1.swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+220 stars
from 82,064 · score 5.40
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
11 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
+184 stars
from 38,714 · score 5.22
3.chaitin / SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
+183 stars
from 22,957 · score 5.21
4.The-Art-of-Hacking / h4cker
This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org
+75 stars
from 29,911 · score 4.33
5.anchore / grype
A vulnerability scanner for container images and filesystems
+48 stars
from 13,107 · score 3.89
6.Hacker0x01 / hacker101
Source code for Hacker101.com - a free online web and mobile security class.
+26 stars
from 14,589 · score 3.30
7.infoslack / awesome-web-hacking
A list of web application security
+8 stars
from 7,329 · score 2.20
8.Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
+7 stars
from 2,772 · score 2.08
9.chaitin / xray
一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
+5 stars
from 11,770 · score 1.79
10.Bo0oM / fuzz.txt
Potentially dangerous files
+3 stars
from 3,402 · score 1.39
11.nccgroup / singularity
A DNS rebinding attack framework.
+3 stars
from 1,321 · score 1.39