Search Results for "black box testing"
Sort By:
Showing 233 open source projects for "black box testing"
View related business solutions-
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
Custom VMs From 1 to 96 vCPUs With 99.95% UptimeLive migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
-
1
NeuroSploit
NeuroSploit is an advanced, AI-powered penetration testing framework
...Candidate findings are checked through cross-model validation and supporting tool evidence before being reported. It supports black-box, white-box, gray-box, infrastructure, and AI application security testing modes. NeuroSploit also provides a terminal interface, project memory, configurable model providers, structured reports, and a large library of specialized security agents. -
2
promptmap2
A security scanner for custom LLM applications
promptmap is an automated security scanner for custom LLM applications that focuses on prompt injection and related attack classes. The project supports both white-box and black-box testing, which means it can either run tests directly against a known model and system prompt configuration or attack an external HTTP endpoint without internal access. Its scanning workflow uses a dual-LLM architecture in which one model acts as the target being tested and another acts as a controller that evaluates whether an attack succeeded. ... -
3
Detox
Gray box end-to-end testing and automation framework for mobile apps
High velocity native mobile development requires us to adopt continuous integration workflows, which means our reliance on manual QA has to drop significantly. Detox tests your mobile app while it's running in a real device/simulator, interacting with it just like a real user. The most difficult part of automated testing on mobile is the tip of the testing pyramid - E2E. The core problem with E2E tests is flakiness, tests are usually not deterministic. We believe the only way to tackle flakiness head on is by moving from black box testing to gray box testing. That's where Detox comes into play. Detox is built from the ground up to support React Native projects as well as pure native ones. ... -
4
uqlm
Uncertainty Quantification for Language Models, is a Python package
...The system implements a variety of uncertainty quantification techniques that assign confidence scores to model responses. These scores help developers determine how likely a generated answer is to contain errors or fabricated information. The library includes both black-box and white-box approaches to uncertainty estimation. Black-box methods evaluate model outputs through multiple generations or comparative analysis, while white-box methods rely on token probabilities produced during inference. UQLM also supports ensemble strategies and model-as-judge approaches for evaluating responses. By combining multiple uncertainty metrics, the system provides more reliable indicators of when language model outputs may be unreliable. -
Veeam Data Platform v13.1 - Get Your Free TrialTry Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
-
5
frida
Dynamic instrumentation toolkit for developers
Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Inject your own scripts into black box processes. Hook any function, spy on crypto APIs or trace private application code, no source code needed. Edit, hit save, and instantly see the results. All without compilation steps or program restarts. Works on Windows, macOS, GNU/Linux, iOS, Android, and QNX. Install the Node.js bindings from npm, grab a Python package from PyPI, or use Frida through its Swift bindings, .NET bindings, Qt/Qml bindings, or C API. ... -
6
Delightful JavaScript Testing
Delightful JavaScript Testing
Jest is a delightful JavaScript Testing Framework with a focus on simplicity. Jest aims to work out of the box, config-free, on most JavaScript projects. Make tests that keep track of large objects with ease. Snapshots live either alongside your tests or embedded inline. Tests are parallelized by running them in their own processes to maximize performance. By ensuring your tests have unique global state, Jest can reliably run tests in parallel. -
7
PentestAgent
AI agent framework for black-box security testing
PentestAgent is an open-source autonomous security testing platform designed to help organizations identify vulnerabilities and assess security posture by simulating real-world attack scenarios without manual intervention. It brings a modular and automated approach to penetration testing by orchestrating a suite of tools and scripts that can emulate common exploitation techniques, reconnaissance workflows, and post-exploitation activities across targets. Users configure rules, policies, and... -
8
Jest
Delightful JavaScript Testing
Jest is a delightful, comprehensive JavaScript testing framework that works right out of the box for most JavaScript projects. It works on projects that use Babel, TypeScript, Angular, React, Node and so much more! It works fast and simple, capturing snapshots either alongside your tests or embedded inline to make testing and tracking changes over time a whole lot easier. Jest is designed to ensure the correctness of any JavaScript codebase. -
9
Offensive Web Testing Framework
Offensive Web Testing Framework (OWTF), is a framework
OWASP OWTF is a project focused on penetration testing efficiency and alignment of security tests to security standards like the OWASP Testing Guide (v3 and v4), the OWASP Top 10, PTES and NIST so that pentesters will have more time to see the big picture and think out of the box. More efficiently find, verify and combine vulnerabilities. Have time to investigate complex vulnerabilities like business logic/architectural flaws or virtual hosting sessions. -
One Monitoring Tool for IT, OT and Cloud | Free TrialModern infrastructure spans data centers, cloud platforms and factory floors, and every blind spot between them is a risk. PRTG supports SNMP, WMI, SSH and other standard protocols to monitor IT, OT and hybrid environments through one customizable dashboard. Build the views your team needs, from network health to application performance, without switching tools. Try PRTG free for 30 days now.
