1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+25,437 stars
from 47,794 · score 10.14
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
51 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.vxcontrol / pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
+11,671 stars
from 21,272 · score 9.36
3.mukul975 / Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
+8,447 stars
from 26,957 · score 9.04
4.Hack-with-Github / Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
+7,342 stars
from 116,997 · score 8.90
5.KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
+4,804 stars
from 46,037 · score 8.48
6.swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+2,888 stars
from 79,396 · score 7.97
7.GreyDGL / PentestGPT
Automated Penetration Testing Agentic Framework Powered by Large Language Models
+1,642 stars
from 14,590 · score 7.40
8.Datalux / Osintgram
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
+1,625 stars
from 13,737 · score 7.39
9.The-Art-of-Hacking / h4cker
This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org
+1,307 stars
from 28,679 · score 7.18
10.1N3 / Sn1per
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
+848 stars
from 10,662 · score 6.74
11.maurosoria / dirsearch
Web path scanner
+529 stars
from 14,504 · score 6.27
12.vanhauser-thc / thc-hydra
hydra
+404 stars
from 12,052 · score 6.00
13.AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
+386 stars
from 6,035 · score 5.96
14.qazbnm456 / awesome-web-security
🐶 A curated list of Web Security materials and resources.
+381 stars
from 13,602 · score 5.95
15.FrancescoStabile / numasec
The AI Agent for Cyber Security.
+375 stars
from 454 · score 5.93
16.vitalysim / Awesome-Hacking-Resources
A collection of hacking / penetration testing resources to make you better!
+351 stars
from 17,234 · score 5.86
17.jakejarvis / awesome-shodan-queries
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
+271 stars
from 7,564 · score 5.61
18.urbanadventurer / WhatWeb
Next generation web scanner
+235 stars
from 6,740 · score 5.46
19.sundowndev / hacker-roadmapArchived
A collection of hacking tools, resources and references to practice ethical hacking.
+213 stars
from 15,471 · score 5.37
20.Ullaakut / cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
+168 stars
from 5,118 · score 5.13
21.infoslack / awesome-web-hacking
A list of web application security
+146 stars
from 7,191 · score 4.99
22.momenbasel / htb-writeups
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
+117 stars
from 186 · score 4.77
23.Hack-with-Github / Free-Security-eBooksArchived
Free Security and Hacking eBooks
+78 stars
from 4,939 · score 4.37
24.guardicore / monkey
Infection Monkey - An open-source adversary emulation platform
+75 stars
from 7,044 · score 4.33
25.onlurking / awesome-infosec
A curated list of awesome infosec courses and training resources.
+75 stars
from 5,697 · score 4.33
26.goshs-labs / goshs
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
+74 stars
from 934 · score 4.32
27.rmusser01 / Infosec_Reference
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
+61 stars
from 5,969 · score 4.13
28.codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
+56 stars
from 3,314 · score 4.04
29.coreb1t / awesome-pentest-cheat-sheetsArchived
Collection of the cheat sheets useful for pentesting
+44 stars
from 4,346 · score 3.81
30.bad-antics / nullkia
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
+32 stars
from 32 · score 3.50
31.PlumHound / PlumHound
Bloodhound Reporting for Blue and Purple Teams
+30 stars
from 1,304 · score 3.43
32.flipkart-incubator / Astra
Automated Security Testing For REST API's
+26 stars
from 2,648 · score 3.30
33.NodePassProject / nodepass
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
+25 stars
from 267 · score 3.26
34.doyensec / inql
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
+22 stars
from 1,792 · score 3.14
35.dolevf / graphql-cop
Security Auditor Utility for GraphQL APIs
+16 stars
from 681 · score 2.83
36.engn33r / awesome-bluetooth-security
List of Bluetooth BR/EDR/LE security resources
+14 stars
from 609 · score 2.71
37.bad-antics / nullsec-linux
🐧 Security-focused Linux distribution with 140+ tools, custom kernel 6.17.13, AI assistant | 5 editions | Cloud, AI/ML, Automotive, Hardware hacking
+12 stars
from 73 · score 2.56
38.codingo / VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+11 stars
from 1,303 · score 2.48
39.sh4hin / Androl4b
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
+11 stars
from 1,165 · score 2.48
40.fportantier / habu
Hacking Toolkit
+10 stars
from 982 · score 2.40
41.ddddddO / packemon
Packet monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux
+7 stars
from 304 · score 2.08
42.fabacab / awesome-pentest
:computer:⚔️ A collection of awesome penetration testing resources, tools, and other shiny things.
+6 stars
from 277 · score 1.95
43.Paradoxis / StegCrackerArchived
Steganography brute-force utility to uncover hidden data inside files
+4 stars
from 601 · score 1.61
44.Warxim / petep
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
+4 stars
from 229 · score 1.61
45.jtesta / ssh-mitmArchived
SSH man-in-the-middle tool
+3 stars
from 1,738 · score 1.39
46.cr0mll / cyberclopaedia
This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.
+2 stars
from 206 · score 1.10
47.evyatarmeged / stegextract
Detect hidden files and text in images
+2 stars
from 133 · score 1.10
48.HynekPetrak / sshame
brute force SSH public-key authentication
+2 stars
from 78 · score 1.10
49.jordanpotti / AWSBucketDump
Security Tool to Look For Interesting Files in S3 Buckets
+1 stars
from 1,468 · score 0.69
50.brannondorsey / whonow
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
+1 stars
from 657 · score 0.69
51.SababaSec / ctf-writeups
Capture The Flag competition challenge write-ups
+1 stars
from 23 · score 0.69