1.swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+2,888 stars
from 79,396 · score 7.97
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
12 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.blacklanternsecurity / bbot
The recursive internet scanner for hackers. 🧡
+701 stars
from 10,208 · score 6.55
3.maurosoria / dirsearch
Web path scanner
+529 stars
from 14,504 · score 6.27
4.dwisiswant0 / apkleaks
Scanning APK file for URIs, endpoints & secrets.
+197 stars
from 6,177 · score 5.29
5.commixproject / commix
Automated Αll-in-One OS command injection exploitation tool.
+117 stars
from 5,781 · score 4.77
6.codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
+56 stars
from 3,314 · score 4.04
7.codingo / VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+11 stars
from 1,303 · score 2.48
8.khast3x / Redcloud
Automated Red Team Infrastructure deployement using Docker
+9 stars
from 1,271 · score 2.30
9.jordanpotti / AWSBucketDump
Security Tool to Look For Interesting Files in S3 Buckets
+1 stars
from 1,468 · score 0.69
10.Escape-Technologies / graphinder
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
+1 stars
from 228 · score 0.69
11.AdnaneKhan / ActionsTOCTOU
Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)
+1 stars
from 44 · score 0.69
12.aleff-github / wayparam
Fetch and normalize parameterized URLs from the Wayback CDX API (OSINT, inspired by ParamSpider).
+1 stars
from 7 · score 0.69