GitHub stars · StarDay

1Hack-with-Github / Awesome-HackingA collection of resource lists for security research and penetration testing.CC0-1.0 · Permissive124,822

2usestrix / strixAn AI-assisted application penetration-testing tool.PythonApache-2.0 · Permissive74,167

3maurosoria / dirsearchWeb path scannerPythonLicense not declared15,052

4nahamsec / Resources-for-Beginner-Bug-Bounty-HuntersA list of resources for those interested in getting started in bug bountiesLicense not declaredInactive12,323

5yogeshojha / renginereNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.HTMLGPL-3.0 · Share derivative source8,922

6six2dez / reconftwAuthor description: reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilitiesShellMIT · Permissive8,338

7LasCC / HackToolsThe all-in-one browser extension for offensive security professionals 🛠TypeScriptLicense not declaredInactive7,107

8awarexone / Agentic-Bug-HunterAI-powered bug bounty hunting toolkit that works with or without subscription.PythonMIT · Permissive5,644

9elementalsouls / Claude-BugHunterA Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.PythonMIT · Permissive5,462

10Astrosp / Awesome-OSINT-List📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.ShellGPL-3.0 · Share derivative source4,637

11skerkour / black-hat-rustApplied offensive security with Rust - https://kerkour.com/black-hat-rustRustMIT · PermissiveInactive4,456

12zan8in / afrogA Security Tool for Bug Bounty, Pentest and Red Teaming.GoMIT · Permissive4,454

13pry0cc / axiomThe dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!ShellMIT · PermissiveInactive4,443

14CyberStrikeus / CyberStrikeOpen-source AI-powered offensive security harness for automated penetration testing.TypeScriptAGPL-3.0 · Share derivative source3,410

15dwisiswant0 / awesome-oneliner-bugbountyA collection of awesome one-liner scripts especially for bug bounty tips.MIT · PermissiveInactive3,212

16Armur-Ai / Pentest-Swarm-AIAutonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.GoAGPL-3.0 · Share derivative source3,142

17lord-alfred / ipranges🔨 List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.ShellCC0-1.0 · Permissive1,205

18h5i-dev / h5iAn Axum-based Rust web framework for building and verifying web apps with Lean 4, featuring optional GPU acceleration and integrated development infrastructure for red-teaming and CI/CD.RustApache-2.0 · Permissive898