1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+25,437 stars
from 47,794 · score 10.14
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
19 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.mukul975 / Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
+8,447 stars
from 26,957 · score 9.04
3.swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+2,888 stars
from 79,396 · score 7.97
4.GreyDGL / PentestGPT
Automated Penetration Testing Agentic Framework Powered by Large Language Models
+1,642 stars
from 14,590 · score 7.40
5.Datalux / Osintgram
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
+1,625 stars
from 13,737 · score 7.39
6.maurosoria / dirsearch
Web path scanner
+529 stars
from 14,504 · score 6.27
7.AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
+386 stars
from 6,035 · score 5.96
8.qazbnm456 / awesome-web-security
🐶 A curated list of Web Security materials and resources.
+381 stars
from 13,602 · score 5.95
9.guardicore / monkey
Infection Monkey - An open-source adversary emulation platform
+75 stars
from 7,044 · score 4.33
10.codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
+56 stars
from 3,314 · score 4.04
11.PlumHound / PlumHound
Bloodhound Reporting for Blue and Purple Teams
+30 stars
from 1,304 · score 3.43
12.flipkart-incubator / Astra
Automated Security Testing For REST API's
+26 stars
from 2,648 · score 3.30
13.dolevf / graphql-cop
Security Auditor Utility for GraphQL APIs
+16 stars
from 681 · score 2.83
14.codingo / VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+11 stars
from 1,303 · score 2.48
15.fportantier / habu
Hacking Toolkit
+10 stars
from 982 · score 2.40
16.Paradoxis / StegCrackerArchived
Steganography brute-force utility to uncover hidden data inside files
+4 stars
from 601 · score 1.61
17.HynekPetrak / sshame
brute force SSH public-key authentication
+2 stars
from 78 · score 1.10
18.jordanpotti / AWSBucketDump
Security Tool to Look For Interesting Files in S3 Buckets
+1 stars
from 1,468 · score 0.69
19.SababaSec / ctf-writeups
Capture The Flag competition challenge write-ups
+1 stars
from 23 · score 0.69