All projects
Repositories in this selection 32 · UTC 2026-11-03
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—TThe-Art-of-Hacking / h4ckerThis repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.orgJupyter NotebookMIT · PermissiveInsufficient rank history29,9995,440——2026-10-23
2—Vvitalysim / Awesome-Hacking-ResourcesA collection of hacking / penetration testing resources to make you better!UnknownGPL-3.0 · Share derivative sourceInsufficient rank history17,5902,227——2026-05-21
3—GGallopsled / pwntoolsCTF framework and exploit development libraryPythonNOASSERTION · Restricted / unknownInsufficient rank history13,8141,873——2026-11-02
4—Eedoardottt / awesome-hacker-search-enginesA curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and moreShellMIT · PermissiveInsufficient rank history11,4581,116——2026-11-02
5—Ffrohoff / ysoserialA proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.JavaMIT · PermissiveInsufficient rank history9,0961,852——2025-12-04
6—SSecWiki / windows-kernel-exploitswindows-kernel-exploits Collection of Windows platform privilege escalation vulnerabilitiesCMIT · PermissiveInsufficient rank history8,7642,824——2021-06-11
7—Hhugsy / gefGEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on LinuxPythonMIT · PermissiveInsufficient rank history8,419842——2026-08-20
8—Ttrickest / cveGather and update all available and newest CVEs with their PoC.HTMLMIT · PermissiveInsufficient rank history8,179983——2026-10-16
9—Nnomi-sec / PoC-in-GitHub📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.UnknownCC0-1.0 · PermissiveInsufficient rank history8,1751,369——2026-11-03
10—Yyaklang / yakitCyber Security ALL-IN-ONE PlatformTypeScriptAGPL-3.0 · Share derivative sourceInsufficient rank history7,852833——2026-11-03
11—MMr-xn / Penetration_Testing_POCPOC, EXP, scripts, privilege escalation, gadgets, etc. related to penetration testing---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cmsHTMLApache-2.0 · PermissiveInsufficient rank history7,5572,039——2026-11-02
12—Lliamg / traitor:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sockGoMIT · PermissiveInsufficient rank history7,158689——2024-03-12
13—Iihebski / DefaultCreds-cheat-sheetOne place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️PythonMIT · PermissiveInsufficient rank history6,813787——2026-09-27
14—Xxairy / linux-kernel-exploitationA collection of links related to Linux kernel security and exploitationUnknownCC-BY-4.0 · PermissiveInsufficient rank history6,6731,076——2026-10-05
15—AAzeemIdrisi / PhoneSploit-ProAn all-in-one hacking tool to remotely take over Android devices.PythonGPL-3.0 · Share derivative sourceInsufficient rank history6,422919——2026-10-19
16—Kk8gege / K8toolsK8 tool collection (intranet penetration/privilege escalation tool/remote overflow/vulnerability exploitation/scanning tool/password cracking/anti-virus tool/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)PowerShellMIT · PermissiveInsufficient rank history6,2412,050——2025-01-25
17—SSecWiki / linux-kernel-exploitslinux-kernel-exploits Linux platform privilege escalation vulnerability collectionCMIT · PermissiveInsufficient rank history5,6671,713——2020-07-13
18—Kk8gege / LadonLadon large-scale intranet penetration scanner, PowerShell, Cobalt Strike plug-in, memory loading, fileless scanning. It includes port scanning, service identification, network asset detection, password auditing, high-risk vulnerability detection, vulnerability exploitation, password reading and one-click GetShell. It supports batch A/B/C and cross-network segment scanning, and supports URL, host, domain name list scanning, etc. Network asset detection 32 protocols (ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP) or methods to quickly obtain target network surviving host IP, computer name, workgroup, shared resources, network card address, operating system version, website, subdomain name, middleware, open services, routers, switches, databases, printers, etc., a large number of high-risk vulnerability detection modules MS17010, Zimbra, ExchangeC#MIT · PermissiveInsufficient rank history5,340882——2025-03-24
19—Kkarma9874 / AndroRATA Simple android remote administration tool using sockets. It uses java on the client side and python on the server sideJavaMIT · PermissiveInsufficient rank history5,2641,679——2024-07-17
20—NNullArray / AutoSploitAutomated Mass ExploiterPythonGPL-3.0 · Share derivative sourceInsufficient rank history5,2581,177——2023-05-22
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.