Offensive & Pentesting OSS tools — 10 tracked with release & CVE alerts

Prowler Healthy open source

Tool based on AWS-CLI commands for Amazon Web Services account security assessment and hardening.

cap Healthy open source

The privacy-first, self-hosted CAPTCHA for the modern web.

sysreptor Healthy open source

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

Apktool Healthy open source

A tool for reverse engineering Android apk files

Recog Healthy open source

Pattern recognition for hosts, services, and content

OWASP Mobile Security Testing Guide Healthy open source

A comprehensive manual for mobile app security testing and reverse engineering.

Stratus Red Team | DataDog Healthy open source

cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

pentest-ai Healthy open source

Offensive-security MCP server with 205 wrapped tools, 17 specialist agents, and 60 SPA-aware probes for OWASP Top 10. CLI + MCP, BYO LLM. No API key needed on MCP path.

jadx Healthy open source

Dex to Java decompiler

AI-Infra-Guard by Tencent Zhuque Lab Healthy open source

A full-stack AI Red Teaming platform securing AI ecosystems via OpenClaw Security Scan, Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

Tools