1.swisskyrepo / PayloadsAllTheThingsA list of useful payloads and bypass for Web Application Security and Pentest/CTFpentestpayloadbypassweb-applicationhackingvulnerability+11 morePythonMIT82K total18K forks+220 starsfrom 82,064 · score 5.40
2.owasp-amass / amassIn-depth attack surface mapping and asset discoverygodnssubdomainenumerationreconosint+7 moreGoOther license15K total2.2K forks+31 starsfrom 15,418 · score 3.47
3.peass-ng / PEASS-ngPEASS - Privilege Escalation Awesome Scripts SUITE (with colors)enumerationlinuxunixbashshellscript+13 moreC#Other license21K total3.4K forks+28 starsfrom 20,718 · score 3.37
4.maurosoria / dirsearchWeb path scannerfuzzerfuzzingpythonsecuritydirsearchhacking+14 morePythonNo license15K total2.5K forks+25 starsfrom 15,008 · score 3.26
5.evyatarmeged / RaccoonA high performance offensive security tool for reconnaissance and vulnerability scanningreconnaissancescannervulnerability-assessmentvulnerability-scannerenumerationpentesting+9 morePythonMIT4.1K total500 forks+5 starsfrom 4,059 · score 1.79
6.codingo / NoSQLMapAutomated NoSQL database enumeration and web application exploitation tool.nosqlnosql-databasespenetration-testingscannersecurity-auditsecurity-tools+14 morePythonGPL-3.03.4K total627 forks+4 starsfrom 3,366 · score 1.61