GitHub stars · StarDay

1swisskyrepo / PayloadsAllTheThingsA list of useful payloads and bypass for Web Application Security and Pentest/CTFPythonMIT · Permissive82,445

2qeeqbox / social-analyzerAPI, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websitesJavaScriptAGPL-3.0 · Share derivative source24,490

3vanhauser-thc / thc-hydrahydraCAGPL-3.0 · Share derivative source12,472

4nahamsec / Resources-for-Beginner-Bug-Bounty-HuntersA list of resources for those interested in getting started in bug bountiesLicense not declared12,323

5horsicq / Detect-It-EasyProgram for determining types of files for Windows, Linux and MacOS.JavaScriptMIT · Permissive11,894

6A-poc / RedTeam-ToolsTools and Techniques for Red Team / Penetration TestingLicense not declared9,942

7sensepost / objection📱 objection - mobile exploration runtimePythonGPL-3.0 · Share derivative source9,487

8SecWiki / windows-kernel-exploitswindows-kernel-exploits Collection of Windows platform privilege escalation vulnerabilitiesCMIT · Permissive8,765

9Orange-Cyberdefense / GOADA lab environment project for Active Directory security practice.PowerShellGPL-3.0 · Share derivative source8,584

10six2dez / reconftwAuthor description: reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilitiesShellMIT · Permissive8,338

11epi052 / feroxbusterA fast, simple, recursive content discovery tool written in Rust.RustMIT · Permissive8,153

12yaklang / yakitCyber Security ALL-IN-ONE PlatformTypeScriptAGPL-3.0 · Share derivative source7,864

13urbanadventurer / WhatWebNext generation web scannerRubyGPL-2.0 · Share derivative source6,989

14daffainfo / AllAboutBugBountyAll about bug bounty (bypasses, payloads, and etc)License not declared6,962

15ihebski / DefaultCreds-cheat-sheetOne place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️PythonMIT · Permissive6,820

16BitterSecurity / DecepticonAutonomous Hacking Agent for Red TeamPythonApache-2.0 · Permissive6,555

17k8gege / K8toolsK8 tool collection (intranet penetration/privilege escalation tool/remote overflow/vulnerability exploitation/scanning tool/password cracking/anti-virus tool/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)PowerShellMIT · Permissive6,243

18alpkeskin / mosintAn automated e-mail OSINT toolGoMIT · Permissive6,073

19Pennyw0rth / NetExecThe Network Execution ToolPythonBSD-2-Clause · Permissive5,979

20onlurking / awesome-infosecA curated list of awesome infosec courses and training resources.License not declared5,777