The Great Hall

Every work in the library, top first

Free to explore · curated by OneWave AI

1,407 apps, agents and plugins from GitHub, ranked on how actively they are maintained rather than on stars. Security review is in progress and every project shows exactly what has and has not been checked.

tech·an·dri·a/tɛkˈændriə/n.

A library for the tools of a new age. After the Library of Alexandria, which copied every scroll that reached its harbour before it went on the shelf.

Regular searchNames, topics, and keywords

/

AI searchDescribe a task, find the right tools

AI searches are sent to OpenAI.

ActivitySort

License detectedReviewed only (0)

Review is in progress. 1,407 projects are queued and none has been approved yet. Everything unreviewed is discovery metadata imported from GitHub — listed, not vetted.

Request a review · What we check

Ranked by total stars at the last daily refresh. This is not stars earned during the selected period. Star counts in the AI category are known to be inflated by fake-star campaigns, so activity and license are shown first.

8 projects matching “pentesting”

strix

usestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Pushed today.Apache License 2.0PythonApps75.2k+1.3k

promptfoo

promptfoo/promptfoo

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

Pushed today.MIT LicenseTypeScriptAgents27.1k

Ciphey

bee-san/Ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Pushed 6 days ago.MIT LicenseRustApps21.8k+11

hexstrike-ai

0x4m4/hexstrike-aiSlowing

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

Last push 3 months ago.MIT LicensePythonPlugins13.5k+174

CyberStrikeAI

AIPentest/CyberStrikeAI

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.

Pushed yesterday.Apache License 2.0GoApps8.6k

Decepticon

PurpleAILAB/Decepticon

Autonomous Hacking Agent for Red Team

Pushed yesterday.Apache License 2.0PythonAgents6.6k+48

Claude-BugHunter

elementalsouls/Claude-BugHunter

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

Pushed yesterday.MIT LicensePythonSkills5.6k

jadx-ai-mcp

zinja-coder/jadx-ai-mcp

Plugin for JADX to integrate MCP server

Pushed 25 days ago.Apache License 2.0JavaPlugins3.0k+25