GitHub stars · StarDay

10x4m4 / hexstrike-aiHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.PythonMIT · Permissive13,405

2screetsec / TheFatRatThefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .CGPL-3.0 · Share derivative source11,578

3urbanadventurer / WhatWebNext generation web scannerRubyGPL-2.0 · Share derivative source6,989

4yeahhub / Hacking-Security-EbooksTop 100 Hacking & Security E-Books (Free Download)License not declared6,530

5techchipnet / CamPhishGrab cam shots & GPS location from target's phone front camera or PC webcam just sending a link.HTMLGPL-3.0 · Share derivative source5,253

6RaspAP / raspap-webguiThe easiest, full-featured wireless router setup for Debian-based devices. Period.PHPGPL-3.0 · Share derivative source5,232

7urbanadventurer / Android-PIN-BruteforceUnlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)ShellLicense not declared4,882

8samsesh / SocialBox-TermuxSocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi Edit By samsesh for termux on androidShellMIT · Permissive4,643

9morrownr / USB-WiFiUSB WiFi Adapter Information for LinuxLicense not declared4,501

10Lucksi / Mr.HolmesA Complete Osint Tool :mag:PythonGPL-3.0 · Share derivative source4,387

11rawfilejson / awesome-osint-arsenalOSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.ShellMIT · Permissive3,760

12EntySec / GhostGhost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.PythonMIT · Permissive3,437

13caster0x00 / AboveNetwork Security SnifferPythonApache-2.0 · Permissive877

14r3vn / badKarmanetwork reconnaissance toolkitPythonGPL-3.0 · Share derivative source437

15skynet0x01 / tugareconTugaRecon is an advanced subdomain reconnaissance and intelligence framework built for security researchers, penetration testers and OSINT professionals. It combines OSINT enumeration, semantic analysis, temporal intelligence and automated reactions to continuously improve asset discovery and prioritization.PythonGPL-3.0 · Share derivative source222