Hacking projects on GitHub

1. 1
   #1 · trimstray/the-book-of-secret-knowledge

   the-book-of-secret-knowledge

   A massive curated collection of lists, manuals, cheatsheets, blogs, hacks, one-liners and CLI/GUI/web tools that the author gathers from everyday sysadmin, DevOps and security work.

   251K
2. 2
   #2 · Hack-with-Github/Awesome-Hacking

   Awesome-Hacking

   A massive index that links out to dozens of other awesome-lists covering nearly every security domain: android security, bug bounty, fuzzing, malware analysis, OSINT, reverse engineering, web hacking, and more.

   122.9K
3. 3
   #3 · swisskyrepo/PayloadsAllTheThings

   PayloadsAllTheThings

   A massive curated collection of payloads, bypass techniques, and exploitation methodology for web application security testing, pentesting, and CTF challenges.

   81.8K

4. 4

   SecLists

   74.2Kdanielmiessler/SecLists · PHP

   SecLists is a huge collection of ready-made wordlists for security testing: usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells and more, all gathered in one repository.

   • wordlist
   • patterns
   • password
   • hacking-tools
5. 5

   strix

   69.3Kusestrix/strix · Python

   Strix is an open-source tool that uses autonomous AI agents to pentest your application like real hackers: it runs your code dynamically, finds vulnerabilities, and proves them with working exploits instead of just flagging suspicious patterns.

   • ai-hacking
   • ctf-tools
   • ai-penetration-testing
   • pentesting-tools
6. 6

   ImHex

   55.4KWerWolv/ImHex · C++

   ImHex is a hex editor built for reverse engineers, programmers, and anyone analyzing binary data, with a custom pattern language for parsing and highlighting file structures.

   • analyzer
   • multi-platform
   • disassembler
   • forensics
7. 7

   CL4R1T4S

   51.3Kelder-plinius/CL4R1T4S

   CL4R1T4S is a crowd-sourced archive of leaked/extracted system prompts, guidelines, and internal tool definitions from major AI products like ChatGPT, Claude, Gemini, Grok, Perplexity, Cursor, Lovable, and Replit, published for AI transparency.

   • system-prompts
   • transparency
   • prompt-injection
   • system
8. 8

   x64dbg

   49.9Kx64dbg/x64dbg · C++

   x64dbg is an open-source user-mode debugger for Windows, built specifically for reverse engineering and malware analysis.

   • dynamic-analysis
   • x64
   • exploit-development
   • disassembler
9. 9

   reverse-skill

   42.5Kzhaoxuya520/reverse-skill · PowerShell

   It is a skill pack that routes AI coding agents to the right reverse engineering, penetration testing, and security research methodology for a given task (APK, binary, JS, CTF, malware, etc.), checks which tools are installed, and runs a repeatable workflow instead of letting the agent guess commands.

   • malware-analysis
   • ctf
   • binary-analysis
   • powershell
10. 10

    AnyPS5

    42.1Kboykopovar/AnyPS5 · C++

    AnyPS5 is a tool that automatically ports PS5 executables so they run natively on Linux and Windows, without emulation.

    • ps5
    • shader
    • vulkan
    • gplv2
11. 11

    h4cker

    29.8KThe-Art-of-Hacking/h4cker · Jupyter Notebook

    A curated collection of thousands of cybersecurity resources — references, scripts, tools, code, labs, and training material — maintained by Omar Santos as a companion to his books, video courses, and live training.

    • cloud-security
    • vulnerability-management
    • vulnerability-research
    • certification
12. 12

    awesome-pentest

    27.5Kenaqx/awesome-pentest

    A curated collection of penetration testing and offensive-security resources: tools, books, courses, conferences and practice targets for authorized security testing.

    • password-cracking
    • wifi-security
    • privilege-escalation
    • ethical-hacking
13. 13

    awesome-flipperzero

    24.5Kdjsime1/awesome-flipperzero

    A curated list of resources for the Flipper Zero, the pocket multi-tool hacking device, covering firmware, apps, file dumps, cases, modules, and debugging tools.

    • flipperzero
    • hacking-tools
    • firmware
    • pentesting
14. 14

    spiderfoot

    23.6Ksmicallef/spiderfoot · Python

    Open source OSINT automation — it collects intelligence on a target for threat intel and attack surface mapping, whether you are doing red team recon or checking what your organisation has exposed.

