ai-pentesting 开源项目推荐（55 个）

usestrix /strix

开源 AI 渗透测试工具，可发现并修复你的应用漏洞。

CyberStrikeus /CyberStrike

AI驱动的攻击性安全代理，拥有7,300+可操作的安全技能。自主渗透测试，支持MITRE ATT&CK（2,000+原子测试）、CIS基准测试（1,500+控制）、OWASP、NIST。懒惰加载，零上下文污染。你的AI红队。

samugit83 /redamon

开源、自托管的 AI 渗透测试框架：将你的攻击面映射为图，在带有人工审批关卡的 Kali 沙箱中自主利用它，并提交修复所发现问题的 PR。双向 MCP：可将任意 MCP 服务器作为工具接入，或从 Claude Code 或你自己的代理驱动 RedAmon。

0xSteph /pentest-ai

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

Yeti-791 /Tsec-Hackathon

腾讯云智能渗透黑客松 Official repository of Tencent Cloud Intelligent Penetration Hackathon. Showcasing top open-source projects of LLM-based autonomous penetration agents, including multi-agent collaboration, automated penetration, AI-driven offensive security, and intelligent attack-defense solutions.

Yeti-791 /Awesome-Offensive-AI-Agentic-Landscape

This document curates open-source projects, academic papers, capability benchmarks, and commercial solutions (international & China) in AI penetration testing, LLM red teaming, autonomous offensive agents, and vulnerability discovery—aimed at helping researchers, security engineers, and enterprise decision-makers quickly form a holistic view.

chainreactors /cyber-harness

AI-driven pi-like agent for cyber security — single binary for pentest, red team, bug bounty

thomasunise /argus

Open-source agentic security operations platform:

Stickman230 /claude-pentest

An open source plugin for enabeling claude to gain offensive pentesting capabilities

skyvanguard /awesome-ai-pentesting

A curated list of AI-powered pentesting tools, frameworks, MCP servers, and resources for autonomous cybersecurity operations

humaidhahm /opencode-pentester

AI-powered red teaming, and pentesting for web applications via opencode : defensive code audit (17 vulnerability categories) + offensive penetration testing (63 attack categories, 15 agents, 11 domains).

Ed-Marcavage /awesome-security-agent-harnesses

AI agents for pentesting, code audit, fuzzing, vulnerability discovery, and reverse engineering: harnesses, sandboxes, security MCP servers, benchmarks, and evals.

xk11z /plutoxAI

本系统基于 **Windows + WSL (Kali Linux)** 双环境搭建，是一套整合多类AI安全工具的一体化渗透测试平台。系统将大语言模型能力与传统渗透测试工具深度结合，覆盖Web安全、内网攻防、二进制逆向、API测试、流量分析等多个安全领域，可实现渗透测试全流程的智能化、自动化提效。

4vanish /AI-Pentest-Playbook

🛡 The reference playbook for pentesting AI chatbots & LLM-powered apps in one place. Ready-to-use payloads covering the full OWASP LLM Top 10 plus frontier vectors (MCP · RAG · A2A · computer-use · voice)

CSPF-Founder /red-clippy

open-source pentest management built to be operated by an AI agent

hex-tools /hexstrike-ai-pc

🎯 hexstrike-ai-pc-desktop-download 🎯

kalpmodi /akira

Autonomous offensive security agent. Plans engagements, runs recon, chains exploits, and writes reports - end to end. Native to Claude Code, Gemini CLI, Codex and Cursor. Not a scanner wrapper.

sukirman1901 /cybersec

Empowers the AI to perform penetration testing, vulnerability assessment, reconnaissance, and security reporting — all through natural language conversation.

sonuoffsec /AI-Security-Hub

A comprehensive AI Security Hub featuring payloads, cheat sheets, hands-on labs, security tools, MCP security, RAG security, agent security, CTF challenges, and research resources.

Mr-Infect /MCP-Penetration-testing

The ultimate OWASP MCP Top 10 security checklist and pentesting framework for Model Context Protocol (MCP), AI agents, and LLM-powered systems.