All projects
Repositories in this selection 47 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Sswisskyrepo / PayloadsAllTheThingsA list of useful payloads and bypass for Web Application Security and Pentest/CTFPythonMIT · PermissiveInsufficient rank history82,31517,558——2026-10-30
2—Mmaurosoria / dirsearchWeb path scannerPythonUnknown · Restricted / unknownInsufficient rank history15,0342,462——2026-11-01
3—Pprojectdiscovery / subfinderFast passive subdomain enumeration tool.GoMIT · PermissiveInsufficient rank history14,7061,643——2026-11-02
4—Pprojectdiscovery / nuclei-templatesCommunity curated list of templates for the nuclei engine to find security vulnerabilities.JavaScriptMIT · PermissiveInsufficient rank history13,2753,733——2026-11-02
5—Ddstotijn / hettyAn HTTP toolkit for security research.GoMIT · PermissiveInsufficient rank history12,530826——2026-07-21
6—Nnahamsec / Resources-for-Beginner-Bug-Bounty-HuntersA list of resources for those interested in getting started in bug bountiesUnknownUnknown · Restricted / unknownInsufficient rank history12,3122,053——2024-07-23
7—Eedoardottt / awesome-hacker-search-enginesA curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and moreShellMIT · PermissiveInsufficient rank history11,4581,116——2026-11-02
8—Bblacklanternsecurity / bbotThe recursive internet scanner for hackers. 🧡PythonAGPL-3.0 · Share derivative sourceInsufficient rank history10,916963——2026-11-02
9—Pprojectdiscovery / httpxhttpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.GoMIT · PermissiveInsufficient rank history10,5721,118——2026-11-02
10—OOWASP / wstgThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.CSSCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history10,1791,730——2026-11-01
11—Sshmilylty / OneForAllOneForAll is a powerful subdomain collection toolPythonGPL-3.0 · Share derivative sourceInsufficient rank history10,1321,438——2026-11-02
12—Yyogeshojha / renginereNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.HTMLGPL-3.0 · Share derivative sourceInsufficient rank history8,9121,346——2026-10-31
13—Ssix2dez / reconftwAuthor description: reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilitiesShellMIT · PermissiveInsufficient rank history8,3261,264——2026-11-02
14—KKathanP19 / HowToHuntCollection of methodology and test case for various web vulnerabilities.UnknownGPL-3.0 · Share derivative sourceInsufficient rank history7,3791,980——2026-10-22
15—Ddaffainfo / AllAboutBugBountyAll about bug bounty (bypasses, payloads, and etc)UnknownUnknown · Restricted / unknownInsufficient rank history6,9571,270——2023-09-08
16—Iihebski / DefaultCreds-cheat-sheetOne place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️PythonMIT · PermissiveInsufficient rank history6,813787——2026-09-27
17—Rreddelexc / hackerone-reportsTop disclosed reports from HackerOnePythonUnknown · Restricted / unknownInsufficient rank history6,6531,162——2026-10-12
18—Jj3ssie / osmedeusA Modern Orchestration Engine for SecurityGoMIT · PermissiveInsufficient rank history6,6391,035——2026-10-04
19—EEdOverflow / bugbounty-cheatsheetA list of interesting payloads, tips and tricks for bug bounty hunters.UnknownCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history6,5771,622——2023-09-14
20—Vvavkamil / awesome-bugbounty-toolsA curated list of various bug bounty toolsUnknownCC0-1.0 · PermissiveInsufficient rank history6,4481,038——2026-11-01
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.