+20 stars
from 1,305 · score 3.04
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
101–193 of 193 by Attention Score · Aug 7, 2026 – Nov 4, 2026 (UTC)
102.brannondorsey / naive-hashcat
Crack password hashes without the fuss :cat2:
+19 stars
from 1,410 · score 3.00
103.noraj / haiti
:key: Hash type identifier (CLI & lib)
- security-tools
- hash
- identify
- digest
- hashing
- security
- +14 more
+19 stars
from 992 · score 3.00
104.Aegrah / PANIX
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
+19 stars
from 876 · score 3.00
105.stealthsploit / OneRuleToRuleThemStill
A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule
+19 stars
from 649 · score 3.00
106.PowerShellMafia / PowerSploitArchived
PowerSploit - A PowerShell Post-Exploitation Framework
+18 stars
from 13,051 · score 2.94
107.bee-san / Name-That-Hash
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
+18 stars
from 1,655 · score 2.94
108.RoganDawes / P4wnP1
P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
+17 stars
from 4,370 · score 2.89
109.kost / dvcs-ripper
Rip web accessible (distributed) version control systems: SVN/GIT/HG...
+17 stars
from 1,775 · score 2.89
110.GoSecure / pyrdp
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
+17 stars
from 1,771 · score 2.89
+17 stars
from 861 · score 2.89
112.mgeeky / ProtectMyTooling
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
+16 stars
from 1,090 · score 2.83
113.RaffaDNDM / HacknDroid
Automation of some MAPT activities and interaction with the mobile Android device.
- android-analysis
- frida
- mobile-hacking
- mobile-penetration-testing
- mobile-pentest
- mobile-pentest-toolkit
- +3 more
+16 stars
from 168 · score 2.83
114.Gui774ume / ebpfkit
ebpfkit is a rootkit powered by eBPF
- ebpf
- security
- rootkit
- linux
- linux-kernel
- linux-kernel-hacking
- +2 more
+15 stars
from 851 · score 2.77
115.AristoChen / usb-proxy
A USB proxy based on raw-gadget and libusb
- usb
- proxy
- libusb
- otg
- raspberry-pi
- usb-otg
- +7 more
+15 stars
from 275 · score 2.77
116.ByteSnipers / mobile-pentest-toolkit
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
- android
- android-pentesting
- mobile
- mobile-pentest
- pentest-tool
- mobile-pentest-toolkit
- +2 more
+15 stars
from 85 · score 2.77
117.0xInfection / XSRFProbe
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
- csrf-scanner
- crafted-tokens
- +5 more
+14 stars
from 1,294 · score 2.71
118.r3nt0n / bopscrk
Generate smart and powerful wordlists
- wordlist
- password
- hacking-tool
- password-cracking
- wordlist-generator
- cracking
- +13 more
+12 stars
from 1,111 · score 2.56
119.e-ago / bitcracker
BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
- bitlocker
- password-cracker
- cuda
- cryptography
- gpgpu
- windows
- +10 more
+12 stars
from 964 · score 2.56
120.mesquidar / adbsploitArchived
A python based tool for exploiting and managing Android devices via ADB
+12 stars
from 893 · score 2.56
+12 stars
from 888 · score 2.56
122.EmpireProject / EmpireArchived
Empire is a PowerShell and Python post-exploitation agent.
+11 stars
from 7,837 · score 2.48
123.hashcat / maskprocessor
High-Performance word generator with a per-position configureable charset
+11 stars
from 504 · score 2.48
124.byt3bl33d3r / SILENTTRINITYArchived
An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
- security-tools
- c-sharp
- dotnet
- ironpython
- python3
- red-teams
- +4 more
+10 stars
from 2,337 · score 2.40
125.fportantier / habu
Hacking Toolkit
- network-analysis
- networking
- scapy
- python3
- security-tools
- hacking
- +9 more
+10 stars
from 982 · score 2.40
126.nil0x42 / duplicut
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
+10 stars
from 975 · score 2.40
127.n0kovo / hashcat-rules-collection
Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.
- hashcat
- hashcat-rules
- hashcat-rule
- password-cracking
- password-cracking-tool
- wordlist-generator
- +2 more
+10 stars
from 164 · score 2.40
128.0xInfection / TIDoS-Framework
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
- web-fuzzer
- osint
- +7 more
+9 stars
from 1,860 · score 2.30
129.khast3x / Redcloud
Automated Red Team Infrastructure deployement using Docker
+9 stars
from 1,271 · score 2.30
130.seemoo-lab / internalblue
Bluetooth experimentation framework for Broadcom and Cypress chips.
