1.justcallmekoko / ESP32Marauder
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
+457 stars
from 12,548 · score 6.13
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
24 repositories by Attention Score · Oct 6, 2026 – Nov 4, 2026 (UTC)
2.hashcat / hashcat
World's fastest and most advanced password recovery utility
+353 stars
from 26,914 · score 5.87
3.Mr-Destroyer / ZimZilla
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
- ai-bug-bounty
- ai-bug-finder
- ai-bug-reporter
- ai-hacking
- bugbounty
- bughunting
- +14 more
+246 stars
from 1 · score 5.51
4.maurosoria / dirsearch
Web path scanner
+132 stars
from 14,911 · score 4.89
5.trustedsec / social-engineer-toolkit
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
+102 stars
from 15,332 · score 4.63
+84 stars
from 21,868 · score 4.44
7.beefproject / beef
The Browser Exploitation Framework Project
+52 stars
from 11,035 · score 3.97
8.fuzzdb-project / fuzzdb
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
+19 stars
from 8,990 · score 3.00
9.epsylon / ufonet
UFONet - Denial of Service Toolkit
- dos
- ddos
- ufonet
- botnet
- disruption
- cryptography
- +1 more
+17 stars
from 2,532 · score 2.89
10.hashcat / hashcat-utils
Small utilities that are useful in advanced password cracking
+9 stars
from 1,622 · score 2.30
11.stealthsploit / OneRuleToRuleThemStill
A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule
+4 stars
from 664 · score 1.61
12.samyk / poisontap
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
+3 stars
from 6,479 · score 1.39
13.Banaanhangwagen / WINHELLO2hashcat
The repository host gives no description.
+3 stars
from 87 · score 1.39
14.andresriancho / w3af
w3af: web application attack and audit framework, the open source web vulnerability scanner.
+2 stars
from 4,908 · score 1.10
+2 stars
from 1,223 · score 1.10
16.ReversecLabs / dref
DNS Rebinding Exploitation Framework
- dns-rebinding
- red-team
- hacking
- web-hacking
- browser-hacking
- pentesting
- +3 more
+2 stars
from 494 · score 1.10
17.trustedsec / hate_crack
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
+1 stars
from 1,864 · score 0.69
18.praetorian-inc / Hob0RulesArchived
Password cracking rules for Hashcat based on statistics and industry patterns
+1 stars
from 1,529 · score 0.69
19.mxrch / penglab
🐧 Abuse of Google Colab for cracking hashes.
+1 stars
from 977 · score 0.69
20.mesquidar / adbsploitArchived
A python based tool for exploiting and managing Android devices via ADB
+1 stars
from 904 · score 0.69
21.seemoo-lab / internalblue
Bluetooth experimentation framework for Broadcom and Cypress chips.
+1 stars
from 791 · score 0.69
22.GoSecure / dtd-finder
List DTDs and generate XXE payloads using those local DTDs.
- xxe
- dtd
- security
- hacktoberfest
+1 stars
from 664 · score 0.69
23.n0kovo / hashcat-rules-collection
Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.
- hashcat
- hashcat-rules
- hashcat-rule
- password-cracking
- password-cracking-tool
- wordlist-generator
- +2 more
+1 stars
from 173 · score 0.69
24.philsmd / itunes_backup2hashcat
Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
+1 stars
from 123 · score 0.69