    • darknet
    • osint-framework
    • osint-tool
    • recon
15. 15

    unleashed-firmware

    22.5KDarkFlippers/unleashed-firmware · C

    Unleashed is custom firmware for the Flipper Zero multitool — a fork of the official firmware (OFW) that adds extra features and improvements while staying compatible with official apps.

    • flipperzero
    • unofficial
    • bruteforce
    • wireless
16. 16

    TrollStore

    22.4Kopa334/TrollStore · Objective-C

    TrollStore is a permasigned jailed app for iOS that permanently installs any IPA you open in it. It works via an AMFI/CoreTrust bug: iOS doesn't correctly verify code signatures when a binary has multiple signers, so TrollStore can resign apps with its fake root certificate and keep them installed for good.

    • iphone
    • root
    • jailbreak
    • exploit
17. 17

    frida

    22.3Kfrida/frida · Meson

    Frida is a dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers, used to instrument running apps; more at frida.re.

    • injection
    • pip
    • pentesting
    • debugging
18. 18

    mimikatz

    21.9Kgentilkiwi/mimikatz · C

    A small Windows security tool, originally written to learn C. It is best known for extracting plaintext passwords, hashes, PIN codes and Kerberos tickets from memory, and can perform pass-the-hash, pass-the-ticket or build Golden tickets.

    • post-exploitation
    • password
    • visual-studio
    • driver
19. 19

    L1B3RT4S

    21.9Kelder-plinius/L1B3RT4S

    A public collection of jailbreak prompts — the author calls them 'liberation prompts' — meant to make flagship AI models respond without their usual refusals. It is maintained by AI red-teamer elder-plinius.

    • adversarial-attacks
    • ai-hacking
    • llm-jailbreak
    • hack
20. 20

    Ciphey

    21.7Kbee-san/Ciphey · Rust

    ciphey automatically decrypts ciphertext without knowing the key or cipher, decodes encodings and cracks hashes. It is the Rust-built next generation of Ciphey — roughly 7x faster per decode — and the same team intends it to fully replace the original.

    • ctf-tools
    • discord-bot
    • bert
    • ctf
21. 21

    vulhub

    21.4Kvulhub/vulhub · Dockerfile

    Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments: with one command you get a working lab for security research, learning, or demos.

    • dockerfile
    • security-research
    • vulnerability
    • exploit
22. 22

    PEASS-ng

    20.7Kpeass-ng/PEASS-ng · C#

    PEASS-ng is a suite of local privilege escalation enumeration tools: LinPEAS for Linux/Unix/macOS and WinPEAS for Windows. They scan a machine for privesc paths and print misconfigurations with nice colors so you can spot them easily.

    • color
    • redteam
    • infosec
    • script
23. 23

    RustScan

    20.6Kbee-san/RustScan · Rust

    RustScan is an open-source port scanner written in Rust: it finds open ports fast — all 65k ports in as little as 3 seconds — and has a scripting engine for Python, Lua and Shell.

    • scanning
    • kali-linux
    • scanner
    • reconnaissance
24. 24

    bettercap

    20.2Kbettercap/bettercap · Go

    A portable all-in-one framework written in Go for recon and attacks on WiFi, Bluetooth Low Energy, wireless HID, CAN-bus and IPv4/IPv6 networks, built for security researchers and red teamers.

    • redteaming
    • wifi-security
    • mitm
    • redteam
25. 25

    Atmosphere

    20.1KAtmosphere-NX/Atmosphere · C++

    Atmosphère is a work-in-progress custom firmware (CFW) for the Nintendo Switch that replaces and patches core parts of the console's Horizon OS to add new features and customization.

    • bare-metal
    • toolchain
    • console
    • game-modding
26. 26

    90DaysOfCyberSecurity

    20.1Kfarhanashrafdev/90DaysOfCyberSecurity

    A free, 90-day self-paced cybersecurity study plan: daily tasks and curated resources that take you from networking basics to ethical hacking, ending with job-hunting help.

    • learn
    • ethical-hacking
    • resume
    • roadmap
27. 27

    Sandboxie

    19.7Ksandboxie-plus/Sandboxie · C

    Sandboxie is a sandbox-based isolation tool for Windows that lets you run or install untrusted programs in an isolated virtual environment without permanently modifying your drives or registry.

    • malware
    • firewall
    • windows-10
    • windows-11
28. 28

    cheat-engine

    19.3Kcheat-engine/cheat-engine · Pascal

    Cheat Engine is a development environment focused on modding games and applications for personal use. Its repository tags describe it as a memory scanner and debugger.

