Repositories
32
Net stars gained, last 7 days
+6,614
Top-level Tag
Net stars gained each day, last 90 days
Peak days
- 1
Oct 12, 2026 +2,628 net stars (median day +585)
- vxcontrol/pentagi+1,913 (73%)
- usestrix/strix+248 (9%)
- Z4nzu/hackingtool+161 (6%)
- 2
Oct 13, 2026 +1,720 net stars (median day +585)
- vxcontrol/pentagi+1,075 (63%)
- usestrix/strix+209 (12%)
- cskwork/scopeweaver+101 (6%)
Published v0.3.1 on Oct 13, 2026 · Created on Oct 2, 2026
- 3
Oct 14, 2026 +2,014 net stars (median day +585)
- vxcontrol/pentagi+1,480 (73%)
- usestrix/strix+221 (11%)
- Z4nzu/hackingtool+73 (4%)
- 4
Oct 20, 2026 +1,337 net stars (median day +585)
- usestrix/strix+400 (30%)
- vxcontrol/pentagi+236 (18%)
- opentrap/opentrap+112 (8%)
Created on Oct 18, 2026
- 5
Oct 28, 2026 +1,531 net stars (median day +585)
- KeygraphHQ/shannon+430 (28%)
Published v3.5.0 on Oct 27, 2026
- BaaRai/ARTEX+350 (23%)
- usestrix/strix+215 (14%)
A peak day has at least 2 times the net stars of the median day of this chart, and at least 100 more. For each peak day, the list shows the repositories that gained the most net stars that day. It also shows their GitHub releases of that day or the day before (UTC), and their creation date when it was 14 days or less before. These events occurred near the same day. They do not show why the stars came.
Largest
Most stars in total now.
readme:
AI-guided, all-in-one toolkit for authorized security testing
description:
It's a collection of multiple types of lists used during security assessments, collected in one place.
description:
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
description:
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
readme:
Start `msfconsole:` This is the primary interface for interacting with Metasploit.
readme:
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers.
readme:
PentAGI is an open-source, self-hosted multi-agent system for autonomous penetration testing.
readme:
World's fastest password cracker
readme:
**Secure your LLM apps** with red teaming and vulnerability scanning
description:
an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework
Newest Admissions
Entered the index by the rising rule, newest first.
description:
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
readme:
Built for **authorized pentesting**: rate-limit checks, trial/expiry controls, device- and IP-ban enforcement, anti-abuse logic.
description:
The agentic pentesting environment that lives on your machine.
readme:
Autopilot and native autonomous pentesting plan tests,
description:
Self-hosted AI security assessment, asset intelligence, and evidence workflows.
readme:
**安全测试**：用于已授权范围内的资产发现、验证、复测和报告整理。
- BaaRai/ARTEX1.3K
description:
ARTEX - AI autonomous penetration testing system (English translation)
readme:
h3fuzz is a content discovery tool with automatic HTTP/3 acceleration and a persistent web console.
description:
an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner
description:
全流程渗透测试 Agent 系统，支持 Web、小程序、安卓 APP、IOS app(测试中)
How a repository gets this Tag
An agent read the description, the GitHub topics, and the start of the README of each repository, and chose Tags only from the checked-in Tag list. For each Tag it quoted the text, and a code check kept the Tag only when the quote is in that text. The quote under each repository is that evidence. A Tag does not rank repositories and does not say that one can replace another. A wrong Tag? Use "Report a problem with this page" on the page of the repository. Withheld Repositories are left out of all numbers on this page.