All projects
102 repositories · updated 2026-11-06
Loading…
1soxoj / maigret🕵️♂️ Collect a dossier on a person by username from 6K websitesPythonMIT · PermissiveInsufficient rank history39,724
2sqlmapproject / sqlmapA tool for SQL injection detection and database security assessment.PythonLicense not declaredInsufficient rank history38,869
3promptfoo / promptfooTest your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.TypeScriptMIT · PermissiveInsufficient rank history26,896
4qeeqbox / social-analyzerAPI, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websitesJavaScriptAGPL-3.0 · Share derivative sourceInsufficient rank history24,484
5smicallef / spiderfootSpiderFoot automates OSINT for threat intelligence and mapping your attack surface.PythonMIT · PermissiveInsufficient rank history24,381
6bee-san / Ciphey⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡RustMIT · PermissiveInsufficient rank history21,747
7bee-san / RustScan🤖 The Modern Port Scanner 🤖RustGPL-3.0 · Share derivative sourceInsufficient rank history20,681
8HunxByts / GhostTrackUseful tool to track location or mobile numberPythonLicense not declaredInsufficient rank history20,460
11juice-shop / juice-shopOWASP Juice Shop: Probably the most modern and sophisticated insecure web applicationTypeScriptMIT · PermissiveInsufficient rank history14,377
12OJ / gobusterDirectory/File, DNS and VHost busting tool written in GoGoApache-2.0 · PermissiveInsufficient rank history14,265
130x4m4 / hexstrike-aiHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.PythonMIT · PermissiveInsufficient rank history13,392
14OWASP / mastgThe OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.PythonCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history13,318
15HackTricks-wiki / hacktricksWelcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.JavaScriptLicense not declaredInsufficient rank history12,693
16dstotijn / hettyAn HTTP toolkit for security research.GoMIT · PermissiveInsufficient rank history12,534
18blacklanternsecurity / bbotThe recursive internet scanner for hackers. 🧡PythonAGPL-3.0 · Share derivative sourceInsufficient rank history10,995
19infosecn1nja / Red-Teaming-ToolkitThis repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.GPL-3.0 · Share derivative sourceInsufficient rank history10,845
20OWASP / wstgThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.CSSCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history10,212