Topics / #brute-force

Brute-force projects on GitHub

Brute-force attacks against logins and network services

As of , the most-starred Brute-force projects on GitHub are gobuster (14.2K stars), thc-hydra (12.4K stars) and xray (11.8K stars). GitHub.Locker tracks 5 Brute-force repositories with 48.7K stars combined. The fastest-growing on October 17 was thc-hydra, with +4 stars in a day.

5Projects
48.7KStars in total
+12Stars in a day
Browse in the catalog →github.com/topics/brute-force ↗

Hot right now

Most stars gained in a day · Oct 17

+4

thc-hydra

vanhauser-thc/thc-hydra · ★ 12.4K

Hydra is a parallelized network login cracker by van Hauser / THC: a proof-of-concept tool showing researchers and security consultants how easily a remote system can be broken into through weak passwords. It supports over 50 protocols.

+3

OneForAll

shmilylty/OneForAll · ★ 10.1K

OneForAll is a powerful subdomain collection tool: point it at a target domain and it gathers subdomains from many sources — a core reconnaissance step in penetration testing, which is why the author built it.

+3

open-crypto-puzzles

floflo777/open-crypto-puzzles · ★ 207

A catalog of real, unsolved crypto puzzles with wallets still funded on-chain (about 6 BTC, 13 ETH, 1,900 AR across 31 puzzles), each with the author's own research: the escrow address, the puzzle author's clues, what has been tried, and where the trail goes cold.

+2

gobuster

OJ/gobuster · ★ 14.2K

Gobuster is a fast, multi-threaded command-line tool written in Go for brute-forcing web directories/files, DNS subdomains, and virtual hosts, plus enumerating S3/GCS cloud storage buckets and TFTP files.

The all-time top

5 projects · by stars

  1. #1 · OJ/gobuster

    gobuster

    Gobuster is a fast, multi-threaded command-line tool written in Go for brute-forcing web directories/files, DNS subdomains, and virtual hosts, plus enumerating S3/GCS cloud storage buckets and TFTP files.

    14.2K
  2. #2 · vanhauser-thc/thc-hydra

    thc-hydra

    Hydra is a parallelized network login cracker by van Hauser / THC: a proof-of-concept tool showing researchers and security consultants how easily a remote system can be broken into through weak passwords. It supports over 50 protocols.

    12.4K
  3. #3 · chaitin/xray

    xray

    xray is a security assessment tool built by Chaitin for scanning common web vulnerabilities and running custom PoCs against targets.

    11.8K
  1. 4

    OneForAll

    10.1Kshmilylty/OneForAll · Python

    OneForAll is a powerful subdomain collection tool: point it at a target domain and it gathers subdomains from many sources — a core reconnaissance step in penetration testing, which is why the author built it.

  2. 5

    open-crypto-puzzles

    207floflo777/open-crypto-puzzles · Python

    A catalog of real, unsolved crypto puzzles with wallets still funded on-chain (about 6 BTC, 13 ETH, 1,900 AR across 31 puzzles), each with the author's own research: the escrow address, the puzzle author's clues, what has been tried, and where the trail goes cold.

Often tagged together