All projects
Repositories in this selection 76 · UTC 2026-11-03
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—HHack-with-Github / Awesome-HackingA collection of resource lists for security research and penetration testing.UnknownCC0-1.0 · PermissiveInsufficient rank history124,41310,940——2026-10-27
2—Sswisskyrepo / PayloadsAllTheThingsA list of useful payloads and bypass for Web Application Security and Pentest/CTFPythonMIT · PermissiveInsufficient rank history82,31517,558——2026-10-30
3—Mmukul975 / Anthropic-Cybersecurity-Skills817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0PythonApache-2.0 · PermissiveInsufficient rank history35,4504,318——2026-08-31
4—Vvxcontrol / pentagiFully autonomous AI Agents system capable of performing complex penetration testing tasksGoMIT · PermissiveInsufficient rank history33,0505,165——2026-10-22
5—TThe-Art-of-Hacking / h4ckerThis repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.orgJupyter NotebookMIT · PermissiveInsufficient rank history29,9995,440——2026-10-23
6—Vvitalysim / Awesome-Hacking-ResourcesA collection of hacking / penetration testing resources to make you better!UnknownGPL-3.0 · Share derivative sourceInsufficient rank history17,5902,227——2026-05-21
7—GGreyDGL / PentestGPTAutomated Penetration Testing Agentic Framework Powered by Large Language ModelsPythonMIT · PermissiveInsufficient rank history16,2502,840——2026-07-14
8—DDatalux / OsintgramOsintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nicknamePythonGPL-3.0 · Share derivative sourceInsufficient rank history15,3803,247——2026-10-30
9—Mmaurosoria / dirsearchWeb path scannerPythonUnknown · Restricted / unknownInsufficient rank history15,0342,462——2026-11-01
10—Qqazbnm456 / awesome-web-security🐶 A curated list of Web Security materials and resources.PythonUnknown · Restricted / unknownInsufficient rank history13,9921,842——2026-11-02
11—Vvanhauser-thc / thc-hydrahydraCAGPL-3.0 · Share derivative sourceInsufficient rank history12,4542,690——2026-10-30
12—OOWASP / wstgThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.CSSCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history10,1791,730——2026-11-01
13—Ssamratashok / nishangNishang - Offensive PowerShell for red team, penetration testing and offensive security.PowerShellNOASSERTION · Restricted / unknownInsufficient rank history10,1772,537——2024-04-25
14—AA-poc / RedTeam-ToolsTools and Techniques for Red Team / Penetration TestingUnknownUnknown · Restricted / unknownInsufficient rank history9,9071,324——2026-04-18
15—WWe5ter / Scanners-BoxThe Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents - A matrix of all-domain open-source network security tools for geeks, enterprises, and AI agentsUnknownNOASSERTION · Restricted / unknownInsufficient rank history9,1692,430——2026-11-02
16—Yyogeshojha / renginereNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.HTMLGPL-3.0 · Share derivative sourceInsufficient rank history8,9121,346——2026-10-31
17—Ssix2dez / reconftwAuthor description: reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilitiesShellMIT · PermissiveInsufficient rank history8,3261,264——2026-11-02
18—Ttrickest / cveGather and update all available and newest CVEs with their PoC.HTMLMIT · PermissiveInsufficient rank history8,179983——2026-10-16
19—Jjakejarvis / awesome-shodan-queries🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻UnknownCC0-1.0 · PermissiveInsufficient rank history7,8361,036——2024-05-27
20—Mmandiant / commando-vmComplete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]PowerShellApache-2.0 · PermissiveInsufficient rank history7,8311,372——2025-10-16
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.