All projects
Repositories in this selection 30 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Sswisskyrepo / PayloadsAllTheThingsA list of useful payloads and bypass for Web Application Security and Pentest/CTFPythonMIT · PermissiveInsufficient rank history82,31517,558——2026-10-30
2—TThe-Art-of-Hacking / h4ckerThis repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.orgJupyter NotebookMIT · PermissiveInsufficient rank history29,9995,440——2026-10-23
3—Cchaitin / SafeLineSafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.GoGPL-3.0 · Share derivative sourceInsufficient rank history23,1541,592——2026-10-22
4—HHacker0x01 / hacker101Source code for Hacker101.com - a free online web and mobile security class.SCSSNOASSERTION · Restricted / unknownInsufficient rank history14,6152,661——2025-02-22
5—Aanchore / grypeA vulnerability scanner for container images and filesystemsGoApache-2.0 · PermissiveInsufficient rank history13,163930——2026-11-02
6—Cchaitin / xrayA comprehensive security assessment tool self-developed by Changting, which supports scanning of common web security issues and customized POC | Be sure to read the documentation before using itVueNOASSERTION · Restricted / unknownInsufficient rank history11,7821,870——2024-10-29
7—Ffrohoff / ysoserialA proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.JavaMIT · PermissiveInsufficient rank history9,0961,852——2025-12-04
8—Ttrickest / cveGather and update all available and newest CVEs with their PoC.HTMLMIT · PermissiveInsufficient rank history8,179983——2026-10-16
9—Nnomi-sec / PoC-in-GitHub📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.UnknownCC0-1.0 · PermissiveInsufficient rank history8,1751,369——2026-11-03
10—KKathanP19 / HowToHuntCollection of methodology and test case for various web vulnerabilities.UnknownGPL-3.0 · Share derivative sourceInsufficient rank history7,3791,980——2026-10-22
11—TTencent / AI-Infra-GuardA full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.PythonApache-2.0 · PermissiveInsufficient rank history7,353728——2026-11-03
12—Iinfoslack / awesome-web-hackingA list of web application securityUnknownMIT · PermissiveInsufficient rank history7,3391,370——2026-10-29
13—Ddaffainfo / AllAboutBugBountyAll about bug bounty (bypasses, payloads, and etc)UnknownUnknown · Restricted / unknownInsufficient rank history6,9571,270——2023-09-08
14—Iinfobyte / faradayOpen-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.PythonGPL-3.0 · Share derivative sourceInsufficient rank history6,8391,089——2026-10-29
15—LLandGrey / SpringBootVulExploitSpringBoot related vulnerability learning materials, collection of utilization methods and techniques, black box security assessment check listJavaUnknown · Restricted / unknownInsufficient rank history6,1471,309——2021-03-10
16—Ggommzystudio / device-activity-trackerA phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)TypeScriptNOASSERTION · Restricted / unknownInsufficient rank history5,192705——2025-12-31
17—Ggreenbone / openvas-scannerThis repository contains the scanner component for Greenbone Community Edition.RustGPL-2.0 · Share derivative sourceInsufficient rank history4,915805——2026-11-03
18—Zzhzyker / exphubExphub [Exploit Script Library] Including vulnerability exploitation scripts for Webloigc, Struts2, Tomcat, Nexus, Solr, Jboss, and Drupal, with the latest additions of CVE-2020-14882, CVE-2020-11444, and CVE-2020-10 204. CVE-2020-10199, CVE-2020-1938, CVE-2020-2551, CVE-2020-2555, CVE-2020-2883, CVE-2019-17558, CVE-2019-6340PythonUnknown · Restricted / unknownInsufficient rank history4,2941,077——2021-04-04
19—Aalexandreborges / malwoverviewMalwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.PythonGPL-3.0 · Share derivative sourceInsufficient rank history4,136556——2026-09-22
20—Ttheori-io / copy-fail-CVE-2026-31431Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint CodePythonUnknown · Restricted / unknownInsufficient rank history4,082906——2026-04-29
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.