1.sherlock-project / sherlock
Hunt down social media accounts by username across social networks
+474 stars
from 94,913 · score 6.16
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
21 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
+411 stars
from 23,810 · score 6.02
3.HunxByts / GhostTrack
Useful tool to track location or mobile number
+372 stars
from 19,964 · score 5.92
4.soxoj / maigret
🕵️♂️ Collect a dossier on a person by username from 6K websites
+245 stars
from 39,361 · score 5.51
5.0x4m4 / hexstrike-ai
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
+184 stars
from 13,093 · score 5.22
6.irraz / vulnerator-ai
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
+184 stars
from 24 · score 5.22
7.blacklanternsecurity / bbot
The recursive internet scanner for hackers. 🧡
+46 stars
from 10,863 · score 3.85
8.sqlmapproject / sqlmap
Automatic SQL injection and database takeover tool
+43 stars
from 38,786 · score 3.78
9.androguard / androguard
Reverse engineering and pentesting for Android applications
+26 stars
from 6,373 · score 3.30
10.maurosoria / dirsearch
Web path scanner
+25 stars
from 15,008 · score 3.26
11.Mr-Destroyer / ZimZilla
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
+25 stars
from 215 · score 3.26
12.OWASP / mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
+22 stars
from 13,285 · score 3.14
13.thomasunise / argus
Open-source agentic security operations platform:
+22 stars
from 96 · score 3.14
14.AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
+12 stars
from 6,409 · score 2.56
15.ReversecLabs / drozer
The Leading Security Assessment Framework for Android.
+6 stars
from 4,641 · score 1.95
16.CERT-Polska / Artemis
A modular vulnerability scanner with automatic report generation capabilities.
+6 stars
from 1,246 · score 1.95
17.evyatarmeged / Raccoon
A high performance offensive security tool for reconnaissance and vulnerability scanning
+5 stars
from 4,059 · score 1.79
18.commixproject / commix
Automated Αll-in-One OS command injection exploitation tool.
+2 stars
from 5,896 · score 1.10
19.D4Vinci / elpscrk
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
+2 stars
from 964 · score 1.10
20.gsmith257-cyber / GraphCrawlerArchived
GraphQL automated security testing toolkit
+2 stars
from 333 · score 1.10
21.omar2535 / GraphQLer
🔍A cutting edge context aware GraphQL API fuzzing tool!
+1 stars
from 173 · score 0.69