Search Results for "penetration testing tools"
Sort By:
Showing 66 open source projects for "penetration testing tools"
View related business solutions-
Try Google Cloud Risk-Free With $300 in CreditUse your credit across every product. Compute, storage, AI, analytics. When it runs out, 20+ products stay free. You only pay when you choose to.
-
Gemini 3 and 200+ AI Models on One PlatformBuild generative AI apps with Vertex AI. Switch between models without switching platforms.
-
1
BeEF
The browser exploitation framework project
BeEF is short for The Browser Exploitation Framework. It is a penetration testing tool that focuses on the web browser. Amid growing concerns about web-borne attacks against clients, including mobile clients, BeEF allows the professional penetration tester to assess the actual security posture of a target environment by using client-side attack vectors. Unlike other security frameworks, BeEF looks past the hardened network perimeter and client system, and examines exploitability within the context of the one open door: the web browser. ... -
2
Retire.js
Scanner detecting the use of JavaScript libraries
...Scans visited sites for references to insecure libraries and puts warnings in the developer console. An icon on the address bar displays will also indicate if vulnerable libraries were loaded. Retire.js has been adapted as a plugin for the penetration testing tools Burp and OWASP ZAP. -
3
node-rate-limiter-flexible
Count and limit requests by key with atomic increments
rate-limiter-flexible counts and limits number of actions by key and protects from DDoS and brute force attacks at any scale. It works with Redis, process Memory, Cluster or PM2, Memcached, MongoDB, MySQL, PostgreSQL and allows to control of requests rate in single process or distributed environment. All operations in memory or distributed environments use atomic increments against race conditions. Combine limiters, block key for some duration, delay actions, manage failover with insurance... -
4
Allure Report
Flexible, lightweight multi-language test reporting tool
Allure Report is a flexible, lightweight multi-language test reporting tool. It provides clear graphical reports and allows everyone involved in the development process to extract the maximum of information from the everyday testing process. Allure Report is a flexible multi-language test report tool to show you a detailed representation of what has been tested end extract max from the everyday execution of tests. Allure Report is capable to build unified reports for dozens of testing tools across eleven programming languages on several CI/CD systems. -
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
5
Appium
Automation for iOS, Android, and Windows Apps
...It drives iOS, Android, and Windows apps using the WebDriver protocol. Is native app automation missing from your tool belt? Problem solved. Appium is built on the idea that testing native apps shouldn't require including an SDK or recompiling your app. And that you should be able to use your preferred test practices, frameworks, and tools. Appium is an open source project and has made design and tool decisions to encourage a vibrant contributing community. Appium aims to automate any mobile app from any language and any test framework, with full access to back-end APIs and DBs from test code. ... -
6
CodeceptJS
Supercharged End 2 End Testing Framework for NodeJS
CodeceptJS is a modern end-to-end testing framework for Node.js applications, enabling developers to write tests in a behavior-driven development (BDD) style with an emphasis on simplicity and readability. -
7
Loki
Visual Regression Testing for Storybook
There are a few visual regression tools for the web, but most either cannot be run headless or use phantomjs which is deprecated and a browser nobody is actually using. They usually also require you to maintain fixtures. With react-native it's now possible to target multiple platforms with a single code base, but there's no single tool to test all to my knowledge. Loki aims to have easy setup, no to low maintenance cost, reproducible tests independent of which OS they are run on, runnable on... -
8
Responsively App Development
A modified web browser that helps in responsive web development
A tool for responsive web design, allowing developers to preview websites across multiple screen sizes. -
9
APIAuto
The most advanced tool for HTTP API
The most powerful and easy-to-use HTTP interface tool for agile development, machine learning zero-code testing, code generation and static inspection, document generation and cursor suspension comments. A one-stop experience integrating documentation, testing, mocking, debugging, and management, as well as efficient and easy-to-use shortcut keys such as one-key formatting, commenting/uncommenting, etc. In terms of common functions, it far exceeds Postman, Swagger, YApi and other open-source and commercial API documentation/testing tools, and can import use cases and documents with one click. ... -
8 Monitoring Tools in One APM. Install in 5 Minutes.AppSignal works out of the box for Ruby, Elixir, Node.js, Python, and more. 30-day free trial, no credit card required.