-
10
bilibili-API-collect
Community-maintained documentation project
bilibili-API-collect was a community-maintained documentation project that cataloged Bilibili interfaces used by its web, mobile, and TV clients. It researched undocumented endpoints through techniques such as black-box testing, traffic inspection, application analysis, and controlled experimentation. The documentation covered REST, gRPC, and WebSocket interfaces along with request structures, response formats, authentication concepts, errors, and platform-specific behavior. Major sections documented users, login flows, messaging, media, comments, live streaming, search, relationships, and other site functions. ... -
11
Jasmine
A JavaScript Testing Framework
Jasmine is a behavior-driven JavaScript development framework for running both browser and Node.js tests. It’s been tested to work on most versions of popular browsers including Safari, Chrome, Firefox, and Internet Explorer. Jasmine does not rely on any other JavaScript frameworks, browsers or DOM, making it suitable for websites, Node.js projects, or just about anywhere that JavaScript can run. Jasmine has everything you need out of the box to test your code, yet retains a low... -
12
CounterfactualExplanations.jl
A package for Counterfactual Explanations and Algorithmic Recourse
CounterfactualExplanations.jl is a package for generating Counterfactual Explanations (CE) and Algorithmic Recourse (AR) for black-box algorithms. Both CE and AR are related tools for explainable artificial intelligence (XAI). While the package is written purely in Julia, it can be used to explain machine learning algorithms developed and trained in other popular programming languages like Python and R. See below for a short introduction and other resources or dive straight into the docs. -
13
SecLists
The Pentester’s Companion
...It is a collection of various types of lists commonly used during security assessments, all in one place. SecLists helps to increase efficiency and productivity in security testing by conveniently providing all the lists a security tester may need in one repository. List types include those for usernames, passwords, URLs, fuzzing payloads, sensitive data patterns, web shells, and many more. All the tester will have to do is pull this repo onto a new testing box and he’ll have access to every type of list he may require. -
14
Honggfuzz
Security oriented software fuzzer
...Instrumentation via compiler hooks or hardware/perf counters guides mutations toward previously unseen edges, while persistent mode keeps the target process alive to amortize startup costs. The tool integrates tightly with sanitizers and can attach to already running processes, making it convenient for both white-box and black-box fuzzing. When it finds a crash, honggfuzz captures detailed context, minimizes the input, and can pin reproducibility by controlling CPU affinity and resource limits. Its small footprint and straightforward CLI make it easy to drop into CI or long-running campaigns across many cores. -
15
WPScan
WPScan WordPress security scanner
WPScan is a black-box WordPress vulnerability scanner written in Ruby. It analyzes WordPress sites to identify outdated core, plugins, themes, exposed APIs, and known vulnerabilities using a large built-in vulnerability database. It is a popular security auditing tool for pentesters and site administrators. -
16
Open Source Vizier
Python-based research interface for blackbox
Open Source (OSS) Vizier is a Python-based interface for blackbox optimization and research, based on Google’s original internal Vizier, one of the first hyperparameter tuning services designed to work at scale. Allows a user to setup an OSS Vizier Server, which can host black-box optimization algorithms to serve multiple clients simultaneously in a fault-tolerant manner to tune their objective functions. Defines abstractions and utilities for implementing new optimization algorithms for research and to be hosted in the service. A wide collection of objective functions and methods to benchmark and compare algorithms. ... -
17
