+284 stars
from 11,948 · score 5.65
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
42 repositories by Attention Score · Oct 6, 2026 – Nov 4, 2026 (UTC)
2.MobSF / Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
- mobile-security
- windows-mobile-security
- +13 more
+274 stars
from 21,859 · score 5.62
3.htr-tech / zphisher
An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !
- phishing
- phisher
- phishing-attacks
- htr-tech
- phishing-pages
- zphisher
+213 stars
from 16,927 · score 5.37
4.LINGYK352 / Watchtower
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
- ai-agents
- attack-surface-management
- docker
- penetration-testing
- python
- security-assessment
- +4 more
+186 stars
from 1 · score 5.23
5.AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity
- exploit
- hacking
- +14 more
+103 stars
from 6,324 · score 4.64
6.wifiphisher / wifiphisher
The Rogue Access Point Framework
- wifiphisher
- wifi
- rogue
- access-point
- python
- security
- +4 more
+75 stars
from 14,867 · score 4.33
7.sensepost / objection
📱 objection - runtime mobile exploration
+67 stars
from 9,417 · score 4.22
8.Mebus / cupp
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
- password-strength
- weak-passwords
+62 stars
from 6,556 · score 4.14
9.s0md3v / XSStrike
Most advanced XSS scanner.
- xss
- xss-scanner
- xss-exploit
- xss-bruteforce
- xss-python
- xss-detection
- +2 more
+50 stars
from 15,191 · score 3.93
10.guardicore / monkey
Infection Monkey - An open-source adversary emulation platform
- penetration-testing
- security-tools
- security-automation
- infection-monkey
- adversary-emulation
+36 stars
from 7,088 · score 3.61
+20 stars
from 10,605 · score 3.04
12.codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
- security-audit
- security-tools
- +14 more
+17 stars
from 3,355 · score 2.89
13.CaringCaribou / caringcaribou
A friendly car security exploration tool for the CAN bus
+17 stars
from 953 · score 2.89
14.hashtopolis / server
Hashtopolis - distributed password cracking with Hashcat
- cracking
- distributed
- hashcat
- pentesting
- passwords
- hashtopussy
- +8 more
+16 stars
from 1,814 · score 2.83
15.nil0x42 / phpsploit
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
- hacktool
- blackhat
- +12 more
+14 stars
from 2,491 · score 2.71
16.epinna / tplmap
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
+13 stars
from 4,203 · score 2.64
+12 stars
from 3,534 · score 2.56
18.h3xduck / TripleCross
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
+10 stars
from 1,982 · score 2.40
19.D4Vinci / elpscrk
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
- elliot
- cupp
- passwords
- hacking-tool
- bruteforce
- brute-force
- +6 more
+9 stars
from 959 · score 2.30
+8 stars
from 2,136 · score 2.20
+5 stars
from 1,037 · score 1.79
22.RoganDawes / P4wnP1
P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
+4 stars
from 4,383 · score 1.61
23.GoSecure / pyrdp
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
+4 stars
from 1,784 · score 1.61
24.nil0x42 / duplicut
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
+4 stars
from 981 · score 1.61
25.WangYihang / Webshell-Sniper
:hammer: Manage your website via terminal
- php
- security-tools
- python
- pentest
- webshell-sniper
- webshell
+4 stars
from 422 · score 1.61
26.SpiderLabs / ResponderArchived
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
+3 stars
from 4,888 · score 1.39
27.0xInfection / TIDoS-Framework
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
- web-fuzzer
- osint
- +7 more
+3 stars
from 1,866 · score 1.39
28.bee-san / Name-That-Hash
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
+3 stars
from 1,670 · score 1.39
29.0xInfection / XSRFProbe
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
- csrf-scanner
- crafted-tokens
- +5 more
+3 stars
from 1,305 · score 1.39
30.akamai-threat-research / mqtt-pwn
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- python
- mqtt
- mqtt-broker
- mqtt-client
- iot
- exploitation
- +1 more
+3 stars
from 453 · score 1.39
31.kpcyrd / authoscope
Scriptable network authentication cracker
- rust
- cracking
- lua
- dictionary-attack
- concurrency
- password
- +2 more
+3 stars
from 419 · score 1.39
32.Warxim / petep
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
- proxy
- tcp
- tcp-proxy
- penetration-testing
- hacking
- security
- +14 more
+3 stars
from 231 · score 1.39
33.Abacus-Group-RTO / legionArchived
Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
+2 stars
from 1,053 · score 1.10
34.moyix / creddump
Automatically exported from code.google.com/p/creddump
+2 stars
from 288 · score 1.10
35.byt3bl33d3r / SILENTTRINITYArchived
An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
- security-tools
- c-sharp
- dotnet
- ironpython
- python3
- red-teams
- +4 more
+1 stars
from 2,346 · score 0.69
+1 stars
from 1,734 · score 0.69
37.r3nt0n / bopscrk
Generate smart and powerful wordlists
- wordlist
- password
- hacking-tool
- password-cracking
- wordlist-generator
- cracking
- +13 more
+1 stars
from 1,122 · score 0.69
38.andreiverse / gorilla
tool for generating wordlists or extending an existing one using mutations.
+1 stars
from 390 · score 0.69
39.linuz / Sticky-Keys-Slayer
Scans for accessibility tools backdoors via RDP
+1 stars
from 348 · score 0.69
40.sp00ks-git / hat
HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems
+1 stars
from 309 · score 0.69
41.drego85 / JoomlaScan
A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.
+1 stars
from 265 · score 0.69
42.ChrisTruncer / EyeWitness
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
+1 stars
from 64 · score 0.69