Top 20 Go Pentest Projects

mosint

1 11 4,936 5.9 Go

An automated e-mail OSINT tool
CodeRabbit

coderabbit.ai featured

CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.
afrog

2 1 3,799 9.2 Go

A Security Tool for Bug Bounty, Pentest and Red Teaming.
sx

3 7 1,491 0.0 Go

:vulcan_salute: Fast, modern, easy-to-use network scanner
reverse_ssh

4 3 1,067 9.0 Go

SSH based reverse shell

Project mention: Reverse SSH – Have your SSH daemon connect back to you | news.ycombinator.com | 2024-05-29
kdigger

5 3 454 4.9 Go

Kubernetes focused container assessment and context discovery tool for penetration testing
Girsh

6 2 353 1.7 Go

Automatically spawn a reverse shell fully interactive for Linux or Windows victim
crawley

7 8 293 5.7 Go

The unix-way web crawler (by s0rg)
InfluxDB

influxdata.com featured

InfluxDB high-performance time series database. Collect, organize, and act on massive volumes of high-resolution data to power real-time intelligent systems.
favirecon

8 8 210 9.0 Go

Use favicon.ico to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.
Swego

9 3 200 4.7 Go

Swiss army knife Webserver in Golang. Keep simple like the python SimpleHTTPServer but with many features
fileless-xec

10 1 198 3.6 Go

Stealth dropper executing remote binaries without dropping them on disk .(HTTP3 support, ICMP support, invisible tracks, cross-platform,...)
QueenSono

11 1 146 0.0 Go

Golang binary for data exfiltration with ICMP protocol (+ ICMP bindshell, http over ICMP tunneling, ...)
turbo-attack

12 2 141 2.7 Go

A turbo traffic generator pentesting tool to generate random traffic with random MAC and IP addresses in addition to random sequence numbers to a particular IP and port.
notionterm

13 1 126 0.7 Go

🖥️📖 Embed reverse shell in Notion pages
goblob

14 3 87 6.6 Go

A fast enumeration tool for publicly exposed Azure Storage blobs.
cfuzz

15 2 85 0.0 Go

Command line fuzzer and bruteforcer 🌪 wfuzz for command
skweez

16 1 76 2.8 Go

Fast website scraper and wordlist generator
sourcemap

17 4 29 10.0 Go

Restore the frontend source code from source maps
morrigan

18 0 13 6.5 Go

morrigan - Penetration Tool Set
trailblaze

19 1 2 10.0 Go

TrailBlaze 🔥 SSH Audit & Network Scanner
o365discover

20 1 1 0.0 Go

A tool for discovering users on Office 365
SaaSHub

www.saashub.com featured

SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

Go Pentest discussion

Go Pentest related posts

Boost your recon with favirecon!

1 project | /r/Pentesting | 16 Feb 2023
Boost your recon with favirecon

1 project | /r/Infosec | 16 Feb 2023
Boost your recon phase with favirecon

3 projects | /r/bugbounty | 16 Feb 2023
Just open sourced favirecon!

1 project | /r/golang | 16 Feb 2023
Open sourced favirecon!

1 project | /r/github | 16 Feb 2023
Fastest webpath scanner out here?

2 projects | /r/netsecstudents | 14 Dec 2022
Pentest-tool: Simple web deployment for pentest and redteam with simwigo

2 projects | /r/HowToHack | 25 Feb 2022
A note from our sponsor - InfluxDB
influxdata.com | 29 Apr 2025

Collect, organize, and act on massive volumes of high-resolution data to power real-time intelligent systems. Learn more →

Index

What are some of the best open-source Pentest projects in Go? This list will help you:

#	Project	Stars
1	mosint	4,936
2	afrog	3,799
3	sx	1,491
4	reverse_ssh	1,067
5	kdigger	454
6	Girsh	353
7	crawley	293
8	favirecon	210
9	Swego	200
10	fileless-xec	198
11	QueenSono	146
12	turbo-attack	141
13	notionterm	126
14	goblob	87
15	cfuzz	85
16	skweez	76
17	sourcemap	29
18	morrigan	13
19	trailblaze	2
20	o365discover	1