GitHub stars · StarDay

1vxcontrol / pentagiFully autonomous AI Agents system capable of performing complex penetration testing tasksGoMIT · Permissive33,537

2elder-plinius / T3MP3STautonomous red teaming platform; multi-agent offensive-security meta-harnessTypeScriptAGPL-3.0 · Share derivative source6,938

3ihebski / DefaultCreds-cheat-sheetOne place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️PythonMIT · Permissive6,818

4infinition / BjornBjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.PythonMIT · Permissive6,362

5elementalsouls / Claude-BugHunterA Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.PythonMIT · Permissive5,462

6nicocha30 / ligolo-ngAn advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.GoGPL-3.0 · Share derivative source5,163

7mantvydasb / RedTeaming-Tactics-and-TechniquesPersonal study notes on red teaming and offensive security, documenting penetration-testing experiments in controlled environments and related technical references.PowerShellLicense not declared4,734

8t3l3machus / VillainVillain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).PythonLicense not declared4,487

9skerkour / black-hat-rustApplied offensive security with Rust - https://kerkour.com/black-hat-rustRustMIT · Permissive4,456

10noraj / OSCP-Exam-Report-Template-Markdown:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam reportRubyMIT · Permissive4,219

110xsyr0 / Awesome-Cybersecurity-HandbooksA huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.GPL-3.0 · Share derivative source4,165

12evyatarmeged / RaccoonA high performance offensive security tool for reconnaissance and vulnerability scanningPythonMIT · Permissive4,071

130xsyr0 / OSCPOSCP Cheat SheetPowerShellLicense not declared3,874

140x4D31 / awesome-oscpA curated list of awesome OSCP resourcesLicense not declared3,519

15CyberStrikeus / CyberStrikeOpen-source AI-powered offensive security harness for automated penetration testing.TypeScriptAGPL-3.0 · Share derivative source3,408

16codingo / NoSQLMapAutomated NoSQL database enumeration and web application exploitation tool.PythonGPL-3.0 · Share derivative source3,374

17mikeroyal / Digital-Forensics-GuideDigital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.PythonLicense not declared3,220

18x90skysn3k / brutesprayFast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.GoMIT · Permissive2,553

19ASCIT31 / Dark-MoonOpen-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.PythonGPL-3.0 · Share derivative source1,207

20bountyyfi / lonkeroLonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.RustLicense not declared1,099