Looking for something like Awesome Pen Testing? Here are 24 alternatives, ranked by how closely they match it on purpose, features and platforms. Of these, 1 are free or have a free plan and 7 are open source.
This GitHub list collects resources and tools for penetration testing.
| # | Alternative | Pricing | Open source | Platforms |
|---|---|---|---|---|
| 1 | Cybersecurity-Resources | — | Not stated | — |
| 2 | Awesome CI/CD Security | — | Yes | — |
| 3 | Pentest Contracts | — | Not stated | — |
| 4 | AndroGuard | — | Yes | Android |
| 5 | MobileApp-Pentest-Cheatsheet | — | Not stated | Android, iOS |
| 6 | Metasploit | — | Not stated | Web |
| 7 | Awesome Hacking | — | Yes | Android |
| 8 | Awesome Cryptography | — | Not stated | — |
| 9 | Advisory Database | — | Not stated | — |
| 10 | GitDorker | — | Not stated | — |
A GitHub repository collecting a library of various cybersecurity resources, with folders for cybersecurity and hacking documentaries, cybersecurity YouTube channels, and free red team practice labs.
This GitHub list collects books, guidelines, blogs, videos, tools, and cases related to CI/CD security.
Adapt this collection of contract templates for penetration testing engagements.
AndroGuard provides tools for reverse engineering and penetration testing Android applications.
Consult concise notes on mobile application penetration-testing topics with this cheat sheet.
Use Metasploit to find security issues, verify mitigations, and manage authorized penetration testing assessments.
This repository collects lists of tools and resources for hackers and security researchers.
This GitHub list curates cryptography resources and links for people exploring the field.
GitHub Advisory Database catalogs CVEs and GitHub-originated security advisories affecting open-source software.
GitDorker searches GitHub for exposed secrets using a collection of search patterns.
This GitHub list curates GPT agents designed for cybersecurity work and related security tasks.
AllSafe provides an intentionally vulnerable Android app for security testing and practice.
The Metasploit cheat sheet collects command references for working with the framework.
Superagent provides an autonomous security platform for testing applications, repositories, agents, and infrastructure.
Test a browser for privacy leaks, including exposed IP addresses, device information, and fingerprinting risks.
Test how trackers and fingerprinting systems see your browser with Cover Your Tracks from the EFF.
SSL Labs provides tools for testing SSL and TLS configurations and related public key infrastructure.
Test HTTP security headers such as CSP and HSTS, then review recommendations for improving a site.
Check browser fingerprints and run DNS leak, IP, port, and WebRTC tests with BrowserScan.
IPv6 Leak Test checks whether a device has IPv6 connectivity and displays connection information related to privacy.
Test browser fingerprinting characteristics with CreepJS, which displays fingerprint and WebRTC results.
Karma Firewall is an Android firewall that states it requires no internet permission and intercepts no allowed user traffic.
Security and best-practice issues in container images can be checked with Dockle.
The action firewall for AI agents. Enforce policy and human approval before risky tool calls, shell commands, workflows, and production changes, with auditable evidence.
Alternatives are suggested from the purpose and features described in our listings. Different pages for the same product appear once. Read each description to check whether it fits your task. How we choose alternatives · Suggest an alternative
