1.1N3 / Sn1per
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
+1,826 stars
from 9,684 · score 7.51
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
11 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
2.edoardottt / awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
+958 stars
from 10,492 · score 6.87
3.infoslack / awesome-web-hacking
A list of web application security
+575 stars
from 6,762 · score 6.36
4.urbanadventurer / WhatWeb
Next generation web scanner
+445 stars
from 6,530 · score 6.10
5.xxh / xxh
🚀 Bring your favorite shell wherever you go through the ssh. Xonsh shell, fish, zsh, osquery and so on.
+170 stars
from 5,955 · score 5.14
6.KuroLabs / stegcloak
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
+158 stars
from 3,774 · score 5.07
7.EnableSecurity / sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
+41 stars
from 1,069 · score 3.74
8.ronin-rb / ronin
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
+19 stars
from 742 · score 3.00
9.HightechSec / git-scanner
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
+14 stars
from 375 · score 2.71
10.TryCatchHCF / DumpsterFire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
+11 stars
from 1,032 · score 2.48
11.Warxim / petep
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
+8 stars
from 225 · score 2.20