1.edoardottt / awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
+223 stars
from 11,227 · score 5.41
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
12 repositories by Attention Score · Oct 4, 2026 – Nov 2, 2026 (UTC)
2.1N3 / Sn1per
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
+202 stars
from 11,308 · score 5.31
3.urbanadventurer / WhatWeb
Next generation web scanner
+110 stars
from 6,865 · score 4.71
4.infoslack / awesome-web-hacking
A list of web application security
+58 stars
from 7,279 · score 4.08
5.KuroLabs / stegcloak
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
+37 stars
from 3,895 · score 3.64
6.xxh / xxh
🚀 Bring your favorite shell wherever you go through the ssh. Xonsh shell, fish, zsh, osquery and so on.
+26 stars
from 6,099 · score 3.30
7.HightechSec / git-scanner
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
+4 stars
from 385 · score 1.61
8.EnableSecurity / sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
+3 stars
from 1,107 · score 1.39
9.Warxim / petep
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
+2 stars
from 231 · score 1.10
10.TryCatchHCF / DumpsterFire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
+1 stars
from 1,042 · score 0.69
11.ronin-rb / ronin
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
+1 stars
from 760 · score 0.69
12.0x742 / noia
[WIP] Simple mobile applications sandbox file browser tool. Powered with [frida.re](https://www.frida.re).
+1 stars
from 128 · score 0.69