1.swisskyrepo / PayloadsAllTheThingsA list of useful payloads and bypass for Web Application Security and Pentest/CTFpentestpayloadbypassweb-applicationhackingvulnerability+11 morePythonMIT82K total18K forks+5,442 starsfrom 76,842 · score 8.60
2.maurosoria / dirsearchWeb path scannerfuzzerfuzzingpythonsecuritydirsearchhacking+14 morePythonNo license15K total2.5K forks+903 starsfrom 14,130 · score 6.81
3.evyatarmeged / RaccoonA high performance offensive security tool for reconnaissance and vulnerability scanningreconnaissancescannervulnerability-assessmentvulnerability-scannerenumerationpentesting+9 morePythonMIT4.1K total500 forks+547 starsfrom 3,517 · score 6.31
4.codingo / NoSQLMapAutomated NoSQL database enumeration and web application exploitation tool.nosqlnosql-databasespenetration-testingscannersecurity-auditsecurity-tools+14 morePythonGPL-3.03.4K total627 forks+127 starsfrom 3,243 · score 4.85
5.0xInfection / TIDoS-FrameworkThe Offensive Manual Web Application Penetration Testing Framework.web-penetration-testingreconnaissancevulnerability-analysisscanning-enumerationweb-fuzzerosint+7 morePythonGPL-3.01.9K total392 forks+24 starsfrom 1,844 · score 3.22
6.jordanpotti / AWSBucketDumpSecurity Tool to Look For Interesting Files in S3 Bucketss3-bucketpenetration-testingbugbountyenumerationPythonMIT1.5K total245 forks+18 starsfrom 1,451 · score 2.94