Top 8 Ruby Pentesting Projects

Pentesting

• Add a project

1. WhatWeb

   1 2 6,634 7.6 Ruby

   Next generation web scanner

   

2. SaaSHub

   www.saashub.com featured

   SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

   

3. evil-winrm

   2 5 5,395 5.8 Ruby

   The ultimate WinRM shell for hacking/pentesting

   

   Project mention: HTB – AD Enumeration & Attacks – Skills Assessment Part I - Walkthrough - without Metasploit | dev.to | 2026-05-02

   ─[eu-academy-1]─[10.10.14.30]─[htb-ac-2510340@htb-hnkzcchgmi]─[~] └──╼ [★]$ proxychains evil-winrm -i 172.16.6.3 -u Administrator -H 27dedb1dab4d8545c6e1c66fba077da0 [proxychains] config file found: /etc/proxychains.conf [proxychains] preloading /usr/lib/x86_64-linux-gnu/libproxychains.so.4 [proxychains] DLL init: proxychains-ng 4.16 Evil-WinRM shell v3.5 Warning: Remote path completions is disabled due to ruby limitation: quoting_detection_proc() function is unimplemented on this machine Data: For more information, check Evil-WinRM GitHub: https://github.com/Hackplayers/evil-winrm#Remote-path-completion Info: Establishing connection to remote endpoint [proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.6.3:5985 ... OK PS C:\Users\Administrator\Desktop> whoami [proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.6.3:5985 ... OK [proxychains] Strict chain ... 127.0.0.1:1080 ... 172.16.6.3:5985 ... OK inlanefreight\administrator

4. capsulecorp-pentest

   3 1 985 4.3 Ruby

   Vagrant VirtualBox environment for conducting an internal network penetration test

   

5. haiti

   4 21 984 7.5 Ruby

   :key: Hash type identifier (CLI & lib)

   

6. dradis-ce

   5 2 817 9.9 Ruby

   Dradis Framework: Collaboration and reporting for IT Security teams

   

7. ronin-vulns

   6 0 78 5.6 Ruby

   Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects.

   

8. vulnerable-code-snippets

   7 1 23 5.6 Ruby

   Vulnerable code snippets repository showcasing different vulnerabilities to practice code analysis skills. (by Acceis)

   

9. hedra

   8 1 9 8.4 Ruby

   Hedra — Command-line tool to analyze HTTP security headers and detect missing protections like CSP, HSTS, and X-Frame-Options. (by bl4ckstack)

   

   Project mention: Hedra | news.ycombinator.com | 2025-12-04

   Check out my new security tool:Command-line tool to analyze HTTP security headers and detect missing protections like CSP, HSTS, and X-Frame-Options.https://github.com/bl4ckstack/hedra

Ruby Pentesting related posts

• what Do YOU Recommend?

  2 projects | /r/hacking | 20 Apr 2023

• Lazypariah - A tool for generating reverse shell payloads on the fly

  1 project | /r/hacking | 21 Jul 2022

• LAZYPARIAH: A tool for generating reverse shell payloads on the fly.

  1 project | /r/coolgithubprojects | 25 Mar 2021

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

Do not miss the trending Ruby projects with our weekly report!