1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+7,236 stars
from 65,995 · score 8.89
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
18 repositories by Attention Score · Oct 4, 2026 – Nov 2, 2026 (UTC)
2.mukul975 / Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
+1,790 stars
from 33,614 · score 7.49
3.swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+946 stars
from 81,338 · score 6.85
4.Datalux / Osintgram
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
+639 stars
from 14,723 · score 6.46
5.GreyDGL / PentestGPT
Automated Penetration Testing Agentic Framework Powered by Large Language Models
+594 stars
from 15,638 · score 6.39
6.LINGYK352 / Watchtower
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
+186 stars
from 1 · score 5.23
7.qazbnm456 / awesome-web-security
🐶 A curated list of Web Security materials and resources.
+153 stars
from 13,830 · score 5.04
8.maurosoria / dirsearch
Web path scanner
+133 stars
from 14,900 · score 4.90
9.AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
+107 stars
from 6,314 · score 4.68
10.guardicore / monkey
Infection Monkey - An open-source adversary emulation platform
+31 stars
from 7,088 · score 3.47
11.codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
+16 stars
from 3,354 · score 2.83
12.PlumHound / PlumHound
Bloodhound Reporting for Blue and Purple Teams
+12 stars
from 1,322 · score 2.56
13.flipkart-incubator / Astra
Automated Security Testing For REST API's
+9 stars
from 2,665 · score 2.30
14.dolevf / graphql-cop
Security Auditor Utility for GraphQL APIs
+4 stars
from 693 · score 1.61
15.codingo / VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+2 stars
from 1,312 · score 1.10
16.fportantier / habu
Hacking Toolkit
+2 stars
from 990 · score 1.10
17.Paradoxis / StegCrackerArchived
Steganography brute-force utility to uncover hidden data inside files
+1 stars
from 604 · score 0.69
18.HynekPetrak / sshame
brute force SSH public-key authentication
+1 stars
from 79 · score 0.69