All projects
Repositories in this selection 50 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Mmaurosoria / dirsearchWeb path scannerPythonUnknown · Restricted / unknownInsufficient rank history15,0342,462——2026-11-01
2—Sshadow1ng / fscanIntegrated scanner for internal network assets and vulnerability assessment.GoMIT · PermissiveInsufficient rank history14,7321,952——2026-10-01
3—Tthreat9 / routersploitExploitation Framework for Embedded DevicesPythonNOASSERTION · Restricted / unknownInsufficient rank history13,2822,399——2026-05-05
4—Jjustcallmekoko / ESP32MarauderA suite of WiFi/Bluetooth offensive and defensive tools for the ESP32C++Unknown · Restricted / unknownInsufficient rank history12,9801,572——2026-10-29
5—Hhorsicq / Detect-It-EasyProgram for determining types of files for Windows, Linux and MacOS.JavaScriptMIT · PermissiveInsufficient rank history11,858992——2026-11-02
6—Ggoogle / osv-scannerVulnerability scanner written in Go which uses the data provided by https://osv.devGoApache-2.0 · PermissiveInsufficient rank history11,375833——2026-11-03
7—Bblacklanternsecurity / bbotThe recursive internet scanner for hackers. 🧡PythonAGPL-3.0 · Share derivative sourceInsufficient rank history10,916963——2026-11-02
8—Wwpscanteam / wpscanWPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]RubyNOASSERTION · Restricted / unknownInsufficient rank history9,8301,347——2026-10-27
9—Mmargelo / react-native-vision-camera📸 A powerful, high-performance React Native Camera library.TypeScriptMIT · PermissiveInsufficient rank history9,6501,399——2026-11-02
10—Yyogeshojha / renginereNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.HTMLGPL-3.0 · Share derivative sourceInsufficient rank history8,9121,346——2026-10-31
11—Ssix2dez / reconftwAuthor description: reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilitiesShellMIT · PermissiveInsufficient rank history8,3261,264——2026-11-02
12—Yyaklang / yakitCyber Security ALL-IN-ONE PlatformTypeScriptAGPL-3.0 · Share derivative sourceInsufficient rank history7,852833——2026-11-03
13—TTencent / AI-Infra-GuardA full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.PythonApache-2.0 · PermissiveInsufficient rank history7,353728——2026-11-03
14—Iinfoslack / awesome-web-hackingA list of web application securityUnknownMIT · PermissiveInsufficient rank history7,3391,370——2026-10-29
15—Aaquasecurity / tfsecTfsec is now part of TrivyGoMIT · PermissiveInsufficient rank history7,059560——2026-03-25
16—Uurbanadventurer / WhatWebNext generation web scannerRubyGPL-2.0 · Share derivative sourceInsufficient rank history6,9761,019——2026-04-02
17—Kk8gege / K8toolsK8 tool collection (intranet penetration/privilege escalation tool/remote overflow/vulnerability exploitation/scanning tool/password cracking/anti-virus tool/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)PowerShellMIT · PermissiveInsufficient rank history6,2412,050——2025-01-25
18—Eelceef / dnstwistDomain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonationPythonApache-2.0 · PermissiveInsufficient rank history5,771856——2025-04-15
19—OOWASP / NettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability ManagementPythonApache-2.0 · PermissiveInsufficient rank history5,7021,228——2026-10-30
20—Kk8gege / LadonLadon large-scale intranet penetration scanner, PowerShell, Cobalt Strike plug-in, memory loading, fileless scanning. It includes port scanning, service identification, network asset detection, password auditing, high-risk vulnerability detection, vulnerability exploitation, password reading and one-click GetShell. It supports batch A/B/C and cross-network segment scanning, and supports URL, host, domain name list scanning, etc. Network asset detection 32 protocols (ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP) or methods to quickly obtain target network surviving host IP, computer name, workgroup, shared resources, network card address, operating system version, website, subdomain name, middleware, open services, routers, switches, databases, printers, etc., a large number of high-risk vulnerability detection modules MS17010, Zimbra, ExchangeC#MIT · PermissiveInsufficient rank history5,340882——2025-03-24
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.