1.sqlmapproject / sqlmap
Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
- database
- pentesting
- +9 more
+857 stars
from 37,992 · score 6.75
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
29 repositories by Attention Score · Aug 7, 2026 – Nov 4, 2026 (UTC)
2.1N3 / Sn1per
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
- cybersecurity
- pentest-tool
- +13 more
+836 stars
from 10,685 · score 6.73
+709 stars
from 38,605 · score 6.57
4.peass-ng / PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
+581 stars
from 20,180 · score 6.37
5.bettercap / bettercap
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
+561 stars
from 19,678 · score 6.33
6.openwall / john
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
- john
- c
- ripper
- password
- jtr
- opencl
- +10 more
+449 stars
from 13,418 · score 6.11
+349 stars
from 14,035 · score 5.86
8.Gallopsled / pwntools
CTF framework and exploit development library
+228 stars
from 13,600 · score 5.43
9.SpacehuhnTech / esp8266_deauther
Affordable WiFi hacking platform for testing and learning
+218 stars
from 14,866 · score 5.39
10.bountyyfi / lonkero
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
- websecurity
- appsec
- +14 more
+129 stars
from 970 · score 4.87
11.threat9 / routersploit
Exploitation Framework for Embedded Devices
+122 stars
from 13,161 · score 4.81
12.commixproject / commix
Automated Αll-in-One OS command injection exploitation tool.
- python
- command-injection
- detection
- exploitation
- pentesting
- vulnerability-scanner
- +4 more
+112 stars
from 5,785 · score 4.73
13.evilsocket / pwnagotchi
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
- ai
- deep-reinforcement-learning
- wpa-psk
- handshakes
- bettercap
- deep-learning
- +1 more
+110 stars
from 9,139 · score 4.71
14.ReversecLabs / drozer
The Leading Security Assessment Framework for Android.
- drozer
- android
- security
- pentesting
- java
- mobile
- +2 more
+79 stars
from 4,573 · score 4.38
15.m0nad / Diamorphine
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
- kernel-module
- security-tools
- +14 more
+77 stars
from 2,411 · score 4.36
16.JonathanSalwan / ROPgadget
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
- binary-exploitation
+63 stars
from 4,452 · score 4.16
+32 stars
from 1,304 · score 3.50
18.longld / peda
PEDA - Python Exploit Development Assistance for GDB
+29 stars
from 6,133 · score 3.40
19.EnableSecurity / sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
- svcrack
- svmap
- +6 more
+22 stars
from 1,091 · score 3.14
20.PowerShellMafia / PowerSploitArchived
PowerSploit - A PowerShell Post-Exploitation Framework
+18 stars
from 13,051 · score 2.94
21.ByteSnipers / mobile-pentest-toolkit
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
- android
- android-pentesting
- mobile
- mobile-pentest
- pentest-tool
- mobile-pentest-toolkit
- +2 more
+15 stars
from 85 · score 2.77
+8 stars
from 1,094 · score 2.20
23.NSAKEY / nsa-rules
Password cracking rules and masks for hashcat that I generated from cracked passwords.
+7 stars
from 567 · score 2.08
24.alphasoc / flightsim
A utility to safely generate malicious network traffic patterns and evaluate controls.
+6 stars
from 1,360 · score 1.95
+5 stars
from 2,305 · score 1.79
26.nesfit / fitcrack
A hashcat-based distributed password cracking system
+4 stars
from 174 · score 1.61
+4 stars
from 150 · score 1.61
28.jtesta / ssh-mitmArchived
SSH man-in-the-middle tool
- penetration-testing
- ssh
- mitm
- man-in-the-middle
- man-in-the-middle-attack
- hacking
+3 stars
from 1,738 · score 1.39
29.hashcat / princeprocessor
Standalone password candidate generator using the PRINCE algorithm
+3 stars
from 499 · score 1.39