1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Ranked by Attention Score: stars gained over the last 180 complete days
26 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
ALL IN ONE Hacking Tool For Hackers
Useful tool to track location or mobile number
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
The recursive internet scanner for hackers. 🧡
Dark Web OSINT Tool
Web path scanner
An all-in-one hacking tool to remotely take over Android devices.
A high performance offensive security tool for reconnaissance and vulnerability scanning
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Universal Radio Hacker: Investigate Wireless Protocols Like A Boss
Automated NoSQL database enumeration and web application exploitation tool.
Security Auditor Utility for GraphQL APIs
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
Generate smart and powerful wordlists
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
Like nmap for mapping wifi networks you're not connected to, plus device tracking
A python based tool for exploiting and managing Android devices via ADB
Hacking Toolkit
Automated Red Team Infrastructure deployement using Docker
DDoS attacks over Tor
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Capture The Flag competition challenge write-ups