Topics / #bruteforce
Bruteforce projects on GitHub
Password brute forcing and attack tools used in pentesting.
As of , the most-starred Bruteforce projects on GitHub are SafeLine (22.8K stars), unleashed-firmware (22.5K stars) and fail2ban (18.8K stars). GitHub.Locker tracks 8 Bruteforce repositories with 126.2K stars combined. The fastest-growing on October 16 was SafeLine, with +12 stars in a day.
Hot right now
Most stars gained in a day · Oct 16
+12SafeLine
chaitin/SafeLine · ★ 22.8KSafeLine is a self-hosted web application firewall (WAF) and reverse proxy that protects your web apps from attacks and exploits by filtering and monitoring HTTP traffic.
+12fscan
shadow1ng/fscan · ★ 14.7Kfscan is an open-source intranet scanner written in Go: one command runs an all-round internal-network audit — host discovery, port scanning, service identification, weak-password brute force and vulnerability detection.
unleashed-firmware
DarkFlippers/unleashed-firmware · ★ 22.5KUnleashed is custom firmware for the Flipper Zero multitool — a fork of the official firmware (OFW) that adds extra features and improvements while staying compatible with official apps.
+7fail2ban
fail2ban/fail2ban · ★ 18.8KFail2Ban is a daemon that scans log files like /var/log/auth.log, spots hosts making too many failed login attempts, and bans them by updating system firewall rules for a configurable amount of time.
The all-time top
8 projects · by stars
- 22.8K
#1 · chaitin/SafeLineSafeLine
SafeLine is a self-hosted web application firewall (WAF) and reverse proxy that protects your web apps from attacks and exploits by filtering and monitoring HTTP traffic.
- 22.5K
#2 · DarkFlippers/unleashed-firmware
unleashed-firmware
Unleashed is custom firmware for the Flipper Zero multitool — a fork of the official firmware (OFW) that adds extra features and improvements while staying compatible with official apps.
- 18.8K
#3 · fail2ban/fail2banfail2ban
Fail2Ban is a daemon that scans log files like /var/log/auth.log, spots hosts making too many failed login attempts, and bans them by updating system firewall rules for a configurable amount of time.
- 4

fscan
14.7Kshadow1ng/fscan · Gofscan is an open-source intranet scanner written in Go: one command runs an all-round internal-network audit — host discovery, port scanning, service identification, weak-password brute force and vulnerability detection.
- 5

routersploit
13.3Kthreat9/routersploit · PythonRouterSploit is an open-source exploitation framework built specifically for testing the security of embedded devices like routers.
- 6

thc-hydra
12.4Kvanhauser-thc/thc-hydra · CHydra is a parallelized network login cracker by van Hauser / THC: a proof-of-concept tool showing researchers and security consultants how easily a remote system can be broken into through weak passwords. It supports over 50 protocols.
- 7

Sublist3r
11.1Kaboul3la/Sublist3r · PythonSublist3r is a Python tool that enumerates subdomains of a target website using OSINT, helping penetration testers and bug hunters gather subdomains for a domain they are targeting.
- 8
bbot
10.7Kblacklanternsecurity/bbot · PythonBBOT is a recursive internet scanner for hackers — it automates recon, bug bounty work and attack surface management (ASM), inspired by Spiderfoot.
Related topics
Often tagged together