All projects
Repositories in this selection 24 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Vvxcontrol / pentagiFully autonomous AI Agents system capable of performing complex penetration testing tasksGoMIT · PermissiveInsufficient rank history33,0505,165——2026-10-22
2—Iihebski / DefaultCreds-cheat-sheetOne place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️PythonMIT · PermissiveInsufficient rank history6,813787——2026-09-27
3—Eelder-plinius / T3MP3STautonomous red teaming platform; multi-agent offensive-security meta-harnessTypeScriptAGPL-3.0 · Share derivative sourceInsufficient rank history6,6611,387——2026-09-08
4—Iinfinition / BjornBjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.PythonMIT · PermissiveInsufficient rank history6,354373——2026-07-20
5—Eelementalsouls / Claude-BugHunterA Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.PythonMIT · PermissiveInsufficient rank history5,398824——2026-11-02
6—Nnicocha30 / ligolo-ngAn advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.GoGPL-3.0 · Share derivative sourceInsufficient rank history5,154500——2026-09-26
7—Mmantvydasb / RedTeaming-Tactics-and-TechniquesPersonal study notes on red teaming and offensive security, documenting penetration-testing experiments in controlled environments and related technical references.PowerShellUnknown · Restricted / unknownInsufficient rank history4,7311,144——2026-06-13
8—Tt3l3machus / VillainVillain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).PythonNOASSERTION · Restricted / unknownInsufficient rank history4,487694——2025-05-21
9—Sskerkour / black-hat-rustApplied offensive security with Rust - https://kerkour.com/black-hat-rustRustMIT · PermissiveInsufficient rank history4,457445——2025-10-01
10—Nnoraj / OSCP-Exam-Report-Template-Markdown:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam reportRubyMIT · PermissiveInsufficient rank history4,221834——2026-08-12
11—00xsyr0 / Awesome-Cybersecurity-HandbooksA huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.UnknownGPL-3.0 · Share derivative sourceInsufficient rank history4,164604——2026-10-23
12—Eevyatarmeged / RaccoonA high performance offensive security tool for reconnaissance and vulnerability scanningPythonMIT · PermissiveInsufficient rank history4,066500——2026-04-21
13—00xsyr0 / OSCPOSCP Cheat SheetPowerShellUnknown · Restricted / unknownInsufficient rank history3,872770——2026-10-22
14—00x4D31 / awesome-oscpA curated list of awesome OSCP resourcesUnknownUnknown · Restricted / unknownInsufficient rank history3,519718——2024-04-28
15—Ccodingo / NoSQLMapAutomated NoSQL database enumeration and web application exploitation tool.PythonGPL-3.0 · Share derivative sourceInsufficient rank history3,370627——2026-10-13
16—CCyberStrikeus / CyberStrikeOpen-source AI-powered offensive security harness for automated penetration testing.TypeScriptAGPL-3.0 · Share derivative sourceInsufficient rank history3,364579——2026-11-02
17—Mmikeroyal / Digital-Forensics-GuideDigital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.PythonUnknown · Restricted / unknownInsufficient rank history3,208400——2024-01-04
18—Xx90skysn3k / brutesprayFast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.GoMIT · PermissiveInsufficient rank history2,553438——2026-11-02
19—AASCIT31 / Dark-MoonOpen-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.PythonGPL-3.0 · Share derivative sourceInsufficient rank history1,199202——2026-10-27
20—Bbountyyfi / lonkeroLonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.RustNOASSERTION · Restricted / unknownInsufficient rank history1,09994——2026-11-02
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.