All projects
Repositories in this selection 102 · UTC 2026-11-03
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Ssoxoj / maigret🕵️♂️ Collect a dossier on a person by username from 6K websitesPythonMIT · PermissiveInsufficient rank history39,6203,150——2026-11-02
2—Ssqlmapproject / sqlmapA tool for SQL injection detection and database security assessment.PythonNOASSERTION · Restricted / unknownInsufficient rank history38,8306,435——2026-11-02
3—Ppromptfoo / promptfooTest your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.TypeScriptMIT · PermissiveInsufficient rank history26,7482,633——2026-11-02
4—Qqeeqbox / social-analyzerAPI, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websitesJavaScriptAGPL-3.0 · Share derivative sourceInsufficient rank history24,4272,363——2026-01-12
5—Ssmicallef / spiderfootSpiderFoot automates OSINT for threat intelligence and mapping your attack surface.PythonMIT · PermissiveInsufficient rank history24,2743,994——2026-04-13
6—Bbee-san / Ciphey⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡RustMIT · PermissiveInsufficient rank history21,7351,444——2026-11-01
7—Bbee-san / RustScan🤖 The Modern Port Scanner 🤖RustGPL-3.0 · Share derivative sourceInsufficient rank history20,6581,396——2026-10-20
8—HHunxByts / GhostTrackUseful tool to track location or mobile numberPythonUnknown · Restricted / unknownInsufficient rank history20,3702,778——2024-01-11
9—Fffuf / ffufFast web fuzzer written in GoGoMIT · PermissiveInsufficient rank history16,9761,624——2026-09-26
10—Mmaurosoria / dirsearchWeb path scannerPythonUnknown · Restricted / unknownInsufficient rank history15,0342,462——2026-11-01
11—Jjuice-shop / juice-shopOWASP Juice Shop: Probably the most modern and sophisticated insecure web applicationTypeScriptMIT · PermissiveInsufficient rank history14,33820,436——2026-10-30
12—OOJ / gobusterDirectory/File, DNS and VHost busting tool written in GoGoApache-2.0 · PermissiveInsufficient rank history14,2651,629——2026-10-28
13—00x4m4 / hexstrike-aiHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.PythonMIT · PermissiveInsufficient rank history13,3162,687——2026-08-03
14—OOWASP / mastgThe OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.PythonCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history13,3062,845——2026-11-02
15—HHackTricks-wiki / hacktricksWelcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.JavaScriptUnknown · Restricted / unknownInsufficient rank history12,6713,219——2026-11-03
16—Ddstotijn / hettyAn HTTP toolkit for security research.GoMIT · PermissiveInsufficient rank history12,530826——2026-07-21
17—Vvanhauser-thc / thc-hydrahydraCAGPL-3.0 · Share derivative sourceInsufficient rank history12,4542,690——2026-10-30
18—Bblacklanternsecurity / bbotThe recursive internet scanner for hackers. 🧡PythonAGPL-3.0 · Share derivative sourceInsufficient rank history10,916963——2026-11-02
19—Iinfosecn1nja / Red-Teaming-ToolkitThis repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.UnknownGPL-3.0 · Share derivative sourceInsufficient rank history10,8352,378——2026-05-07
20—OOWASP / wstgThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.CSSCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history10,1791,730——2026-11-01
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.