CyberStrikeAI
CyberStrikeAI is an AI-native security testing platform built in Go
CyberStrikeAI is an AI-native security testing platform built in Go that brings autonomous penetration testing, vulnerability discovery, and attack chain analysis into a unified interface. The platform integrates over 100 security tools out of the box and pairs them with an intelligent orchestration engine that can be directed via natural language or policy definitions, allowing users to automate reconnaissance, scanning, exploitation, and reporting without manual sequencing of tools. ... -
18
Hermione
Browser test runner based on mocha and wdio
Hermione is a utility for integration testing of web pages using WebdriverIO and Mocha. If you are familiar with WebdriverIO and Mocha, you can start writing and running tests in 5 minutes! You need to install Hermione via npm and add a tiny config to your project. When tests are run one by one, it takes a lot of time. Hermione can run tests in parallel sessions in different browsers out of the box. -
19
Maltrail
Malicious traffic detection system
Maltrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails compiled from various AV reports and custom user-defined lists, where trail can be anything from domain name, URL, IP address (e.g. 185.130.5.231 for the known attacker) or HTTP User-Agent header value (e.g. sqlmap for automatic SQL injection and database takeover tool). Also, it uses (optional) advanced heuristic... -
20
InterpretML
Fit interpretable models. Explain blackbox machine learning
...InterpretML is an open-source package that incorporates state-of-the-art machine-learning interpretability techniques under one roof. With this package, you can train interpretable glass box models and explain black box systems. InterpretML helps you understand your model's global behavior, or understand the reasons behind individual predictions. -
21
HackTheBox CTF Writeups
This cheasheet is aimed at the CTF Players and Beginners
HackTheBox CTF Writeups is a curated directory of walkthroughs for retired Hack The Box machines. It is designed to help CTF players and cybersecurity learners study complete penetration-testing scenarios in legal practice environments. Entries are organized by machine name and include the target operating system and difficulty level. The collection spans Linux, Windows, FreeBSD, Solaris, and other environments across easy through insane difficulty ratings. -
22
Angular CLI
Development tools and libraries specialized for Angular
Angular CLI consists of development tools and libraries specialized for Angular, allowing you to create, manage, build and test Angular projects. It is built on top of the Angular DevKit, which provides a broad set of libraries for managing, developing, deploying and analyzing your code. -
23
Vitest
Next generation testing framework powered by Vite
Next-generation testing framework powered by Vite. Reuse Vite's config and plugins - consistent across your app and tests. But Vitest is not required. Expect, snapshot, coverage, and more - migrating from Jest is straightforward. Out-of-box ESM, TypeScript and JSX support powered by esbuild. -
24
ExplainableAI.jl
Explainable AI in Julia
This package implements interpretability methods for black box models, with a focus on local explanations and attribution maps in input space. It is similar to Captum and Zennit for PyTorch and iNNvestigate for Keras models. Most of the implemented methods only require the model to be differentiable with Zygote. Layerwise Relevance Propagation (LRP) is implemented for use with Flux.jl models. -
25
JuliaFormatter.jl
An opinionated code formatter for Julia
Width-sensitive formatter for Julia code. Inspired by gofmt, refmt, black, and prettier. Built with CSTParser. Sane defaults out of the box with options to customize. Supports YAS, Blue and SciML style guides. JuliaFormatter.toml configuration file to store options. JuliaFormatter exports format, format_file, format_text, and format_md. format_md has the same API as format_text but differ in that format_md expects the text content to be a Markdown document.
