101.brannondorsey / naive-hashcat
Crack password hashes without the fuss :cat2:
+6 stars
from 1,423 · score 1.95
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
101–171 of 171 by Attention Score · Oct 6, 2026 – Nov 4, 2026 (UTC)
+6 stars
from 1,319 · score 1.95
103.khast3x / Redcloud
Automated Red Team Infrastructure deployement using Docker
+6 stars
from 1,274 · score 1.95
104.EnableSecurity / sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
- svcrack
- svmap
- +6 more
+6 stars
from 1,107 · score 1.95
105.RaffaDNDM / HacknDroid
Automation of some MAPT activities and interaction with the mobile Android device.
- android-analysis
- frida
- mobile-hacking
- mobile-penetration-testing
- mobile-pentest
- mobile-pentest-toolkit
- +3 more
+6 stars
from 178 · score 1.95
106.mgeeky / ProtectMyTooling
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
+5 stars
from 1,101 · score 1.79
+5 stars
from 1,037 · score 1.79
108.Aegrah / PANIX
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
+5 stars
from 890 · score 1.79
109.RoganDawes / P4wnP1
P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
+4 stars
from 4,383 · score 1.61
110.GoSecure / pyrdp
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
+4 stars
from 1,784 · score 1.61
+4 stars
from 1,098 · score 1.61
112.nil0x42 / duplicut
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
+4 stars
from 981 · score 1.61
113.Gui774ume / ebpfkit
ebpfkit is a rootkit powered by eBPF
- ebpf
- security
- rootkit
- linux
- linux-kernel
- linux-kernel-hacking
- +2 more
+4 stars
from 862 · score 1.61
114.stealthsploit / OneRuleToRuleThemStill
A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule
+4 stars
from 664 · score 1.61
115.WangYihang / Webshell-Sniper
:hammer: Manage your website via terminal
- php
- security-tools
- python
- pentest
- webshell-sniper
- webshell
+4 stars
from 422 · score 1.61
116.AristoChen / usb-proxy
A USB proxy based on raw-gadget and libusb
- usb
- proxy
- libusb
- otg
- raspberry-pi
- usb-otg
- +7 more
+4 stars
from 286 · score 1.61
117.omar2535 / GraphQLer
🔍A cutting edge context aware GraphQL API fuzzing tool!
- api-testing-framework
- graphql
- api
- automated-testing
- cybersecurity
- pentesting
- +3 more
+4 stars
from 171 · score 1.61
+4 stars
from 150 · score 1.61
119.samyk / poisontap
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
+3 stars
from 6,479 · score 1.39
120.SpiderLabs / ResponderArchived
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
+3 stars
from 4,888 · score 1.39
121.evilcos / xssor2
XSS'OR - Hack with JavaScript.
- probe
- pentest-tool
- xss
- csrf
- encoding
- hacking-tool
- +2 more
+3 stars
from 2,215 · score 1.39
122.0xInfection / TIDoS-Framework
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
- web-fuzzer
- osint
- +7 more
+3 stars
from 1,866 · score 1.39
123.bee-san / Name-That-Hash
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
+3 stars
from 1,670 · score 1.39
124.0xInfection / XSRFProbe
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
- csrf-scanner
- crafted-tokens
- +5 more
+3 stars
from 1,305 · score 1.39
125.uber-common / metta
An information security preparedness tool to do adversarial simulation.
- uber
- vagrant
- yaml
- celery
- python
- redis
- +7 more
+3 stars
from 1,145 · score 1.39
+3 stars
from 937 · score 1.39
+3 stars
from 897 · score 1.39
128.akamai-threat-research / mqtt-pwn
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- python
- mqtt
- mqtt-broker
- mqtt-client
- iot
- exploitation
- +1 more
+3 stars
from 453 · score 1.39
129.kpcyrd / authoscope
Scriptable network authentication cracker
- rust
- cracking
- lua
- dictionary-attack
- concurrency
- password
- +2 more
+3 stars
from 419 · score 1.39
130.Warxim / petep
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
- proxy
- tcp
- tcp-proxy
- penetration-testing
- hacking
- security
- +14 more
+3 stars
from 231 · score 1.39
131.ByteSnipers / mobile-pentest-toolkit
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
- android
- android-pentesting
- mobile
- mobile-pentest
- pentest-tool
- mobile-pentest-toolkit
- +2 more
+3 stars
from 97 · score 1.39
132.andresriancho / w3af
w3af: web application attack and audit framework, the open source web vulnerability scanner.
+2 stars
from 4,908 · score 1.10
+2 stars
from 1,898 · score 1.10
134.jtesta / ssh-mitmArchived
SSH man-in-the-middle tool
- penetration-testing
- ssh
- mitm
- man-in-the-middle
- man-in-the-middle-attack
- hacking
+2 stars
from 1,739 · score 1.10
+2 stars
from 1,223 · score 1.10
136.nccgroup / featherduster
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
- crypto
- cryptography
- encryption
- security
- python
- cryptanalysis
- +4 more
+2 stars
from 1,139 · score 1.10
137.Abacus-Group-RTO / legionArchived
Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
+2 stars
from 1,053 · score 1.10
138.fportantier / habu
Hacking Toolkit
- network-analysis
- networking
- scapy
- python3
- security-tools
- hacking
- +9 more
+2 stars
from 990 · score 1.10
139.ReversecLabs / dref
DNS Rebinding Exploitation Framework
- dns-rebinding
- red-team
- hacking
- web-hacking
- browser-hacking
- pentesting
- +3 more
+2 stars
from 494 · score 1.10
140.moyix / creddump
Automatically exported from code.google.com/p/creddump
+2 stars
from 288 · score 1.10
141.KishanBagaria / padding-oracle-attacker
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
- padding-oracle
- aes
- decryption
- encryption
- cipher-block-chaining
- cbc
- +4 more
+2 stars
from 219 · score 1.10
142.NotSoSecure / android_application_analyzer
The tool is used to analyze the content of the android application in local storage.
