1.justcallmekoko / ESP32Marauder
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
+1,218 stars
from 11,787 · score 7.11
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
24 repositories by Attention Score · Aug 7, 2026 – Nov 4, 2026 (UTC)
2.hashcat / hashcat
World's fastest and most advanced password recovery utility
+875 stars
from 26,392 · score 6.78
3.maurosoria / dirsearch
Web path scanner
+531 stars
from 14,512 · score 6.28
4.trustedsec / social-engineer-toolkit
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
+354 stars
from 15,080 · score 5.87
+258 stars
from 21,694 · score 5.56
6.beefproject / beef
The Browser Exploitation Framework Project
+148 stars
from 10,939 · score 5.00
7.fuzzdb-project / fuzzdb
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
+66 stars
from 8,943 · score 4.20
8.epsylon / ufonet
UFONet - Denial of Service Toolkit
- dos
- ddos
- ufonet
- botnet
- disruption
- cryptography
- +1 more
+55 stars
from 2,494 · score 4.03
9.hashcat / hashcat-utils
Small utilities that are useful in advanced password cracking
+34 stars
from 1,597 · score 3.56
10.andresriancho / w3af
w3af: web application attack and audit framework, the open source web vulnerability scanner.
+24 stars
from 4,886 · score 3.22
11.trustedsec / hate_crack
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
+22 stars
from 1,843 · score 3.14
12.samyk / poisontap
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
+21 stars
from 6,461 · score 3.09
13.stealthsploit / OneRuleToRuleThemStill
A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule
+19 stars
from 649 · score 3.00
14.mesquidar / adbsploitArchived
A python based tool for exploiting and managing Android devices via ADB
+12 stars
from 893 · score 2.56
15.seemoo-lab / internalblue
Bluetooth experimentation framework for Broadcom and Cypress chips.
+9 stars
from 783 · score 2.30
+7 stars
from 1,218 · score 2.08
17.mxrch / penglab
🐧 Abuse of Google Colab for cracking hashes.
+7 stars
from 971 · score 2.08
18.GoSecure / dtd-finder
List DTDs and generate XXE payloads using those local DTDs.
- xxe
- dtd
- security
- hacktoberfest
+4 stars
from 661 · score 1.61
19.c6fc / npk
A mostly-serverless distributed hash cracking platform
+4 stars
from 657 · score 1.61
20.hashcat / kwprocessor
Advanced keyboard-walk generator with configureable basechars, keymap and routes
+4 stars
from 607 · score 1.61
21.clem9669 / hashcat-rule
Rule for hashcat or john. Aiming to crack how people generate their password
- hashcat
- hashcat-rules
- john
- john-rules
- hashcat-rule
+3 stars
from 470 · score 1.39
22.hashview / hashview
A web front-end for password cracking and analytics
- python
- hashcat
- web
- flask
- analytics
- distributed
+3 stars
from 397 · score 1.39
23.praetorian-inc / Hob0RulesArchived
Password cracking rules for Hashcat based on statistics and industry patterns
+2 stars
from 1,528 · score 1.10
24.ReversecLabs / dref
DNS Rebinding Exploitation Framework
- dns-rebinding
- red-team
- hacking
- web-hacking
- browser-hacking
- pentesting
- +3 more
+2 stars
from 494 · score 1.10