GitHub stars · StarDay

1maurosoria / dirsearchWeb path scannerPythonLicense not declared15,049

2shadow1ng / fscanIntegrated scanner for internal network assets and vulnerability assessment.GoMIT · Permissive14,747

3threat9 / routersploitExploitation Framework for Embedded DevicesPythonLicense not declared13,286

4justcallmekoko / ESP32MarauderA suite of WiFi/Bluetooth offensive and defensive tools for the ESP32C++License not declared13,017

5horsicq / Detect-It-EasyProgram for determining types of files for Windows, Linux and MacOS.JavaScriptMIT · Permissive11,884

6google / osv-scannerVulnerability scanner written in Go which uses the data provided by https://osv.devGoApache-2.0 · Permissive11,427

7blacklanternsecurity / bbotThe recursive internet scanner for hackers. 🧡PythonAGPL-3.0 · Share derivative source10,995

8wpscanteam / wpscanWPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]RubyLicense not declared9,840

9margelo / react-native-vision-camera📸 A powerful, high-performance React Native Camera library.TypeScriptMIT · Permissive9,653

10yogeshojha / renginereNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.HTMLGPL-3.0 · Share derivative source8,919

11six2dez / reconftwAuthor description: reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilitiesShellMIT · Permissive8,339

12yaklang / yakitCyber Security ALL-IN-ONE PlatformTypeScriptAGPL-3.0 · Share derivative source7,863

13Tencent / AI-Infra-GuardA full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.PythonApache-2.0 · Permissive7,406

14infoslack / awesome-web-hackingA list of web application securityMIT · Permissive7,346

15aquasecurity / tfsecTfsec is now part of TrivyGoMIT · Permissive7,060

16urbanadventurer / WhatWebNext generation web scannerRubyGPL-2.0 · Share derivative source6,989

17k8gege / K8toolsK8 tool collection (intranet penetration/privilege escalation tool/remote overflow/vulnerability exploitation/scanning tool/password cracking/anti-virus tool/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)PowerShellMIT · Permissive6,243

18elceef / dnstwistDomain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonationPythonApache-2.0 · Permissive5,777

19OWASP / NettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability ManagementPythonApache-2.0 · Permissive5,713

20k8gege / LadonLadon large-scale intranet penetration scanner, PowerShell, Cobalt Strike plug-in, memory loading, fileless scanning. It includes port scanning, service identification, network asset detection, password auditing, high-risk vulnerability detection, vulnerability exploitation, password reading and one-click GetShell. It supports batch A/B/C and cross-network segment scanning, and supports URL, host, domain name list scanning, etc. Network asset detection 32 protocols (ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP) or methods to quickly obtain target network surviving host IP, computer name, workgroup, shared resources, network card address, operating system version, website, subdomain name, middleware, open services, routers, switches, databases, printers, etc., a large number of high-risk vulnerability detection modules MS17010, Zimbra, ExchangeC#MIT · Permissive5,342