Alternatives

XAttacker alternatives for AI agents.

Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.

Current skill

XAttacker

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

68
Quality
77
Trust
1.7K
Stars
#1

Wpscan

Similarity 116Trust 86Excellent 97

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

9.7K starsJul 23, 2026 pushsecurityRubySecurity
$ npx skills add wpscanteam/wpscan
#2

Nuclei

Similarity 111Trust 89Excellent 100

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

29K starsJun 13, 2026 pushsecurityGoSecurity
$ npx skills add projectdiscovery/nuclei
#3

Zaproxy

Similarity 109Trust 87Excellent 100

The ZAP by Checkmarx Core project

15K starsJun 11, 2026 pushsecurityJavaSecurity
$ npx skills add zaproxy/zaproxy
#4

Vuls

Similarity 109Trust 87Excellent 100

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

12K starsJun 12, 2026 pushsecurityGoSecurity
$ npx skills add future-architect/vuls
#5

Osv Scanner

Similarity 109Trust 88Excellent 100

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

11K starsJun 20, 2026 pushsecurityGoSecurity
$ npx skills add google/osv-scanner
#6

Hint

Similarity 106Trust 86Excellent 98

💡 A hinting engine for the web

3.7K starsJul 21, 2026 pushsecurityTypeScriptSecurity
$ npx skills add webhintio/hint
#7

Bbot

Similarity 101Trust 82Excellent 99

The recursive internet scanner for hackers. 🧡

9.9K starsJun 12, 2026 pushsecurityPythonOSINT
$ npx skills add blacklanternsecurity/bbot
#8

Infisical

Similarity 101Trust 79Excellent 100

Infisical is the open-source platform for secrets, certificates, and privileged access management.

27K starsJun 20, 2026 pushsecurityTypeScriptSecurity
$ npx skills add Infisical/infisical
#9

Claude Bug Bounty

Similarity 98Trust 83Excellent 100

AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.

3.5K starsJun 18, 2026 pushsecurityPythonSecurity
$ npx skills add shuvonsec/claude-bug-bounty
#10

Maigret

Similarity 96Trust 83Excellent 100

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

33K starsJun 11, 2026 pushsecurityPythonOSINT
$ npx skills add soxoj/maigret
#11

Shadowbroker

Similarity 95Trust 91Excellent 100

Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. Hook an AI agent up to have it parse through data and find previously unseen correlations. The knowledge is available to all but rarely aggregated in the open, until now.

11K starsOct 10, 2026 pushsecurityPythonOSINT
$ npx skills add BigBodyCobain/Shadowbroker
#12

Wazuh

Similarity 95Trust 85Excellent 100

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

16K starsJul 24, 2026 pushsecurityC++Compliance
$ npx skills add wazuh/wazuh
#13

Opa

Similarity 95Trust 87Excellent 100

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

12K starsJun 12, 2026 pushsecurityGoCompliance
$ npx skills add open-policy-agent/opa
#14

Web Check

Similarity 69Trust 87Excellent 100

🕵️‍♂️ All-in-one OSINT tool for analysing any website

34K starsJun 15, 2026 pushlegal-complianceTypeScriptPrivacy
$ npx skills add lissy93/web-check
#15

Cryptomator

Similarity 68Trust 89Excellent 100

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

15K starsJun 19, 2026 pushlegal-complianceJavaPrivacy
$ npx skills add cryptomator/cryptomator
#16

Mastg

Similarity 67Trust 89Excellent 100

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

13K starsJun 20, 2026 pushdevelopmentPythonStatic Analysis
$ npx skills add OWASP/mastg

How to choose

When should you switch?

Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep XAttacker if it already passes your workflow test and repository review.

Next step

Compare top candidates side by side

Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.