1.vxcontrol / pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
+7,923 stars
from 25,020 · score 8.98
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
51 repositories by Attention Score · Oct 4, 2026 – Nov 2, 2026 (UTC)
2.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+7,236 stars
from 65,995 · score 8.89
3.Hack-with-Github / Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
+2,920 stars
from 121,419 · score 7.98
4.jiwoochris / artex-global
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
+2,546 stars
from 0 · score 7.84
5.KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
+2,429 stars
from 48,412 · score 7.80
6.mukul975 / Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
+1,790 stars
from 33,614 · score 7.49
7.swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+946 stars
from 81,338 · score 6.85
8.mdpsec / bug-bounty-hunting-prompts
Reusable prompts for a structured, evidence-first bug bounty hunting workflow
+749 stars
from 146 · score 6.62
9.Datalux / Osintgram
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
+639 stars
from 14,723 · score 6.46
10.GreyDGL / PentestGPT
Automated Penetration Testing Agentic Framework Powered by Large Language Models
+594 stars
from 15,638 · score 6.39
11.The-Art-of-Hacking / h4cker
This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org
+416 stars
from 29,570 · score 6.03
12.1N3 / Sn1per
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
+202 stars
from 11,308 · score 5.31
13.LINGYK352 / Watchtower
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
+186 stars
from 1 · score 5.23
14.qazbnm456 / awesome-web-security
🐶 A curated list of Web Security materials and resources.
+153 stars
from 13,830 · score 5.04
15.ZeroDayEvil / CVE-2026-75604-PoC
🛡 Official AI Security Tool module for CVE-2026-75604 (Next.js Windows Unauthenticated Remote Code Execution) with safe in-app execution, deep vulnerability validation, and DevSecOps-ready security auditing workflows.
+152 stars
from 26 · score 5.03
16.vanhauser-thc / thc-hydra
hydra
+144 stars
from 12,312 · score 4.98
17.maurosoria / dirsearch
Web path scanner
+133 stars
from 14,900 · score 4.90
18.vitalysim / Awesome-Hacking-Resources
A collection of hacking / penetration testing resources to make you better!
+130 stars
from 17,455 · score 4.88
19.urbanadventurer / WhatWeb
Next generation web scanner
+110 stars
from 6,865 · score 4.71
20.AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
+107 stars
from 6,314 · score 4.68
21.jakejarvis / awesome-shodan-queries
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
+88 stars
from 7,747 · score 4.49
22.sundowndev / hacker-roadmapArchived
A collection of hacking tools, resources and references to practice ethical hacking.
+73 stars
from 15,611 · score 4.30
23.infoslack / awesome-web-hacking
A list of web application security
+58 stars
from 7,279 · score 4.08
24.Ullaakut / cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
+53 stars
from 5,233 · score 3.99
25.FrancescoStabile / numasec
The AI Agent for Cyber Security.
+33 stars
from 796 · score 3.53
26.rmusser01 / Infosec_Reference
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
+32 stars
from 5,998 · score 3.50
27.momenbasel / htb-writeups
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
+32 stars
from 271 · score 3.50
28.guardicore / monkey
Infection Monkey - An open-source adversary emulation platform
+31 stars
from 7,088 · score 3.47
29.goshs-labs / goshs
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
+25 stars
from 983 · score 3.26
30.Hack-with-Github / Free-Security-eBooksArchived
Free Security and Hacking eBooks
+24 stars
from 4,993 · score 3.22
31.onlurking / awesome-infosec
A curated list of awesome infosec courses and training resources.
+22 stars
from 5,750 · score 3.14
32.coreb1t / awesome-pentest-cheat-sheetsArchived
Collection of the cheat sheets useful for pentesting
+21 stars
from 4,369 · score 3.09
33.codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
+16 stars
from 3,354 · score 2.83
34.PlumHound / PlumHound
Bloodhound Reporting for Blue and Purple Teams
+12 stars
from 1,322 · score 2.56
35.flipkart-incubator / Astra
Automated Security Testing For REST API's
+9 stars
from 2,665 · score 2.30
36.NodePassProject / nodepass
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
+9 stars
from 283 · score 2.30
37.bad-antics / nullkia
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
+9 stars
from 55 · score 2.30
38.engn33r / awesome-bluetooth-security
List of Bluetooth BR/EDR/LE security resources
+8 stars
from 615 · score 2.20
39.doyensec / inql
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
+6 stars
from 1,808 · score 1.95
40.sh4hin / Androl4b
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
+4 stars
from 1,172 · score 1.61
41.dolevf / graphql-cop
Security Auditor Utility for GraphQL APIs
+4 stars
from 693 · score 1.61
42.ddddddO / packemon
Packet monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux
+4 stars
from 307 · score 1.61
43.fabacab / awesome-pentest
:computer:⚔️ A collection of awesome penetration testing resources, tools, and other shiny things.
+4 stars
from 279 · score 1.61
44.jtesta / ssh-mitmArchived
SSH man-in-the-middle tool
+2 stars
from 1,739 · score 1.10
45.codingo / VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+2 stars
from 1,312 · score 1.10
46.fportantier / habu
Hacking Toolkit
+2 stars
from 990 · score 1.10
47.Warxim / petep
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
+2 stars
from 231 · score 1.10
48.cr0mll / cyberclopaedia
This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.
+2 stars
from 206 · score 1.10
49.Paradoxis / StegCrackerArchived
Steganography brute-force utility to uncover hidden data inside files
+1 stars
from 604 · score 0.69
50.evyatarmeged / stegextract
Detect hidden files and text in images
+1 stars
from 134 · score 0.69
51.HynekPetrak / sshame
brute force SSH public-key authentication
+1 stars
from 79 · score 0.69