1.swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+5,442 stars
from 76,842 · score 8.60
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
13 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
2.blacklanternsecurity / bbot
The recursive internet scanner for hackers. 🧡
+1,365 stars
from 9,544 · score 7.22
3.maurosoria / dirsearch
Web path scanner
+903 stars
from 14,130 · score 6.81
4.dwisiswant0 / apkleaks
Scanning APK file for URIs, endpoints & secrets.
+373 stars
from 6,001 · score 5.92
5.commixproject / commix
Automated Αll-in-One OS command injection exploitation tool.
+208 stars
from 5,690 · score 5.34
6.codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
+127 stars
from 3,243 · score 4.85
7.codingo / VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+30 stars
from 1,284 · score 3.43
8.jordanpotti / AWSBucketDump
Security Tool to Look For Interesting Files in S3 Buckets
+18 stars
from 1,451 · score 2.94
9.khast3x / Redcloud
Automated Red Team Infrastructure deployement using Docker
+17 stars
from 1,263 · score 2.89
10.ptswarm / reFlutterArchived
Flutter Reverse Engineering Framework
+15 stars
from 1,449 · score 2.77
11.AdnaneKhan / ActionsTOCTOU
Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)
+4 stars
from 41 · score 1.61
12.Escape-Technologies / graphinder
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
+2 stars
from 227 · score 1.10
13.aleff-github / wayparam
Fetch and normalize parameterized URLs from the Wayback CDX API (OSINT, inspired by ParamSpider).
+2 stars
from 6 · score 1.10