10 open-source repos that hack your own app with AI before attackers do
victor_explore · x · 2026-11-02
A curated thread lists 10 open-source repos that attack your app like a hacker, prove every hole, review PRs for security bugs, and write fixes: Strix (67k★), Shannon (49k★), PentAGI, PentestGPT, Anthropic's Defending Code Reference Harness and Claude Code Security Review, RAPTOR, RedAmon, pentest-ai, and Trail of Bits' Buttercup (DARPA AIxCC winner). Stars checked Oct 2026.
More from coding & agent
- A scorecard for agent pilots: tasks, interruptions, missed decisions — krishnan · 2026-11-02
- Managing agents is babysitting: every ping arrives equally loud — krishnan · 2026-11-02
- A task you can't verify yet isn't done — agents need a 'deferred' task state — Key-Register-1969 · 2026-11-02
- A Redditor's ranked list of small models for running coding agents without a big GPU — transanethole · 2026-11-02
- Building revenue-team agents taught us context matters far more than model choice — hossam_elkhateeb11 · 2026-11-02
- "1% faster isn't enough, this should be 10x faster" becomes an AI-coding meme — DanielLockyer · 2026-11-02