All projects
Repositories in this selection 16 · UTC 2026-11-03
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Sswisskyrepo / PayloadsAllTheThingsA list of useful payloads and bypass for Web Application Security and Pentest/CTFPythonMIT · PermissiveInsufficient rank history82,31517,558——2026-10-30
2—Vvitalysim / Awesome-Hacking-ResourcesA collection of hacking / penetration testing resources to make you better!UnknownGPL-3.0 · Share derivative sourceInsufficient rank history17,5902,227——2026-05-21
3—Lliamg / traitor:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sockGoMIT · PermissiveInsufficient rank history7,158689——2024-03-12
4—SS1ckB0y1337 / Active-Directory-Exploitation-Cheat-SheetA cheat sheet that contains common enumeration and attack methods for Windows Active Directory.UnknownMIT · PermissiveInsufficient rank history6,7911,325——2026-05-27
5—Xxairy / linux-kernel-exploitationA collection of links related to Linux kernel security and exploitationUnknownCC-BY-4.0 · PermissiveInsufficient rank history6,6731,076——2026-10-05
6—Kk8gege / K8toolsK8 tool collection (intranet penetration/privilege escalation tool/remote overflow/vulnerability exploitation/scanning tool/password cracking/anti-virus tool/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)PowerShellMIT · PermissiveInsufficient rank history6,2412,050——2025-01-25
7—Rrmusser01 / Infosec_ReferenceAn Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.CSSMIT · PermissiveInsufficient rank history6,0321,233——2026-10-26
8—Ccdk-team / CDK📦 Make security testing of K8s, Docker, and Containerd easier.GoApache-2.0 · PermissiveInsufficient rank history4,783610——2026-05-01
9—TThreekiii / Awesome-RedteamAn offensive and defensive knowledge base. A knowledge base for red teaming and offensive security.PythonUnknown · Restricted / unknownInsufficient rank history4,382752——2026-06-23
10—Ttheori-io / copy-fail-CVE-2026-31431Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint CodePythonUnknown · Restricted / unknownInsufficient rank history4,082906——2026-04-29
11—Ddiego-treitos / linux-smart-enumerationLinux enumeration tool for pentesting and CTFs with verbosity levelsShellGPL-3.0 · Share derivative sourceInsufficient rank history4,005608——2026-05-03
12—Iitm4n / PrivescCheckPrivilege Escalation Enumeration Script for WindowsPowerShellBSD-3-Clause · PermissiveInsufficient rank history3,999505——2026-10-28
13—SS3cur3Th1sSh1t / WinPwnAutomation for internal Windows Penetrationtest / AD-SecurityPowerShellBSD-3-Clause · PermissiveInsufficient rank history3,708536——2025-08-28
14—IIgnitetechnologies / Privilege-EscalationThis cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.UnknownUnknown · Restricted / unknownInsufficient rank history3,647638——2026-03-14
15—Nnil0x42 / phpsploitFull-featured C2 framework which silently persists on webserver with a single-line PHP backdoorPythonGPL-3.0 · Share derivative sourceInsufficient rank history2,503464——2024-05-06
16—Pp0dalirius / CoercerA python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.PythonGPL-2.0 · Share derivative sourceInsufficient rank history2,345222——2026-04-24
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.