prebuilt attack playbooks for bug bounty, red-team, and pentest. | OpenAI API (GPT-4) | 
| | Pentest-Swarm-AI | Autonomous pentesting with a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning. Bug bounty, monitoring, and CTF modes. | Claude API | 
| | NeuroSploit | AI-powered pentest framework with 100 vulnerability types, isolated Kali containers, 9 specialized agent personas. | Multi-LLM (OpenAI, Claude, Ollama/local) | 
| | LuaN1aoAgent | Cognitive-driven autonomous AI hacker using dual-graph reasoning (causal and attack graphs) for plan-execute-reflect penetration testing. | Multi-LLM (OpenAI, DeepSeek, Claude) | 
| | hackingBuddyGPT | Academic framework for building LLM-driven ethical hacking agents in ~50 lines of code. Research platform with reproducible privilege-escalation benchmarks. | OpenAI API (GPT-4) | 
| | Pentest Copilot | AI-powered browser-based ethical hacking assistant with agentic architecture that runs commands in the pentest environment. | OpenAI API | 
| | Nebula | AI-powered pentesting assistant for automating recon, note-taking, and vulnerability analysis with human decision checkpoints. | OpenAI API (GPT-4) | 
| | Darkmoon | Open source autonomous AI penetration testing platform that orchestrates 80+ offensive tools through Markdown playbooks and MCP controlled execution, covering web, cloud, Active Directory, Kubernetes and API with an evidence trail per finding. | Multi-LLM (OpenAI, Anthropic, Ollama/local) | 
| | ARTEMIS | ARTEMIS is an autonomous agent created by the Stanford Trinity project to automate vulnerability discovery. | OpenAI API (GPT-4) | 
| | AIDA | AI-Driven Security Assessment that connects AI to 400+ pentesting tools via MCP (Exegol container), enabling natural language-driven security workflows. | Multi-LLM (OpenAI, Claude, Ollama via MCP) | 
|
MCP Servers for Security
Model Context Protocol servers that bridge AI assistants with cybersecurity tools.
| Tool | Description | Stars | |------|-------------|-------| | HexStrike AI | Advanced MCP server with 150+ cybersecurity tools. Lets AI agents autonomously run pentesting, vuln discovery, and bug bounty tools. | 
| | MCP-Security-Checklist | Comprehensive security checklist for MCP-based AI tools by SlowMist. Input validation, audit capability, and risk assessment. | 
| | mcp-security-hub | 36 MCP servers with 175+ tools: Nmap, Ghidra, Nuclei, SQLMap, Hashcat. Recon, web sec, binary analysis, blockchain, AD. | 
| | awesome-mcp-security | Curated collection of MCP security resources: tools, papers, videos, articles, and vulnerability information. | 
| | mcp-for-security | MCP server implementations for SQLMap, FFUF, NMAP, Masscan and more security testing tools. | 
| | awesome-cyber-security-mcp | Curated list of MCP servers focused on cybersecurity operations. | 
| | pentestMCP | AI-powered penetration testing via MCP. 20+ security assessment tools (Nmap, Nuclei, ZAP, SQLMap) through MCP protocol. | 
| | mcp-server-security-standard | Open, testable security control standard (MSSS) for certifying MCP servers with levels and evidence requirements. | 
| | PentestThinkingMCP | AI pentesting reasoning engine with Beam Search, MCTS, attack scoring for attack path planning and CTF solving. | 
| | mcp-vanguard | Security pentesting MCP Server with 22 tools. Windows/WSL bridge for Kali tools integration with Claude. | 
| | DomScan | Hosted domain intelligence MCP for DNS, WHOIS/RDAP, TLS, subdomains, reputation, email security, and typosquatting. | 
|
Bug Bounty & Recon AI
AI-enhanced tools for reconnaissance and bug bounty automation.
| Tool | Description | Stars | |------|-------------|-------| | Nuclei | Fast vulnerability scanner with YAML-based DSL. AI-powered template generation via -ai flag. 10k+ community templates. | 
| | Sn1per | Attack surface management platform combining automated scanning with intelligent analysis. | 
| | awesome-bugbounty-tools | Curated list of bug bounty tools including AI-enhanced scanners and recon automation frameworks. | 
| | AutoSploit | Automated mass exploiter combining Shodan/Censys/Zoomeye for target discovery with Metasploit for exploitation. | 
| | BigBountyRecon | 58 different techniques using Google dorks and open source tools for initial reconnaissance. | 
| | Mantis | Security framework automating discovery, reconnaissance, and vulnerability scanning. Chains multiple tools from domain input. | 
| | ReconAIzer | Burp Suite extension using OpenAI GPT to discover endpoints, params, URLs, and subdomains during bug bounty recon. | 
| | HackBot | AI-powered cybersecurity chatbot using LLaMA for code analysis, scan analysis, and cybersecurity Q&A. | 
|
CTF Solvers & Challenge Tools
AI tools for solving Capture The Flag competitions and security challenges.
