1.swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+220 stars
from 82,064 · score 5.40
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
20 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.urbanadventurer / WhatWeb
Next generation web scanner
+62 stars
from 6,913 · score 4.14
3.qeeqbox / social-analyzer
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
+49 stars
from 24,375 · score 3.91
4.horsicq / Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.
+41 stars
from 11,802 · score 3.74
5.vanhauser-thc / thc-hydra
hydra
+39 stars
from 12,417 · score 3.69
6.Mr-Destroyer / ZimZilla
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
+25 stars
from 215 · score 3.26
7.thomasunise / argus
Open-source agentic security operations platform:
+22 stars
from 96 · score 3.14
8.sensepost / objection
📱 objection - runtime mobile exploration
+19 stars
from 9,460 · score 3.00
9.sundowndev / hacker-roadmapArchived
A collection of hacking tools, resources and references to practice ethical hacking.
+14 stars
from 15,670 · score 2.71
10.momenbasel / htb-writeups
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
+11 stars
from 292 · score 2.48
11.nahamsec / Resources-for-Beginner-Bug-Bounty-Hunters
A list of resources for those interested in getting started in bug bounties
+7 stars
from 12,306 · score 2.08
12.onlurking / awesome-infosec
A curated list of awesome infosec courses and training resources.
+7 stars
from 5,765 · score 2.08
13.coreb1t / awesome-pentest-cheat-sheetsArchived
Collection of the cheat sheets useful for pentesting
+4 stars
from 4,386 · score 1.61
14.christophetd / CloudFlair
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
+3 stars
from 2,981 · score 1.39
15.noraj / haiti
:key: Hash type identifier (CLI & lib)
+3 stars
from 1,007 · score 1.39
16.m0nad / Diamorphine
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
+2 stars
from 2,485 · score 1.10
17.WangYihang / Webshell-Sniper
:hammer: Manage your website via terminal
+2 stars
from 424 · score 1.10
18.lanjelot / patator
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
+1 stars
from 3,938 · score 0.69
19.evilcos / xssor2
XSS'OR - Hack with JavaScript.
+1 stars
from 2,217 · score 0.69
20.Warxim / petep
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
+1 stars
from 232 · score 0.69