Search Results for "pen testing tools"
Sort By:
Showing 46 open source projects for "pen testing tools"
View related business solutions-
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
Earn up to 16% annual interest with Nexo.Generate interest, access liquidity without selling, and execute trades seamlessly. All in one platform. Geographic restrictions, eligibility, and terms apply.
-
1
Xteam
All-in-one command-line toolkit for security testing and OSINT tools
Xteam is a command-line security toolkit designed to provide multiple penetration testing and information-gathering utilities in a single interface. It combines several modules and external tools to help users perform security research tasks related to mobile devices, wireless networks, and online services. It acts as a centralized launcher that integrates scripts and third-party tools, allowing users to access different testing functions through a menu-based command line workflow. ... -
2
OWASP Mobile Security Testing Guide
Manual for mobile app security development and testing
We are writing a security standard for mobile apps and a comprehensive testing guide that covers the processes, techniques, and tools used during a mobile app security test, as well as an exhaustive set of test cases that enables testers to deliver consistent and complete results. The MSTG is a comprehensive manual for mobile app security testing and reverse engineering for iOS and Android mobile security testers. -
3
OWASP Mobile Application Security
Manual for mobile app security testing and reverse engineering
The OWASP Mobile Application Security (MAS) flagship project provides a security standard for mobile apps (OWASP MASVS) and a comprehensive testing guide (OWASP MASTG) that covers the processes, techniques, and tools used during a mobile app security test, as well as an exhaustive set of test cases that enables testers to deliver consistent and complete results. MAS Advocates are industry adopters of the OWASP MASVS and MASTG who have invested a significant and consistent amount of resources to push the project forward by providing consistent high-impact contributions and continuously spreading the word. -
4
Appium
Automation for iOS, Android, and Windows Apps
...It drives iOS, Android, and Windows apps using the WebDriver protocol. Is native app automation missing from your tool belt? Problem solved. Appium is built on the idea that testing native apps shouldn't require including an SDK or recompiling your app. And that you should be able to use your preferred test practices, frameworks, and tools. Appium is an open source project and has made design and tool decisions to encourage a vibrant contributing community. Appium aims to automate any mobile app from any language and any test framework, with full access to back-end APIs and DBs from test code. ... -
Secure File Transfer for Windows with Cerberus by RedwoodCerberus supports unlimited users and connections on a single IP, with built-in encryption, 2FA, and a browser-based web client — all deployable in under 15 minutes with a 25-day free trial.
-
5
Gradle
Adaptable, fast automation for all
Gradle is a build tool with a focus on build automation and support for multi-language development. If you are building, testing, publishing, and deploying software on any platform, Gradle offers a flexible model that can support the entire development lifecycle from compiling and packaging code to publishing web sites. Gradle has been designed to support build automation across multiple languages and platforms including Java, Scala, Android, Kotlin, C/C++, and Groovy, and is closely integrated with development tools and continuous integration servers including Eclipse, IntelliJ, and Jenkins. ... -
6
Proxyman
Web Debugging Proxy for macOS, iOS, and Android
Don't let cumbersome web debugging tools hold you back. With Proxyman's native macOS app, you can capture, inspect, and manipulate HTTP(s) traffic with ease. Intuitive, thoughtful, built with meticulous attention to detail. Comprehensive Guideline to set up with iOS simulator and iOS and Android devices. Proxyman acts as a man-in-the-middle server that capture the traffic between your applications and SSL Web Server. With built-in macOS setup, so you can inspect your HTTP/HTTPS Request and... -
7
V3SP3R
AI Flipper control
V3SP3R is an experimental open-source project focused on integrating artificial intelligence with Flipper Zero control, aiming to create a more autonomous and intelligent interaction layer for hardware-based security tools. The project explores the concept of AI-assisted device control, where an intelligent system can interpret commands, automate workflows, and potentially orchestrate complex sequences of actions across Flipper functionalities. It is part of a broader ecosystem of projects... -
8
Fastbot-Android Open Source Handbook
Testing tool for modeling GUI transitions
...Compared to traditional random-input tools (like Monkey), Fastbot supports much faster action insertion (up to ~12 actions per second) and can handle a variety of Android OS versions (from older through modern, including customized OS variants). It also supports model reuse: once a model of an app’s GUI transitions is built, subsequent testing sessions can reuse the model to speed up testing or target known risky paths. -
9
Flipper Android App
Android Mobile app to rule all Flipper's family