+9 stars
from 783 · score 2.30
131.ronin-rb / ronin
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
+9 stars
from 752 · score 2.30
132.SpiderLabs / ResponderArchived
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
+8 stars
from 4,883 · score 2.20
+8 stars
from 1,094 · score 2.20
134.TryCatchHCF / DumpsterFire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
+8 stars
from 1,036 · score 2.20
135.ReversecLabs / leonidas
Automated Attack Simulation in the Cloud, complete with detection use cases.
+8 stars
from 612 · score 2.20
136.akamai-threat-research / mqtt-pwn
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- python
- mqtt
- mqtt-broker
- mqtt-client
- iot
- exploitation
- +1 more
+8 stars
from 448 · score 2.20
137.evilcos / xssor2
XSS'OR - Hack with JavaScript.
- probe
- pentest-tool
- xss
- csrf
- encoding
- hacking-tool
- +2 more
+7 stars
from 2,211 · score 2.08
+7 stars
from 1,218 · score 2.08
139.iagox86 / hash_extender
The repository host gives no description.
+7 stars
from 1,206 · score 2.08
+7 stars
from 1,035 · score 2.08
141.mxrch / penglab
🐧 Abuse of Google Colab for cracking hashes.
+7 stars
from 971 · score 2.08
142.NSAKEY / nsa-rules
Password cracking rules and masks for hashcat that I generated from cracked passwords.
+7 stars
from 567 · score 2.08
143.drego85 / JoomlaScan
A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.
+7 stars
from 259 · score 2.08
144.pralab / secml_malware
Create adversarial attacks against machine learning Windows malware detectors
- adversarial-machine-learning
- infosec
- python
- attack
- machine-learning
- security
+7 stars
from 246 · score 2.08
145.alphasoc / flightsim
A utility to safely generate malicious network traffic patterns and evaluate controls.
+6 stars
from 1,360 · score 1.95
146.uber-common / metta
An information security preparedness tool to do adversarial simulation.
- uber
- vagrant
- yaml
- celery
- python
- redis
- +7 more
+6 stars
from 1,142 · score 1.95
147.nccgroup / featherduster
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
- crypto
- cryptography
- encryption
- security
- python
- cryptanalysis
- +4 more
+6 stars
from 1,135 · score 1.95
148.kpcyrd / authoscope
Scriptable network authentication cracker
- rust
- cracking
- lua
- dictionary-attack
- concurrency
- password
- +2 more
+6 stars
from 416 · score 1.95
149.omar2535 / GraphQLer
🔍A cutting edge context aware GraphQL API fuzzing tool!
- api-testing-framework
- graphql
- api
- automated-testing
- cybersecurity
- pentesting
- +3 more
+6 stars
from 169 · score 1.95
+5 stars
from 2,305 · score 1.79
+5 stars
from 1,730 · score 1.79
152.kaonashi-passwords / Kaonashi
Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
- wordlist
- password
- password-strength
- password-safety
- dictionary-attack
- dictionary
- +10 more
+5 stars
from 1,095 · score 1.79
153.moyix / creddump
Automatically exported from code.google.com/p/creddump
+5 stars
from 285 · score 1.79
154.Warxim / petep
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
- proxy
- tcp
- tcp-proxy
- penetration-testing
- hacking
- security
- +14 more
+5 stars
from 229 · score 1.79
155.KishanBagaria / padding-oracle-attacker
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
- padding-oracle
- aes
- decryption
- encryption
- cipher-block-chaining
- cbc
- +4 more
+5 stars
from 216 · score 1.79
156.philsmd / itunes_backup2hashcat
Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat
+5 stars
from 119 · score 1.79
+4 stars
from 936 · score 1.61
158.GoSecure / dtd-finder
List DTDs and generate XXE payloads using those local DTDs.
- xxe
- dtd
- security
- hacktoberfest
+4 stars
from 661 · score 1.61
159.c6fc / npk
A mostly-serverless distributed hash cracking platform
+4 stars
from 657 · score 1.61
160.hashcat / kwprocessor
Advanced keyboard-walk generator with configureable basechars, keymap and routes
+4 stars
from 607 · score 1.61
161.Paradoxis / StegCrackerArchived
Steganography brute-force utility to uncover hidden data inside files
- steghide
- steganography
- ctf-tools
- ctf
- brute-force
- stegcracker
- +2 more
+4 stars
from 601 · score 1.61
162.WangYihang / Webshell-Sniper
:hammer: Manage your website via terminal
- php
- security-tools
- python
- pentest
- webshell-sniper
- webshell
+4 stars
from 422 · score 1.61
163.nxenon / h2spacex
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
- http2
- race-condition
- race-conditions
- scapy
- single-packet-attack
- last-frame-synchronization
+4 stars
from 225 · score 1.61
164.nesfit / fitcrack
A hashcat-based distributed password cracking system
+4 stars
from 174 · score 1.61
+4 stars
from 150 · score 1.61
166.Banaanhangwagen / WINHELLO2hashcat
The repository host gives no description.