| Tool | Description | Stars | |------|-------------|-------| | AI-Goat | Learn AI security through vulnerable LLM CTF challenges. Run locally, no sign-ups or cloud fees needed. | 
| | ChatGPT on CTF | Research testing whether AI-LLMs can solve CTF challenges by running commands in test environments. | 
| | LLM-Security-CTF | Learn LLM/AI security through CTF challenges: prompt injection, jailbreaks, guardrail bypass, tool abuse. | 
| | EnIGMA | Enhanced Interactive Generative Model Agent. State-of-the-art on NYU CTF and CyBench. 3x more challenges than prior agents. (ICML 2025) | Paper | | CTFAgent | LLM-powered CTF solver with plan-and-execute paradigm. Outperforms 88% of human CTF participants. | Paper | | CSAW Agentic CTF | CSAW competition using generative autonomous AI to solve CTF challenges. Major academic AI security benchmark. | Competition |
Vulnerability Analysis & Scanning
AI-powered vulnerability discovery and code analysis tools.
| Tool | Description | Stars | |------|-------------|-------| | Semgrep | Lightweight static analysis for finding bugs and enforcing code standards with AI pattern matching. | 
| | Garak | NVIDIA's LLM vulnerability scanner. Probes for hallucination, data leakage, prompt injection, toxicity, and jailbreaks. | 
| | agent-scan | Snyk's security scanner for AI agents, MCP servers and agent skills. Detects prompt injections and tool poisoning. | 
| | Vulnhuntr | Zero-shot vulnerability discovery using Claude AI. Analyzes Python call chains. Found 12+ zero-days in production code. | 
| | Agentic Security | LLM vulnerability scanner / AI red teaming kit. Protects AI systems from jailbreaks, fuzzing, and multimodal attacks. | 
| | Agentic Radar | Security scanner for agentic systems. Workflow visualization, tool identification, MCP server detection, vulnerability mapping. | 
| | ModelScan | Scans ML models for unsafe code. Supports H5, Pickle, SavedModel, and more formats. | 
| | NVIDIA Vulnerability Analysis | NVIDIA blueprint for identifying and mitigating container security vulnerabilities with generative AI. | 
|
Red Team & Offensive AI
Offensive AI tools, adversarial ML, and AI red teaming frameworks.
| Tool | Description | Stars | |------|-------------|-------| | Promptfoo | LLM red teaming, pentesting, and vuln scanning with 100+ attack types. Tests complete AI systems including RAG and agents. | 
| | Social-Engineer-Toolkit | Open-source penetration testing framework designed for social engineering. | 
| | Caldera | Automated adversary emulation platform with AI-driven attack planning. Originally by MITRE, now an Apache project. | 
| | Adversarial Robustness Toolbox | IBM's Python library for ML Security: evasion, poisoning, extraction, inference attacks and defenses. | 
| | llm-attacks | Universal and transferable attacks on aligned language models. Academic research on adversarial attacks against LLMs. | 
| | DeepTeam | Framework for red teaming LLMs. 10+ adversarial attacks, supports OWASP Top 10 for LLMs and NIST AI RMF. | 
| | ai-exploits | Collection of real-world AI/ML exploits for responsibly disclosed vulnerabilities. | 
| | offensive-ai-compilation | Curated list of Offensive AI resources: tools, techniques, research papers, and attack methodologies. | 
| | PyRIT | Microsoft's Python Risk Identification Tool for red teaming generative AI systems. | 
|
Blue Team & Defensive AI
AI tools for defense, detection, and incident response.
| Tool | Description | Stars | |------|-------------|-------| | Wazuh | Open-source security monitoring with AI-enhanced threat detection, SIEM, and XDR. | 
| | Sigma | Generic signature format for SIEM systems with AI-powered rule creation. | 
| | Falco | Cloud Native Runtime Security by CNCF. Detects threats across containers, hosts, K8s, and cloud. | 
| | Guardrails AI | Adding guardrails to LLMs. Input/output validation, content moderation, and PII detection. | 
| | NeMo Guardrails | NVIDIA's toolkit for programmable guardrails on LLM systems. Content moderation, jailbreak detection. | 
| | LLM Guard | Security toolkit for LLM interactions. Scanners for PII, prompt injection, banned topics, data leakage. | 
| | Redcells | Automated adversarial testing platform for LLMs you own or control. Runs structured red-team jobs (prompt injection, jailbreak, data leakage, etc.) with iterative attack→refine layers and per-layer judge scoring via web dashboard or API. | Repo | | Shuffle | Open-source SOAR platform for security automation and orchestration. | 
| | GhostWriter | Report management platform for red/blue team operations with AI-assisted analysis. | 
|
AI Security (Securing AI Systems)
Tools for defending AI/LLM systems against prompt injection, jailbreaks, and emerging threats.