-
10
sitespeed.io
Monitor, analyze and optimize your website speed and performance
Sitespeed.io is an open source tool that helps you monitor, analyze and optimize your website speed and performance, based on performance best practices advices from the coach and collecting browser metrics using the Navigation Timing API, User Timings and Visual Metrics (FirstVisualChange, SpeedIndex & LastVisualChange). Measuring performance shouldn’t be hard, you should be able to have full control of your metrics, own your own data and you should be able to do it without paying top... -
11
Newman
Newman is a command-line collection runner for Postman
Newman is Postman’s open-source command-line runner for collections, enabling the execution and testing of Postman Collections directly via CLI or Node.js scripts. It shines in CI/CD integration by offering flexible reporting, scripting, and automation capabilities. The easiest way to install Newman is using NPM. If you have Node.js installed, it is most likely that you have NPM installed as well. Newman can be easily used within your JavaScript projects as a Node.js module. The entire set... -
12
Bruno
Opensource IDE For Exploring and Testing Api's
Bruno is a Fast and Git-Friendly Opensource API client, aimed at revolutionizing the status quo represented by Postman, Insomnia, and similar tools out there. Bruno stores your collections directly in a folder on your filesystem. We use a plain text markup language, Bru, to save information about API requests. You can use git or any version control of your choice to collaborate over your API collections. Bruno is offline only. There are no plans to add cloud-sync to Bruno, ever. We value... -
13
Playwright CLI
CLI for common Playwright actions
Playwright CLI is the official command-line interface for Playwright, a powerful cross-browser automation and end-to-end testing framework that lets developers write and run tests reliably across Chromium, WebKit, and Firefox. The CLI provides an easy entry point for creating new test projects, running test suites, generating test traces, and debugging issues directly from the terminal. Developers can scaffold test files, record browser interactions as code, and run tests in headless or... -
14
PureJS-Tools
A Javascript library to make unit test and multiple onload events
PureJS-Tools is a lightweight library to simplify some aspect code of pure javascript like the written of unit test or the manage of the onload event. Thanks to this library, you can make easily unit test to your JS code. This is a free library under the GNU General Public License version 3.0 (GPLv3). This means that you can use the PureJS-Tools in your own project, redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software... -
15
Browsersync
Keep multiple browsers & devices in sync when building websites
With each web page, device and browser, testing time grows exponentially. From live reloads to URL pushing, form replication to click mirroring, Browsersync cuts out repetitive manual tasks. It’s like an extra pair of hands. Customise an array of sync settings from the UI or command line to create a personalised test environment. Need more control? Browsersync is easily integrated with your web platform, build tools, and other Node.js projects. -
16
Insomnia API Client
The open-source, cross-platform API client for GraphQL
...Accelerate your teams through spec-driven design-first API development. Catch issues earlier, centralize standards, and adopt an API workflow that works with your existing tools. Automate manual API tests and integrate with your CI/CD process to build out an API testing pipeline using Insomnia Unit Tests and Inso, the Insomnia CLI. Connect directly to Git providers to always be in sync with design changes and enable a GitOps pipeline with Inso, the Insomnia CLI tool. -
17
why-is-node-running
For when Node is running but you don't know why
why-is-node-running is a diagnostic tool for Node.js developers that helps answer the question: “why is my Node.js process still alive?” In complex asynchronous code — with timers, open handles, network sockets, file watchers, or unfulfilled promises — it can be tricky to figure out what is preventing the event loop from exiting. This utility inspects the active handles and resources in the runtime, prints a breakdown of open callbacks, sockets, timers, and other tasks, and explains what’s... -
18
EpicReact.Dev
Build a ReactJS App workshop