Flipper Android App is the official Android-based companion application that provides full control and management capabilities for the Flipper Zero device through a modular and scalable mobile architecture. Built primarily in Kotlin, the app is structured into multiple components that separate core logic, communication layers, and feature modules, enabling maintainability and extensibility for future development. It establishes a communication bridge between Android devices and Flipper Zero,... -
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
10
The Agency
A complete AI agency at your fingertips
...The repository is built for people who want role-based AI collaboration, whether that means using the agents directly inside Claude Code, adapting them as references, or converting them for use in other agentic tools such as Cursor, Aider, Windsurf, Gemini CLI, and OpenCode. -
11
AndroidSDK
Full-fledged Android SDK Docker Image
AndroidSDK is a Docker-based development environment that provides a complete, portable Android SDK setup for building, testing, and deploying Android applications in a consistent and reproducible way. Instead of installing and configuring the Android SDK locally, developers can run a preconfigured container that includes essential tools such as the SDK, build tools, Gradle, and Kotlin compiler. This approach solves common issues related to environment inconsistency, such as dependency conflicts or differences between developer machines and CI pipelines. ... -
12
sitespeed.io
Monitor, analyze and optimize your website speed and performance
Sitespeed.io is an open source tool that helps you monitor, analyze and optimize your website speed and performance, based on performance best practices advices from the coach and collecting browser metrics using the Navigation Timing API, User Timings and Visual Metrics (FirstVisualChange, SpeedIndex & LastVisualChange). Measuring performance shouldn’t be hard, you should be able to have full control of your metrics, own your own data and you should be able to do it without paying top... -
13
PostHog
PostHog provides open-source web & product analytics
PostHog is an all‑in‑one open‑source platform for product and web analytics—offering event-based analytics, session recording, feature flagging, A/B testing, cohorts, and more—that you can self‑host, with full support for data privacy and enterprise compliance. Sync data from external tools like Stripe, Hubspot, your data warehouse, and more. Query it alongside your product data. Run custom filters and transformations on your incoming data. Send it to 25+ tools or any webhook in real time or batch export large amounts to your warehouse. ... -
14
Storybook
The UI component explorer, develop, document, & test React, Vue, etc.
...Use addons to customize your workflow, automate testing, and integrate with your favorite tools. Stories are a pragmatic, reproducible way to keep track of UI edge cases. Write stories once then reuse them to power automated tests. Whenever you write a story you get a handy test case. Quickly browse stories to make sure your UI looks right. Pinpoint UI changes down to the pixel by comparing image snapshots of stories. -
15
frida
Dynamic instrumentation toolkit for developers
...Install the Node.js bindings from npm, grab a Python package from PyPI, or use Frida through its Swift bindings, .NET bindings, Qt/Qml bindings, or C API. Frida is and will always be free software (free as in freedom). We want to empower the next generation of developer tools, and help other free software developers achieve interoperability through reverse engineering. We are proud that NowSecure is using Frida to do fast, deep analysis of mobile apps at scale. Frida has a comprehensive test-suite and has gone through years of rigorous testing across a broad range of use-cases. -
16
Ovmeet
Video conferencing and collaboration platform
OvMeet is a video conferencing and collaboration platform developed in China that supports video meetings and H5 web/video live streaming. WebRTC, RTMP, SIP, RTSP, whiteboards, document presentation, file sharing, desktop sharing, recording, and more. The older version was built using Adobe/Flash, but that is no longer maintained. The newer version uses modern web technologies to deliver video conferencing services across Web, H5, Android, iOS, PC, etc. It also supports server... -
17
BoringSSL
Mirror of BoringSSL
BoringSSL is a Google-maintained fork of OpenSSL, designed specifically to meet the security, performance, and maintainability needs of Google’s infrastructure and products. While fully open source, BoringSSL is not intended for general public use — it serves as a streamlined, heavily modified SSL/TLS and cryptography library optimized for Google’s internal ecosystem, including Chrome/Chromium, Android, and other Google services. The project prioritizes security, simplicity, and... -
18
AndroidNativeEmu
Allows you to partly emulate an Android native library
AndroidNativeEmu is a Python-based framework designed to partially emulate Android native libraries, enabling developers and researchers to analyze and execute native code outside of a full Android environment. Instead of emulating an entire operating system, it focuses specifically on the native layer, allowing for targeted testing and reverse engineering of shared libraries (.so files). This makes it particularly useful in security research, malware analysis, and debugging of Android applications. The framework provides tools for loading binaries, simulating system calls, and interacting with native functions in a controlled environment. By abstracting away the complexity of full device emulation, it allows faster iteration and more focused analysis of specific components. ... -
19
Chess Tools for Android
Scripts and tools for building and testing chess engines.