| Tool | Description | Stars | |------|-------------|-------| | Rebuff | LLM prompt injection detector. Multi-layered defense: heuristics, LLM-based detection, vector DB, canary tokens. | 
| | awesome-mcp-security | Collection of MCP security resources: vulnerabilities, tools, papers, and mitigation strategies. | | | prompt-injection-defenses | Every practical and proposed defense against prompt injection attacks. Comprehensive reference. | 
| | Awesome-LLMSecOps | LLM Security Operations in one repo. Curated links covering the full LLMSecOps lifecycle. | 
| | parry-guard | Prompt injection scanner for AI coding tools (Claude Code, Codex). Runs DeBERTa/Llama transformers locally in Rust via Candle or ONNX. | 
|
Fuzzing with AI/ML
Machine learning-guided fuzzing and automated test generation tools.
| Tool | Description | Stars | |------|-------------|-------| | AFL++ | Superior fork of AFL with ML-guided mutation strategies. Industry standard for fuzzing. | 
| | FuzzyAI | CyberArk's automated LLM fuzzing tool for finding jailbreaks and security vulnerabilities in LLM APIs. | 
| | OSS-Fuzz-Gen | Google's LLM-powered fuzzing via OSS-Fuzz. Generates fuzz targets for C/C++. 29% max line coverage increase. | 
| | SecPipe | MCP server for AI-driven security pipelines. Workflow automation for AppSec and fuzzing with intelligent agents. Formerly FuzzForge AI. | 
| | EvoMaster | First open-source AI-driven tool for system-level test generation. Evolutionary algorithms for REST, GraphQL, RPC. | 
| | ToolFuzz | First framework for testing LLM agent tools. Combines fuzzing with LLMs for correctness evaluation. | 
|
Pentest Report Generation
AI tools for automated penetration testing report creation.
| Tool | Description | Stars | |------|-------------|-------| | PwnDoc | Pentest report generator for findings and customizable Docx reports with templates. | 
| | SysReptor | Customizable pentest reporting platform with AI-assisted writing and finding descriptions. | 
| | APTRS | Automated Pentest Reporting System. Python/Django-based. PDF/Excel generation, project tracking. | 
| | Faction | Pen test report generation and assessment collaboration platform. | 
|
OSINT with AI
AI-powered Open Source Intelligence tools.
| Tool | Description | Stars | |------|-------------|-------| | Sherlock | Hunt down social media accounts by username across 400+ social networks. | 
| | SpiderFoot | Automated OSINT platform. 200+ data sources, threat surface mapping, most modules need no API keys. | 
| | GHunt | Offensive Google framework for OSINT. | 
| | theHarvester | E-mails, subdomains and names harvester for OSINT. | 
| | Recon-ng | Full-featured web reconnaissance framework with modular design. | 
| | Taranis AI | Advanced OSINT tool using NLP-powered news collection and AI for situational analysis. | 
| | OSINTGPT | OSINT analysis tool leveraging GPT embeddings and vector search for document similarity. | 
|
Research Papers & Resources
Papers
Awesome Lists
| List | Description | Stars |
|------|-------------|-------|
|
awesome-pentest | General pentesting resources. |
|
|
Awesome-GPT-Agents | GPT agents for cybersecurity: offensive, defensive, and analytical. |
|
|
Awesome-LLM4Cybersecurity | LLMs for cybersecurity: pentesting reasoning, exploit generation, vulnerability detection. |
|
|
awesome-llm-security | Tools, documents, and projects about LLM Security. |
|
|
awesome-cybersecurity-agentic-ai | Autonomous security agents, frameworks, and research. |
|
|
awesome-skills-security | Curated skill set of security-focused Claude Code skills. |
|
|
awesome-ai-cybersecurity | Resources for AI in cybersecurity. Collection for professionals and researchers. |
|
Standards & Frameworks
Contributing
Contributions welcome! Please read CONTRIBUTING.md before submitting a PR.
Criteria for Inclusion
- Open-source with a GitHub repository
- Uses AI/ML in a meaningful way for security
- Actively maintained (commits within 12 months)
- Has documentation
Disclaimer
Tools listed are for educational purposes and authorized security testing only. Always obtain proper authorization before testing systems you do not own. The maintainers are not responsible for misuse.
Created by @skyvanguard
If this list helped you, consider giving it a star!
