1.swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+946 stars
from 81,338 · score 6.85
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
9 repositories by Attention Score · Oct 4, 2026 – Nov 2, 2026 (UTC)
2.sensepost / objection
📱 objection - runtime mobile exploration
+67 stars
from 9,412 · score 4.22
3.christophetd / CloudFlair
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
+12 stars
from 2,972 · score 2.56
4.lanjelot / patator
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
+10 stars
from 3,929 · score 2.40
5.khast3x / Redcloud
Automated Red Team Infrastructure deployement using Docker
+6 stars
from 1,274 · score 1.95
6.GoSecure / pyrdp
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
+4 stars
from 1,784 · score 1.61
7.WangYihang / Webshell-Sniper
:hammer: Manage your website via terminal
+4 stars
from 422 · score 1.61
8.fportantier / habu
Hacking Toolkit
+2 stars
from 990 · score 1.10
9.TryCatchHCF / DumpsterFire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
+1 stars
from 1,042 · score 0.69