    • directx
    • debugger
    • scripting
    • modding
29. 29

    GhostTrack

    19.3KHunxByts/GhostTrack · Python

    GhostTrack is a Python command-line OSINT tool used to track a target's approximate location or gather details about a phone number, essentially a piece of information-gathering tooling for recon work.

    • osint-python
    • phone-number
    • termux
    • osint-tool
30. 30

    Micro8

    18KMicropoor/Micro8

    A free, open-source series of penetration-testing lessons written by veteran Chinese pentester Micropoor and published as a GitBook. It covers code audit, web, intranet and domain penetration, tunneling, and log-based tracing.

    • exploitation
    • information-gathering
    • pentest
    • redteam
31. 31

    Awesome-Hacking-Resources

    17.5Kvitalysim/Awesome-Hacking-Resources

    A curated collection of hacking, penetration testing and AI red-teaming resources — courses, YouTube channels, CTF platforms and guides, picked to make you better at offensive security.

    • kali-linux
    • exploit-development
    • privilege-escalation
    • owasp
32. 32

    awesome-hacking

    17.3Kcarpedm20/awesome-hacking

    A curated list of hacking tutorials, tools and resources covering system exploitation, reverse engineering, web security, network security, forensics, cryptography and wargames.

    • hacking-tools
    • forensics
    • ctf
    • network-security
33. 33

    zphisher

    17Khtr-tech/zphisher · HTML

    Zphisher is an automated phishing tool with 30+ ready-made login-page templates, written as a beginners-friendly shell script and intended purely for education.

    • phishing
    • termux
    • tunnel
    • hacking-tool
34. 34

    rdpwrap

    16.9Kstascorp/rdpwrap · Pascal

    RDP Wrapper Library enables Remote Desktop Host support and concurrent RDP sessions on Windows editions that normally restrict it (like Home editions), for home use.

    • rdp
    • windows-tweaker
    • registry-tweaks
    • remote-desktop
35. 35

    hammerspoon

    16.3KHammerspoon/hammerspoon · Objective-C

    Hammerspoon is a bridge between macOS and a Lua scripting engine, letting you automate and control your Mac through extensions that expose system functionality to Lua scripts.

    • osx
    • desktop-automation
    • window-manager
    • scripting
36. 36

    impacket

    16.2Kfortra/impacket · Python

    Impacket is a collection of Python classes for working with network protocols, giving low-level programmatic access to packets and, for some protocols like SMB1-3 and MSRPC, full protocol implementations.

    • network-programming
    • network
    • protocol
    • red-team
37. 37

    evilginx2

    15.7Kkgretzky/evilginx2 · Go

    Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which lets an attacker bypass 2-factor authentication.

    • credentials
    • phishing
    • two-factor-authentication
    • session
38. 38

    hacker-roadmap

    15.7Ksundowndev/hacker-roadmap

    This is a curated roadmap and toolkit index for learning and practicing ethical hacking: it explains what penetration testing is and groups hundreds of security tools, wordlists and references by category (recon, password attacks, wireless, exploitation, web hacking, post-exploitation, frameworks).

    • wordlist
    • password-cracking
    • post-exploitation
    • wireless
39. 39

    social-engineer-toolkit

    15.4Ktrustedsec/social-engineer-toolkit · Python

    The Social-Engineer Toolkit (SET) is an open-source penetration testing framework for authorized social-engineering assessments, giving security teams guided attack vectors to test user awareness and validate controls.

    • pentesting-tools
    • ethical-hacking
    • pentest
    • exploit
40. 40

    Osintgram

    15.1KDatalux/Osintgram · Python

    Osintgram is an OSINT tool for Instagram that lets you collect, analyze, and run reconnaissance on any public Instagram account via an interactive shell, just by giving its nickname.

    • osint-python
    • instagram
    • analysis
    • information-gathering
41. 41

    esp8266_deauther

    15KSpacehuhnTech/esp8266_deauther · C

    ESP8266 Deauther is open-source firmware for the ESP8266 chip that lets you scan nearby WiFi networks, send deauthentication packets to disconnect devices, and spin up dozens of fake WiFi networks to confuse scanners - an affordable platform for testing and learning about WiFi security.

    • esp8266
    • scanning
    • hack
    • wifi-security
42. 42

    awesome-security

    15Ksbilly/awesome-security

    A curated, categorized collection of well-known security resources — software, libraries, documents, books and other cool stuff — maintained by the community in the spirit of awesome-php and awesome-python.

