GitHub stars · StarDay

1swisskyrepo / PayloadsAllTheThingsA list of useful payloads and bypass for Web Application Security and Pentest/CTFPythonMIT · Permissive82,445

2soxoj / maigret🕵️‍♂️ Collect a dossier on a person by username from 6K websitesPythonMIT · Permissive39,773

3bettercap / bettercapThe Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.GoLicense not declared20,241

4laramies / theHarvesterE-mails, subdomains and names Harvester - OSINTPythonGPL-2.0 · Share derivative source18,247

5maurosoria / dirsearchWeb path scannerPythonLicense not declared15,052

6GTFOBins / GTFOBins.github.ioGTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.YAMLGPL-3.0 · Share derivative source13,833

7edoardottt / awesome-hacker-search-enginesA curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and moreShellMIT · Permissive11,477

8SnailSploit / Claude-Redclaude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.PythonMIT · Permissive10,451

9samratashok / nishangNishang - Offensive PowerShell for red team, penetration testing and offensive security.PowerShellLicense not declared10,181

10A-poc / RedTeam-ToolsTools and Techniques for Red Team / Penetration TestingLicense not declared9,942

11sjzar / chatlogchat log tool, easily use your own chat data. Chat log tool, easily use your own chat data.License not declared9,175

12LOLBAS-Project / LOLBASLiving Off The Land Binaries And Scripts - (LOLBins and LOLScripts)XSLTGPL-3.0 · Share derivative source8,925

13yeyintminthuhtut / Awesome-Red-TeamingList of Awesome Red Teaming ResourcesMIT · Permissive8,142

14yaklang / yakitCyber Security ALL-IN-ONE PlatformTypeScriptAGPL-3.0 · Share derivative source7,864

15LasCC / HackToolsThe all-in-one browser extension for offensive security professionals 🛠TypeScriptLicense not declared7,107

16elder-plinius / T3MP3STautonomous red teaming platform; multi-agent offensive-security meta-harnessTypeScriptAGPL-3.0 · Share derivative source6,938

17madhuakula / kubernetes-goatKubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀HTMLMIT · Permissive5,938

18ffffffff0x / 1earnThe security knowledge framework maintained by the ffffffff0x team includes content that is not limited to web security, industrial control security, forensics, emergency response, blue team facility deployment, post-infiltration, Linux security, and various target drone writeups.C++License not declared5,734

19FunnyWolf / ViperAdversary simulation and Red teaming platform with AILicense not declared5,346

20nicocha30 / ligolo-ngAn advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.GoGPL-3.0 · Share derivative source5,163