1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+1,348 stars
from 71,883 · score 7.21
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
17 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
+411 stars
from 23,810 · score 6.02
3.HunxByts / GhostTrack
Useful tool to track location or mobile number
+372 stars
from 19,964 · score 5.92
4.swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+220 stars
from 82,064 · score 5.40
5.Z4nzu / hackingtool
ALL IN ONE Hacking Tool For Hackers
+164 stars
from 81,413 · score 5.11
6.Datalux / Osintgram
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
+138 stars
from 15,224 · score 4.93
7.blacklanternsecurity / bbot
The recursive internet scanner for hackers. 🧡
+46 stars
from 10,863 · score 3.85
8.DedSecInside / TorBot
Dark Web OSINT Tool
+43 stars
from 5,115 · score 3.78
9.maurosoria / dirsearch
Web path scanner
+25 stars
from 15,008 · score 3.26
10.OWASP / mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
+22 stars
from 13,285 · score 3.14
11.AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
+12 stars
from 6,409 · score 2.56
12.evyatarmeged / Raccoon
A high performance offensive security tool for reconnaissance and vulnerability scanning
+5 stars
from 4,059 · score 1.79
13.codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
+4 stars
from 3,366 · score 1.61
14.jopohl / urhArchived
Universal Radio Hacker: Investigate Wireless Protocols Like A Boss
+2 stars
from 12,591 · score 1.10
15.dolevf / graphql-cop
Security Auditor Utility for GraphQL APIs
+2 stars
from 695 · score 1.10
16.nil0x42 / phpsploit
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
+1 stars
from 2,501 · score 0.69
17.codingo / VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+1 stars
from 1,313 · score 0.69