All projects
Repositories in this selection 48 · UTC 2026-11-03
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Sswisskyrepo / PayloadsAllTheThingsA list of useful payloads and bypass for Web Application Security and Pentest/CTFPythonMIT · PermissiveInsufficient rank history82,31517,558——2026-10-30
2—Qqeeqbox / social-analyzerAPI, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websitesJavaScriptAGPL-3.0 · Share derivative sourceInsufficient rank history24,4272,363——2026-01-12
3—Vvanhauser-thc / thc-hydrahydraCAGPL-3.0 · Share derivative sourceInsufficient rank history12,4542,690——2026-10-30
4—Nnahamsec / Resources-for-Beginner-Bug-Bounty-HuntersA list of resources for those interested in getting started in bug bountiesUnknownUnknown · Restricted / unknownInsufficient rank history12,3122,053——2024-07-23
5—Hhorsicq / Detect-It-EasyProgram for determining types of files for Windows, Linux and MacOS.JavaScriptMIT · PermissiveInsufficient rank history11,858992——2026-11-02
6—AA-poc / RedTeam-ToolsTools and Techniques for Red Team / Penetration TestingUnknownUnknown · Restricted / unknownInsufficient rank history9,9071,324——2026-04-18
7—Ssensepost / objection📱 objection - mobile exploration runtimePythonGPL-3.0 · Share derivative sourceInsufficient rank history9,4811,008——2026-10-27
8—SSecWiki / windows-kernel-exploitswindows-kernel-exploits Collection of Windows platform privilege escalation vulnerabilitiesCMIT · PermissiveInsufficient rank history8,7642,824——2021-06-11
9—OOrange-Cyberdefense / GOADA lab environment project for Active Directory security practice.PowerShellGPL-3.0 · Share derivative sourceInsufficient rank history8,5651,174——2026-10-23
10—Ssix2dez / reconftwAuthor description: reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilitiesShellMIT · PermissiveInsufficient rank history8,3261,264——2026-11-02
11—Eepi052 / feroxbusterA fast, simple, recursive content discovery tool written in Rust.RustMIT · PermissiveInsufficient rank history8,156637——2026-11-02
12—Yyaklang / yakitCyber Security ALL-IN-ONE PlatformTypeScriptAGPL-3.0 · Share derivative sourceInsufficient rank history7,852833——2026-11-03
13—Uurbanadventurer / WhatWebNext generation web scannerRubyGPL-2.0 · Share derivative sourceInsufficient rank history6,9761,019——2026-04-02
14—Ddaffainfo / AllAboutBugBountyAll about bug bounty (bypasses, payloads, and etc)UnknownUnknown · Restricted / unknownInsufficient rank history6,9571,270——2023-09-08
15—Iihebski / DefaultCreds-cheat-sheetOne place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️PythonMIT · PermissiveInsufficient rank history6,813787——2026-09-27
16—BBitterSecurity / DecepticonAutonomous Hacking Agent for Red TeamPythonApache-2.0 · PermissiveInsufficient rank history6,5151,247——2026-11-01
17—Kk8gege / K8toolsK8 tool collection (intranet penetration/privilege escalation tool/remote overflow/vulnerability exploitation/scanning tool/password cracking/anti-virus tool/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)PowerShellMIT · PermissiveInsufficient rank history6,2412,050——2025-01-25
18—Aalpkeskin / mosintAn automated e-mail OSINT toolGoMIT · PermissiveInsufficient rank history6,071662——2024-02-02
19—PPennyw0rth / NetExecThe Network Execution ToolPythonBSD-2-Clause · PermissiveInsufficient rank history5,969797——2026-11-02
20—Oonlurking / awesome-infosecA curated list of awesome infosec courses and training resources.UnknownUnknown · Restricted / unknownInsufficient rank history5,774755——2026-08-28
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.