GitHub stars · StarDay

1chaitin / SafeLineSafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.GoGPL-3.0 · Share derivative source23,180

2edoardottt / awesome-hacker-search-enginesA curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and moreShellMIT · Permissive11,477

3trickest / cveGather and update all available and newest CVEs with their PoC.HTMLMIT · Permissive8,190

4nomi-sec / PoC-in-GitHub📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.CC0-1.0 · Permissive8,181

5Mr-xn / Penetration_Testing_POCPOC, EXP, scripts, privilege escalation, gadgets, etc. related to penetration testing---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cmsHTMLApache-2.0 · Permissive7,563

6infobyte / faradayOpen-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.PythonGPL-3.0 · Share derivative source6,842

7OWASP / NettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability ManagementPythonApache-2.0 · Permissive5,715

8alexandreborges / malwoverviewMalwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.PythonGPL-3.0 · Share derivative source4,139

9PeiQi0 / PeiQi-WIKI-BookKnowledge library for network security practitioners 🍃 (stop updating)License not declared4,122

10PatchMon / PatchMonLinux Patch Management & Automation PlatformGoAGPL-3.0 · Share derivative source3,605

11qazbnm456 / awesome-cve-poc✍️ A curated list of CVE PoCs.License not declared3,546

12zhzyker / vulmapVulmap is a web vulnerability scanning and verification tool that can scan web apps for vulnerabilities and perform vulnerability verification.PythonGPL-3.0 · Share derivative source3,512

13vulnersCom / nmap-vulnersNmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.LuaLicense not declared3,511

14Threekiii / Vulnerability-WikiA project to quickly deploy Awesome-POC vulnerability documentation based on docsify. Deploying the Awesome-POC repository via docsify.HTMLLicense not declared2,200

15karimhabush / cyberowlAggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.PythonMIT · Permissive264

16Ares-X / VulWikiThe Chinese vulnerability knowledge base organizes the principles and public recurrence data of Web, middleware, network equipment and system vulnerabilities, and supports retrieval by product, CVE, and fingerprint. Chinese vulnerability knowledge base.PythonLicense not declared233