1.swisskyrepo / PayloadsAllTheThingsA list of useful payloads and bypass for Web Application Security and Pentest/CTFpentestpayloadbypassweb-applicationhackingvulnerability+11 morePythonMIT82K total18K forks+2,888 starsfrom 79,396 · score 7.97
2.maurosoria / dirsearchWeb path scannerfuzzerfuzzingpythonsecuritydirsearchhacking+14 morePythonNo license15K total2.5K forks+529 starsfrom 14,504 · score 6.27
3.evyatarmeged / RaccoonA high performance offensive security tool for reconnaissance and vulnerability scanningreconnaissancescannervulnerability-assessmentvulnerability-scannerenumerationpentesting+9 morePythonMIT4.1K total500 forks+182 starsfrom 3,882 · score 5.21
4.codingo / NoSQLMapAutomated NoSQL database enumeration and web application exploitation tool.nosqlnosql-databasespenetration-testingscannersecurity-auditsecurity-tools+14 morePythonGPL-3.03.4K total627 forks+56 starsfrom 3,314 · score 4.04
5.0xInfection / TIDoS-FrameworkThe Offensive Manual Web Application Penetration Testing Framework.web-penetration-testingreconnaissancevulnerability-analysisscanning-enumerationweb-fuzzerosint+7 morePythonGPL-3.01.9K total392 forks+9 starsfrom 1,859 · score 2.30
6.jordanpotti / AWSBucketDumpSecurity Tool to Look For Interesting Files in S3 Bucketss3-bucketpenetration-testingbugbountyenumerationPythonMIT1.5K total245 forks+1 starsfrom 1,468 · score 0.69