Open source scripts and tools for Android. Every zip archive contains a readme file with further information (e. g. link to the source code). Chess tools are located in the libs directory and are available for arm64-v8a, armeabi-v7a, x86 and x86_64 based devices. CECSA (Chess Engine Compiler Script for Android) and CETSA (Chess Engine Tournament Script for Android) are scripts for Termux. They need to be extracted in the home directory of Termux. There is also an installation script for... -
20
wolfi
Community APK repository for Wolfi Linux providing Stremio, MPV, etc.
Unofficial community packages for Wolfi Linux This project provides APK packages for applications not yet available in the official Wolfi repositories, with focus on desktop applications, multimedia tools, and GUI software. All packages are built using Melange with reproducible builds and signed for security. Packages undergo testing in containerized environments before release. Current packages include: - Stremio - Media streaming application with Qt5/WebEngine - Qt5 GUI framework components - Additional multimedia dependencies Built for users who want to run desktop applications in secure, distroless containers while maintaining Wolfi's supply chain security benefits. ... -
21
tls SNI injector + VPNGate Free Server
Value Added VPN 4G ssl/tls sni VPNGate CN/RU/JP/UK..
Sibling project https://sourceforge.net/projects/tls-sni-injector-cloudflare/ UDP Over SSL Tunnel UDP Over SSL Tunnel is a free SSL tool with SNI Host (Spoof Host) support ( SSL Injector ). VPN client 4G ssl/tls sni + SoftEther + VPNGate CN/RU/JP/UK.. 🚀 Free VPNGate + SNI Customization 🛡️ One of the most powerful censorship bypass tools ever shared 🌍 Works globally — optimized for Vietnam, Iran, and more 💡 Try it today and experience real freedom! This VPNGate server setup is shared for educational and testing purposes only. Learn how SNI customization and meek proxy affect network censorship bypassing. 🧪 Try it on real-world networks to understand circumvention strategies. ... -
22
tls SNI injector + Psiphon Free Server
Value Added VPN 4G ssl/tls sni Psiphon CN/RU/JP/UK..
... 🔧 Máy chủ Psiphon3 miễn phí có hỗ trợ SNI tùy chỉnh và meek proxy ✅ Dùng để vượt tường lửa, kiểm duyệt mạng ⚙️ Cấu hình chuyên nghiệp, phù hợp với kỹ thuật viên và người yêu công nghệ 📡 Không cần root, không quảng cáo, hoạt động ổn định. 🚀 Free Psiphon3 + SNI Customization and meek proxy 🛡️ One of the most powerful censorship bypass tools ever shared 🌍 Works globally — optimized for Vietnam, Iran, and more 💡 Try it today and experience real freedom! This Psiphon3 server setup is shared for educational and testing purposes only. Learn how SNI customization and meek proxy affect network censorship bypassing. 🧪 Try it on real-world networks to understand circumvention strategies. ... -
23
BJH OS
An Operating System Created In Html CSS And JS By Muhammad Haris.
💻 BJH OS Assalam O Alaikum! 👋 I’m Muhammad Haris, Developer of BJH OS 🌐💡 — a web-based OS built with pure HTML, CSS & JS. Enjoy draggable windows, built-in apps, a web terminal, Flash Browser, AI assistant, and persistent data via localStorage. 🚀 Highlights Custom desktop environment & smoother UI Modular architecture Built-in apps & BJH OS Apps Market Remote alerts & updates Secure login & developer tools 🛒 BJH OS Apps Market Features Browse apps/games App details: icon,... -
24
PWABuilder
The simplest way to create progressive web apps across platforms
The simplest way to create progressive web apps across platforms and devices. This repo is home to several projects in the PWABuilder family of tools. The PWA Starter is our opinionated and production-tested starter that the PWABuilder team uses to build all of our PWAs, including PWABuilder itself. The PWA Starter uses a lightweight, fast, and extensible stack that allows you to quickly get started with developing a new PWA. PWABuilder enables developers to quickly and easily to generate... -
25
API Dash
API Dash is a beautiful AI-powered open-source cross-platform
API Dash is an open-source, cross-platform API client built with Flutter for testing, designing, and exploring APIs. It gives developers a visual interface to create and customize HTTP requests, inspect responses, and organize API work without relying only on command-line tools. The project supports desktop and mobile workflows, making it useful across Windows, macOS, Linux, Android, and iOS-style environments.
