OWASP

    OWASP/Nettacker

    Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

    automation
    security
    bruteforce
    cve
    hacking-tools
    information-gathering
    network-security
    Python
    Apache-2.0
    5.7K stars
    1.2K forks
    5.7K GitHub watchers
    Updated Oct 29, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    1 release in the last 90 days, the latest 65 days ago, with 81 contributors on GitHub.

    Peaked at #50 in the weekly ranking the week of Jul 19, its best in the past year.

    Use Cases & Benefits

    • Automates penetration testing and vulnerability scanning with modular, multithreaded network and web application reconnaissance.
    • Provides comprehensive, multi-protocol scanning with built-in database tracking and evasion techniques for efficient, stealthy security assessments.
    • Use for automating penetration testing workflows including port scanning, service detection, and vulnerability checks.
    • Use for continuous vulnerability monitoring and drift detection integrated into CI/CD pipelines to track infrastructure changes.
    • Use for large-scale network asset discovery and attack surface mapping across IP ranges, subdomains, and protocols.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    Apache 2.0

    Permissive: commercial use, modification and redistribution are allowed with attribution; includes an explicit patent grant from contributors.

    Community files

    • README: present
    • Contributing guide: present
    • Code of conduct: present

    Watch-outs

    No watch-outs from GStars' checks.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    OWASP Nettacker is an open-source, Python-based automated penetration testing and information-gathering framework designed to help cyber security professionals and ethical hackers perform reconnaissance, vulnerability assessments, and network security audits efficiently. Nettacker automates tasks like port scanning, service detection, subdomain enumeration, network mapping, vulnerability scanning, credential brute-force testing making it a powerful tool for identifying weaknesses in networks, web applications, IoT devices and APIs.

    Excerpt from the OWASP/Nettacker README on GitHub (Apache-2.0 license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Forks

    1.2K+83

    Open issues

    281+56

    Compared with peers in Automation

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth

    OWASP/Nettacker compared with Automation repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    vercel-labs/agent-desktop17.0K+13.3K33today
    D4Vinci/Scrapling98.1K+6.9K651 day ago
    Panniantong/Agent-Reach109.3K+3.0K604 days ago
    lexmount/moli22.7K+1.2K552 days ago
    superplanehq/superplane8.8K+435607 days ago
    OWASP/Nettacker5.7K—6165 days ago
    Category median22.7K+3.0K60—

    Also by OWASP

    Other repositories from this maintainer that GStars tracks

    Discover Repositories

    Search across tracked repositories by name or description