1usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+1,348 stars
from 71,883 · score 7.21
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
20 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2mukul975 / Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
+392 stars
from 35,012 · score 5.97
3swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+220 stars
from 82,064 · score 5.40
4Datalux / Osintgram
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
+138 stars
from 15,224 · score 4.93
5GreyDGL / PentestGPT
Automated Penetration Testing Agentic Framework Powered by Large Language Models
+118 stars
from 16,114 · score 4.78
6LINGYK352 / Watchtower
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
+112 stars
from 75 · score 4.73
7devploit / php2shell
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
+106 stars
from 161 · score 4.67
8aarsaputra / php2shell
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
+34 stars
from 87 · score 3.56
9qazbnm456 / awesome-web-security
🐶 A curated list of Web Security materials and resources.
+26 stars
from 13,957 · score 3.30
10maurosoria / dirsearch
Web path scanner
+25 stars
from 15,008 · score 3.26
11Mr-Destroyer / ZimZilla
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
+25 stars
from 215 · score 3.26
12thomasunise / argus
Open-source agentic security operations platform:
+22 stars
from 96 · score 3.14
13AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
+12 stars
from 6,409 · score 2.56
14codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
+4 stars
from 3,366 · score 1.61
15zero-lab-ai / skills
Portable, evidence-bound security skills for authorized defensive assessment, red teaming, penetration testing, detection engineering, and engagement operations.
+4 stars
from 282 · score 1.61
16flipkart-incubator / Astra
Automated Security Testing For REST API's
+3 stars
from 2,671 · score 1.39
17PlumHound / PlumHound
Bloodhound Reporting for Blue and Purple Teams
+3 stars
from 1,331 · score 1.39
18guardicore / monkey
Infection Monkey - An open-source adversary emulation platform
+2 stars
from 7,117 · score 1.10
19dolevf / graphql-cop
Security Auditor Utility for GraphQL APIs
+2 stars
from 695 · score 1.10
20codingo / VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+1 stars
from 1,313 · score 0.69