Topics / #cybersecurity-tools

Cybersecurity-tools projects on GitHub

Assorted cybersecurity utilities for recon and pentesting.

As of , the most-starred Cybersecurity-tools projects on GitHub are strix (72K stars), Cybersecurity-Projects (8.6K stars) and user-scanner (5.5K stars). GitHub.Locker tracks 5 Cybersecurity-tools repositories with 86.5K stars combined. The fastest-growing on October 25 was strix, with +248 stars in a day.

5Projects
86.5KStars in total
+303Stars in a day
Browse in the catalog →github.com/topics/cybersecurity-tools ↗

Hot right now

Most stars gained in a day · Oct 25

+248

strix

usestrix/strix · ★ 72K

Strix is an open-source tool that uses autonomous AI agents to pentest your application like real hackers: it runs your code dynamically, finds vulnerabilities, and proves them with working exploits instead of just flagging suspicious patterns.

+43

Cybersecurity-Projects

CarterPerez-dev/Cybersecurity-Projects · ★ 8.6K

This is a growing collection of 70 hands-on cybersecurity projects with full source code, organized into four difficulty tiers, plus 10 certification roadmaps and curated learning resources for cybersecurity careers.

+7

php2shell

devploit/php2shell · ★ 161

PHP2Shell is a research toolkit for CVE-2026-109618 / CVE-2026-109619, a pre-auth remote code execution bug in PHP's session.upload_progress feature on mod_php (Apache). It packages a version-aware dispatcher, per-build exploit profiles, reproducible Docker labs, a heap-calibration factory and detection guidance around the public proof-of-concept research by 9bie.

+5

user-scanner

kaifcodec/user-scanner · ★ 5.5K

User Scanner is an OSINT (open-source intelligence) CLI tool that takes an email address or username and scans it across 2720+ platforms (210+ email vectors, 2510+ username vectors) to map digital footprints, scrape profile metadata, and surface linked accounts.

The all-time top

5 projects · by stars

  1. #1 · usestrix/strix

    strix

    Strix is an open-source tool that uses autonomous AI agents to pentest your application like real hackers: it runs your code dynamically, finds vulnerabilities, and proves them with working exploits instead of just flagging suspicious patterns.

    72K
  2. #2 · CarterPerez-dev/Cybersecurity-Projects

    Cybersecurity-Projects

    This is a growing collection of 70 hands-on cybersecurity projects with full source code, organized into four difficulty tiers, plus 10 certification roadmaps and curated learning resources for cybersecurity careers.

    8.6K
  3. #3 · kaifcodec/user-scanner

    user-scanner

    User Scanner is an OSINT (open-source intelligence) CLI tool that takes an email address or username and scans it across 2720+ platforms (210+ email vectors, 2510+ username vectors) to map digital footprints, scrape profile metadata, and surface linked accounts.

    5.5K
  1. 4

    Claude-AD

    215ADScanPro/Claude-AD

    Claude-AD is a Claude Code plugin that gives Claude the methodology for an internal Active Directory penetration test: skills, agents and slash commands covering Kerberoasting, ADCS ESC1-17, DCSync, ACL abuse, NTLM relay and delegation abuse, each with OPSEC and telemetry notes.

  2. 5

    php2shell

    161devploit/php2shell · Python

    PHP2Shell is a research toolkit for CVE-2026-109618 / CVE-2026-109619, a pre-auth remote code execution bug in PHP's session.upload_progress feature on mod_php (Apache). It packages a version-aware dispatcher, per-build exploit profiles, reproducible Docker labs, a heap-calibration factory and detection guidance around the public proof-of-concept research by 9bie.

Often tagged together