Ranked by Attention Score: stars gained over the last 7 complete days
31 repositories by Attention Score · Oct 29, 2026 – Nov 4, 2026 (UTC)
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !
Common User Passwords Profiler (CUPP)
An all-in-one hacking tool to remotely take over Android devices.
The Rogue Access Point Framework
📱 objection - runtime mobile exploration
Infection Monkey - An open-source adversary emulation platform
Hashtopolis - distributed password cracking with Hashcat
Most advanced XSS scanner.
Automated NoSQL database enumeration and web application exploitation tool.
A friendly car security exploration tool for the CAN bus
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Scriptable network authentication cracker
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
The Offensive Manual Web Application Penetration Testing Framework.
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
:hammer: Manage your website via terminal
tool for generating wordlists or extending an existing one using mutations.
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