1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+1,348 stars
from 71,883 · score 7.21
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
13 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.Hack-with-Github / Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
+711 stars
from 123,628 · score 6.57
3.opentrap / opentrap
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
+268 stars
from 504 · score 5.59
4.mdpsec / bug-bounty-hunting-prompts
Reusable prompts for a structured, evidence-first bug bounty hunting workflow
+131 stars
from 764 · score 4.88
5.dbx0 / executioner
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
+113 stars
from 0 · score 4.74
6.devploit / php2shell
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
+106 stars
from 161 · score 4.67
7.maurosoria / dirsearch
Web path scanner
+25 stars
from 15,008 · score 3.26
8.FrancescoStabile / numasec
The AI Agent for Cyber Security.
+8 stars
from 821 · score 2.20
9.nahamsec / Resources-for-Beginner-Bug-Bounty-Hunters
A list of resources for those interested in getting started in bug bounties
+7 stars
from 12,306 · score 2.08
10.momenbasel / keyFinder
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
+3 stars
from 727 · score 1.39
11.pry0cc / axiom
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
+2 stars
from 4,440 · score 1.10
12.B3nac / InjuredAndroidArchived
A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.
+1 stars
from 762 · score 0.69
13.EnableSecurity / awesome-rtc-hacking
a list of awesome resources related to security and hacking of VoIP, WebRTC and VoLTE
+1 stars
from 557 · score 0.69