The first open-source AI agent built for offensive security. Autonomous pentesting from your terminal.

FUCK - a terminal-native offensive security agent. Single file, zero dependencies. Windows/Linux/macOS.

Offensive security case tracker for Pi Agent — bug bounties, CTFs, security audits

XPI — offensive security tools for Pi Agent. Casefile tracking, web search, library docs, exploit technique search, and todo tracking.

Offensive security case tracker for pi and Codex — bug bounties, CTFs, security audits

T3MP3ST-G0DM0D3 MERGED Twin AI Model — offensive security agent with ultraplinian multi-model racing and liquid response

Mantis — offensive-security daemon for AUTHORIZED security testing only (use against systems you own or have explicit written authorization to test). 7-phase FSM (RECON → AUTH → HUNT → CHAIN → VERIFY → GRADE → REPORT), parallel hunter sub-agents, cryptogr

YOLO offensive-security agent + /target engagement command for opencode, using Kali Linux (WSL2), Burp Suite MCP, and Playwright.

Operational memory CLI for offensive security firms

Insomnia — SAST & offensive security toolkit launcher (insom.ai)

D1337-OSC — Offensive Security Console | AI Weapon Forge

Permissionless, self-evolving offensive-security harness for Hermes Agent. Vibe-hack any target, ingest any tool, persist learnings across sessions. CTF / bug-bounty / pentest / research / education.

Offensive security tool for developers: automated safety-first checks and CI-ready reports.

Alias for `mantishack` — installs the Mantis offensive-security daemon CLI (mantis, mantis-daemon, mantis-mcp). AUTHORIZED security testing only. See https://github.com/deonmenezes/mantishack.

An all-in-one offensive security toolkit built in Rust. 250+ independent attack modules covering web exploitation, infrastructure testing, credential attacks, AI/LLM abuse, cloud/container, supply chain security, OT/ICS, IoT, network protocols, AI/LLM sec

Helio bug-bounty harness packaged as an optional enigma pack: skills, slash commands, sub-agents, MCP servers and tooling for offensive security and bug bounty work. Installed on demand into an isolated agent context by enigma-cli; never deployed to your

MCP server for generating high-quality offensive security datasets for LLM fine-tuning. Produces realistic multi-turn pentesting conversations with tool calls, reasoning chains, and professional reports.

ES Math-related intrinsics and helpers, robustly cached.

Utilities for working with htmlparser2's dom

a glob matcher in javascript