+2 stars
from 175 · score 1.10
143.tp7309 / TTPassGen
TranslatedPassword generation tool: flexible and scriptable password dictionary generator which can support brute-force, combination, complex rule mode etc...
- password-generator
- password-dictionaries
- wordlist-generator
- brute-force
- crunch
- password
- +5 more
+2 stars
from 168 · score 1.10
144.byt3bl33d3r / SILENTTRINITYArchived
An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
- security-tools
- c-sharp
- dotnet
- ironpython
- python3
- red-teams
- +4 more
+1 stars
from 2,346 · score 0.69
145.trustedsec / hate_crack
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
+1 stars
from 1,864 · score 0.69
+1 stars
from 1,734 · score 0.69
147.taviso / ctftool
Interactive CTF Exploration Tool
- security
- reverse-engineering
- windows
- windows-internals
+1 stars
from 1,668 · score 0.69
148.praetorian-inc / Hob0RulesArchived
Password cracking rules for Hashcat based on statistics and industry patterns
+1 stars
from 1,529 · score 0.69
149.jordanpotti / AWSBucketDump
Security Tool to Look For Interesting Files in S3 Buckets
- s3-bucket
- penetration-testing
- bugbounty
- enumeration
+1 stars
from 1,470 · score 0.69
150.alphasoc / flightsim
A utility to safely generate malicious network traffic patterns and evaluate controls.
+1 stars
from 1,365 · score 0.69
151.iagox86 / hash_extender
The repository host gives no description.
+1 stars
from 1,212 · score 0.69
152.r3nt0n / bopscrk
Generate smart and powerful wordlists
- wordlist
- password
- hacking-tool
- password-cracking
- wordlist-generator
- cracking
- +13 more
+1 stars
from 1,122 · score 0.69
153.bountyyfi / lonkero
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
- websecurity
- appsec
- +14 more
+1 stars
from 1,098 · score 0.69
154.TryCatchHCF / DumpsterFire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
+1 stars
from 1,043 · score 0.69
155.mxrch / penglab
🐧 Abuse of Google Colab for cracking hashes.
+1 stars
from 977 · score 0.69
156.mesquidar / adbsploitArchived
A python based tool for exploiting and managing Android devices via ADB
+1 stars
from 904 · score 0.69
157.seemoo-lab / internalblue
Bluetooth experimentation framework for Broadcom and Cypress chips.
+1 stars
from 791 · score 0.69
158.GoSecure / dtd-finder
List DTDs and generate XXE payloads using those local DTDs.
- xxe
- dtd
- security
- hacktoberfest
+1 stars
from 664 · score 0.69
159.Paradoxis / StegCrackerArchived
Steganography brute-force utility to uncover hidden data inside files
- steghide
- steganography
- ctf-tools
- ctf
- brute-force
- stegcracker
- +2 more
+1 stars
from 604 · score 0.69
160.NSAKEY / nsa-rules
Password cracking rules and masks for hashcat that I generated from cracked passwords.
+1 stars
from 573 · score 0.69
161.hashcat / maskprocessor
High-Performance word generator with a per-position configureable charset
+1 stars
from 514 · score 0.69
162.andreiverse / gorilla
tool for generating wordlists or extending an existing one using mutations.
+1 stars
from 390 · score 0.69
163.Samsung / cotopaxi
Set of tools for security testing of Internet of Things devices using specific network IoT protocols
+1 stars
from 362 · score 0.69
164.linuz / Sticky-Keys-Slayer
Scans for accessibility tools backdoors via RDP
+1 stars
from 348 · score 0.69
165.gsmith257-cyber / GraphCrawlerArchived
GraphQL automated security testing toolkit
- api
- automated-testing
- cybersecurity
- graphql
- graphql-api
- pentesting
- +2 more
+1 stars
from 334 · score 0.69
166.sp00ks-git / hat
HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems
+1 stars
from 309 · score 0.69
167.drego85 / JoomlaScan
A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.
+1 stars
from 265 · score 0.69
168.pralab / secml_malware
Create adversarial attacks against machine learning Windows malware detectors
- adversarial-machine-learning
- infosec
- python
- attack
- machine-learning
- security
+1 stars
from 252 · score 0.69
169.n0kovo / hashcat-rules-collection
Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.
- hashcat
- hashcat-rules
- hashcat-rule
- password-cracking
- password-cracking-tool
- wordlist-generator
- +2 more
+1 stars
from 173 · score 0.69
170.philsmd / itunes_backup2hashcat
Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
+1 stars
from 123 · score 0.69
171.padok-team / cognito-scanner
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
- security-tools
+1 stars
from 112 · score 0.69