+4 stars
from 86 · score 1.61
167.jtesta / ssh-mitmArchived
SSH man-in-the-middle tool
- penetration-testing
- ssh
- mitm
- man-in-the-middle
- man-in-the-middle-attack
- hacking
+3 stars
from 1,738 · score 1.39
168.taviso / ctftool
Interactive CTF Exploration Tool
- security
- reverse-engineering
- windows
- windows-internals
+3 stars
from 1,666 · score 1.39
169.jordanpotti / AWSBucketDump
Security Tool to Look For Interesting Files in S3 Buckets
- s3-bucket
- penetration-testing
- bugbounty
- enumeration
+3 stars
from 1,468 · score 1.39
170.dark-lbp / isfArchived
ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python
- ics
- ics-exp
- ics-poc
- scapy
- isf
- modbus
- +3 more
+3 stars
from 1,105 · score 1.39
171.Abacus-Group-RTO / legionArchived
Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
+3 stars
from 1,052 · score 1.39
172.LewisArdern / bXSS
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
- xss
- bxss
- security
- bugbounty
- blueteam
- cross-site-scripting
- +1 more
+3 stars
from 575 · score 1.39
173.hashcat / princeprocessor
Standalone password candidate generator using the PRINCE algorithm
+3 stars
from 499 · score 1.39
+3 stars
from 497 · score 1.39
175.clem9669 / hashcat-rule
Rule for hashcat or john. Aiming to crack how people generate their password
- hashcat
- hashcat-rules
- john
- john-rules
- hashcat-rule
+3 stars
from 470 · score 1.39
176.hashview / hashview
A web front-end for password cracking and analytics
- python
- hashcat
- web
- flask
- analytics
- distributed
+3 stars
from 397 · score 1.39
177.appknox / AFE
Android Framework for Exploitation, is a framework for exploiting android based devices
+3 stars
from 203 · score 1.39
178.tp7309 / TTPassGen
TranslatedPassword generation tool: flexible and scriptable password dictionary generator which can support brute-force, combination, complex rule mode etc...
- password-generator
- password-dictionaries
- wordlist-generator
- brute-force
- crunch
- password
- +5 more
+3 stars
from 167 · score 1.39
179.timbo05sec / autocrack
Hashcat wrapper to help automate the cracking process
+3 stars
from 126 · score 1.39
180.praetorian-inc / Hob0RulesArchived
Password cracking rules for Hashcat based on statistics and industry patterns
+2 stars
from 1,528 · score 1.10
181.brannondorsey / dns-rebind-toolkit
A front-end JavaScript toolkit for creating DNS rebinding attacks.
+2 stars
from 502 · score 1.10
182.ReversecLabs / dref
DNS Rebinding Exploitation Framework
- dns-rebinding
- red-team
- hacking
- web-hacking
- browser-hacking
- pentesting
- +3 more
+2 stars
from 494 · score 1.10
183.ctxis / crackerjack
CrackerJack / Hashcat Web Interface / Context Information Security
+2 stars
from 378 · score 1.10
184.Samsung / cotopaxi
Set of tools for security testing of Internet of Things devices using specific network IoT protocols
+2 stars
from 361 · score 1.10
185.linuz / Sticky-Keys-Slayer
Scans for accessibility tools backdoors via RDP
+2 stars
from 347 · score 1.10
186.gsmith257-cyber / GraphCrawlerArchived
GraphQL automated security testing toolkit
- api
- automated-testing
- cybersecurity
- graphql
- graphql-api
- pentesting
- +2 more
+2 stars
from 333 · score 1.10
187.NotSoSecure / android_application_analyzer
The tool is used to analyze the content of the android application in local storage.
+2 stars
from 175 · score 1.10
188.brannondorsey / whonow
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
- dns
- dns-rebinding
- hacking
- malicious-domains
- nodejs
- penetration-testing
- +2 more
+1 stars
from 657 · score 0.69
189.sp00ks-git / hat
HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems
+1 stars
from 309 · score 0.69
190.Orange-Cyberdefense / fenrir-ocd
The repository host gives no description.
+1 stars
from 240 · score 0.69
+1 stars
from 228 · score 0.69
192.padok-team / cognito-scanner
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
- security-tools
+1 stars
from 112 · score 0.69
193.Zigrin-Security / CakeFuzzer
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
- sast
+1 stars
from 104 · score 0.69