1.soxoj / maigret
🕵️♂️ Collect a dossier on a person by username from 6K websites
+13,971 stars
from 25,635 · score 9.54
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
23 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
2.sherlock-project / sherlock
Hunt down social media accounts by username across social networks
+13,319 stars
from 82,068 · score 9.50
3.HunxByts / GhostTrack
Useful tool to track location or mobile number
+7,769 stars
from 12,567 · score 8.96
4.smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
+6,734 stars
from 17,487 · score 8.82
5.0x4m4 / hexstrike-ai
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
+4,874 stars
from 8,403 · score 8.49
6.sqlmapproject / sqlmap
Automatic SQL injection and database takeover tool
+1,809 stars
from 37,020 · score 7.50
7.blacklanternsecurity / bbot
The recursive internet scanner for hackers. 🧡
+1,365 stars
from 9,544 · score 7.22
8.maurosoria / dirsearch
Web path scanner
+903 stars
from 14,130 · score 6.81
9.AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
+643 stars
from 5,778 · score 6.47
10.evyatarmeged / Raccoon
A high performance offensive security tool for reconnaissance and vulnerability scanning
+547 stars
from 3,517 · score 6.31
11.OWASP / mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
+498 stars
from 12,809 · score 6.21
12.androguard / androguard
Reverse engineering and pentesting for Android applications
+370 stars
from 6,029 · score 5.92
13.commixproject / commix
Automated Αll-in-One OS command injection exploitation tool.
+208 stars
from 5,690 · score 5.34
14.ReversecLabs / drozer
The Leading Security Assessment Framework for Android.
+161 stars
from 4,486 · score 5.09
15.CERT-Polska / Artemis
A modular vulnerability scanner with automatic report generation capabilities.
+94 stars
from 1,158 · score 4.55
16.D4Vinci / elpscrk
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
+45 stars
from 921 · score 3.83
17.Nekmo / dirhunt
Find web directories without bruteforce
+33 stars
from 1,975 · score 3.53
18.fportantier / habu
Hacking Toolkit
+19 stars
from 973 · score 3.00
19.Paradoxis / StegCrackerArchived
Steganography brute-force utility to uncover hidden data inside files
+12 stars
from 593 · score 2.56
20.TryCatchHCF / DumpsterFire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
+11 stars
from 1,032 · score 2.48
21.omar2535 / GraphQLer
🔍A cutting edge context aware GraphQL API fuzzing tool!
+11 stars
from 163 · score 2.48
22.gsmith257-cyber / GraphCrawlerArchived
GraphQL automated security testing toolkit
+3 stars
from 332 · score 1.39
23.SababaSec / ctf-writeups
Capture The Flag competition challenge write-ups
+1 stars
from 23 · score 0.69