1.sqlmapproject / sqlmap
Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
- database
- pentesting
- +9 more
+281 stars
from 38,568 · score 5.64
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
25 repositories by Attention Score · Oct 6, 2026 – Nov 4, 2026 (UTC)
+260 stars
from 39,054 · score 5.56
3.peass-ng / PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
+167 stars
from 20,594 · score 5.12
4.1N3 / Sn1per
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
- cybersecurity
- pentest-tool
- +13 more
+156 stars
from 11,365 · score 5.06
5.bettercap / bettercap
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
+152 stars
from 20,087 · score 5.03
6.openwall / john
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
- john
- c
- ripper
- password
- jtr
- opencl
- +10 more
+149 stars
from 13,718 · score 5.01
+107 stars
from 14,277 · score 4.68
8.Gallopsled / pwntools
CTF framework and exploit development library
+90 stars
from 13,738 · score 4.51
9.SpacehuhnTech / esp8266_deauther
Affordable WiFi hacking platform for testing and learning
+85 stars
from 14,999 · score 4.45
10.evilsocket / pwnagotchi
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
- ai
- deep-reinforcement-learning
- wpa-psk
- handshakes
- bettercap
- deep-learning
- +1 more
+37 stars
from 9,212 · score 3.64
11.threat9 / routersploit
Exploitation Framework for Embedded Devices
+35 stars
from 13,248 · score 3.58
12.commixproject / commix
Automated Αll-in-One OS command injection exploitation tool.
- python
- command-injection
- detection
- exploitation
- pentesting
- vulnerability-scanner
- +4 more
+35 stars
from 5,862 · score 3.58
13.ReversecLabs / drozer
The Leading Security Assessment Framework for Android.
- drozer
- android
- security
- pentesting
- java
- mobile
- +2 more
+27 stars
from 4,625 · score 3.33
14.JonathanSalwan / ROPgadget
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
- binary-exploitation
+27 stars
from 4,488 · score 3.33
15.m0nad / Diamorphine
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
- kernel-module
- security-tools
- +14 more
+23 stars
from 2,465 · score 3.18
+14 stars
from 1,322 · score 2.71
17.longld / peda
PEDA - Python Exploit Development Assistance for GDB
+9 stars
from 6,153 · score 2.30
18.EnableSecurity / sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
- svcrack
- svmap
- +6 more
+6 stars
from 1,107 · score 1.95
+4 stars
from 1,098 · score 1.61
+4 stars
from 150 · score 1.61
21.ByteSnipers / mobile-pentest-toolkit
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
- android
- android-pentesting
- mobile
- mobile-pentest
- pentest-tool
- mobile-pentest-toolkit
- +2 more
+3 stars
from 97 · score 1.39
22.jtesta / ssh-mitmArchived
SSH man-in-the-middle tool
- penetration-testing
- ssh
- mitm
- man-in-the-middle
- man-in-the-middle-attack
- hacking
+2 stars
from 1,739 · score 1.10
23.alphasoc / flightsim
A utility to safely generate malicious network traffic patterns and evaluate controls.
+1 stars
from 1,365 · score 0.69
24.bountyyfi / lonkero
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
- websecurity
- appsec
- +14 more
+1 stars
from 1,098 · score 0.69
25.NSAKEY / nsa-rules
Password cracking rules and masks for hashcat that I generated from cracked passwords.
+1 stars
from 573 · score 0.69