EpicReact.Dev is the codebase used in the “Build an Epic React App” workshop, where participants build a complete React application from scratch. The project demonstrates how to structure a modern React app, including data modeling, authentication, routing, testing, and interaction with a backend. It uses a realistic “bookshelf” domain where users can manage lists of books, track reading status, and record notes, which provides a concrete context for learning. The repository includes setup... -
19
chrome-remote-interface
Chrome Debugging Protocol interface for Node.js
...By connecting to a running browser instance with remote debugging enabled, developers can inspect network activity, manipulate pages, capture screenshots, automate navigation, and analyze performance metrics. The library is commonly used for building browser automation scripts, testing tools, web scraping systems, and custom developer tooling that interacts directly with Chrome internals. Unlike higher-level tools such as Puppeteer, Chrome Remote Interface focuses on exposing the raw protocol in a more flexible and transparent way. -
20
tapjs
Test Anything Protocol tools for node
Workspace for node-tap development. The API is simple but powerful. t.test() and a few assertions are all you really need. Everything is statically typed, so your editor can tell you what's available. Remember less, just write some tests. An easily extensible TAP test framework, with outstanding TypeScript support, a CLI, plenty of assertion methods, snapshots, object/method spies, module mocking, file system fixtures, lifecycle hooks, test filtering, comprehensive code coverage analysis,... -
21
Mithril.js
A JavaScript framework for building brilliant applications
Mithril is a modern client-side JavaScript framework for building Single Page Applications. It's small (< 10kb gzip), fast and provides routing and XHR utilities out of the box. Mithril is used by companies like Vimeo and Nike, and open source platforms like Lichess. Mithril supports IE11, Firefox ESR, and the last two versions of Firefox, Edge, Safari, and Chrome. No polyfills required. By default, Mithril views are described using hyperscript. Hyperscript offers a terse syntax that can be... -
22
eslint-plugin-jsx-a11y
Static AST checker for a11y rules on JSX elements
...This plugin does a static evaluation of the JSX to spot accessibility issues in React apps. Because it only catches errors in static code, use it in combination with axe-core/react to test the accessibility of the rendered DOM. Consider these tools just as one step of a larger a11y testing process and always test your apps with assistive technology. If you installed ESLint globally (using the -g flag in npm, or the global prefix in yarn) then you must also install eslint-plugin-jsx-a11y globally. To enable your custom components to be checked as DOM elements, you can set global settings in your configuration file by mapping each custom component name to a DOM element type. ... -
23
pH7 Social Dating CMS (pH7Builder)❤️
🚀 Professional Social Dating Web App Builder (formerly pH7CMS)
pH7Builder is a Professional, Free & Open Source PHP Social Dating Builder Software (primarily designed for developers ...). This Social Dating Web App is fully coded in object-oriented PHP (OOP) with the MVC pattern (Model-View-Controller). It is low resource-intensive, extremely powerful and highly secure. pH7Builder is included with over 42 native modules and is based on its homemade pH7 Framework which includes more than 52 packages To summarize, pH7Builder Social Dating Script... -
24
JavaScript & Node.js Testing
Comprehensive and exhaustive JavaScript & Node.js testing
This project compiles practical advice for testing JavaScript applications across the stack, emphasizing clarity, speed, and reliability over dogma. It distinguishes between different kinds of tests—unit, integration, end-to-end—and shows when each is appropriate given time and risk constraints. The guide focuses on removing flakiness by isolating side effects, controlling randomness, and stabilizing async code paths. -
25
OpenDDS
OpenDDS is open source publish/subscribe middleware
OpenDDS is an open source implementation of the Object Management Group (OMG) Data Distribution Service (DDS), providing a publish/subscribe middleware solution for real-time distributed systems. OpenDDS includes development and run-time tools. Full product information, source code, documentation, build instructions, and license information are available from http://www.opendds.org. Commercial consulting, support, and training for OpenDDS are available. OpenDDS is in production use...