    • forensics
    • web-security
    • malware-analysis
    • firewall
43. 43

    dirsearch

    15Kmaurosoria/dirsearch · Python

    Dirsearch is an advanced command-line web path brute-forcer used to discover hidden files and directories on websites for security testing.

    • wordlist
    • pentest-tool
    • appsec
    • bugbounty
44. 44

    wifiphisher

    14.9Kwifiphisher/wifiphisher · Python

    Wifiphisher is a rogue access point framework for conducting Wi-Fi phishing and man-in-the-middle attacks against wireless clients, used in red team and penetration testing engagements.

    • redteaming
    • phishing
    • wifi-security
    • malware
45. 45

    Reverse-Engineering

    14.8Kmytechnotalent/Reverse-Engineering · Assembly

    A free, massive collection of reverse engineering and hacking tutorials covering x86, x64, ARM (32/64-bit), AVR, RISC-V, Windows internals, malware analysis, embedded systems, Rust, Go, Wasm, and more, delivered as free ebooks/lessons.

    • assembly-language
    • x64
    • risc-v
    • malware
46. 46

    subfinder

    14.6Kprojectdiscovery/subfinder · Go

    Subfinder is a fast passive subdomain enumeration tool that returns valid subdomains for a website by querying passive online sources, built for penetration testers and bug bounty hunters.

    • subdomain-enumeration
    • bugbounty
    • reconnaissance
    • osint
47. 47

    HackBrowserData

    14.6KmoonD4rk/HackBrowserData · Go

    HackBrowserData is a command-line tool that decrypts and exports browser data — passwords, cookies, history, bookmarks, credit cards and more — from Chromium-based browsers, Firefox and Safari, built for security research.

    • pentest-tool
    • safari
    • edge
    • data-extraction
48. 48

    hacker101

    14.6KHacker0x01/hacker101 · SCSS

    Hacker101 is a free online class for web and mobile security from HackerOne (the Hacker0x01 org), aimed at everyone from programmers curious about bug bounties to seasoned security professionals.

    • csrf
    • sql-injection
    • xss
    • mobile-security
49. 49

    awesome-malware-analysis

    14.3Krshipp/awesome-malware-analysis

    A curated 'awesome list' of malware analysis tools and resources, covering sample collection, sandboxes, detection tools, threat intelligence feeds, reverse engineering, and forensics.

    • dynamic-analysis
    • chinese-translation
    • threat-intelligence
    • forensics
50. 50

    juice-shop

    14.1Kjuice-shop/juice-shop · TypeScript

    OWASP Juice Shop is an intentionally insecure web application (a fake online juice store) built for security training, awareness demos, CTFs, and testing security tools.

    • appsec
    • owasp
    • application-security
    • security-audit
51. 51

    PENTESTING-BIBLE

    14KblaCCkHatHacEEkr/PENTESTING-BIBLE

    A curated catalog of over 200 numbered links to pentesting articles, bug bounty write-ups, cheat sheets and other security lists — a reading collection, not software.

    • recon
    • privilege-escalation
    • bug-bounty
    • pentest
52. 52

    awesome-web-security

    13.9Kqazbnm456/awesome-web-security · Python

    A curated list of web security materials and resources, organized by vulnerability class and attack type (XSS, SQL injection, CSRF, SSRF, XXE, deserialization, OAuth, JWT, and more), plus cheatsheets, tools, and write-ups for penetration testing.

    • waf
    • recon
    • appsec
    • information-gathering
53. 53

    DVWA

    13.9Kdigininja/DVWA · PHP

    DVWA (Damn Vulnerable Web Application) is a PHP/MariaDB web app that is deliberately full of security bugs, built as a legal practice target for security pros, students, and developers to learn web application security.

    • sql-injection
    • application-security
    • web-security
    • vulnerability-scanner
54. 54

    WeChatTweak

    13.8Ksunnyyoung/WeChatTweak · Swift

    WeChatTweak is a macOS command-line tool that patches the installed WeChat desktop client to block message-recall notices, disable WeChat's automatic updater, and let you run multiple WeChat instances at once.

    • injection
    • alfred
    • weixin
    • wechat
55. 55

    nmap

    13.8Knmap/nmap · C

    Nmap is the Network Mapper — a free, open-source tool for network discovery and security scanning. It finds live hosts, open ports, and the services running on them, from a single machine up to whole subnets.

    • service-discovery
    • socket
    • osx
    • asynchronous
56. 56

    pwntools

    13.8KGallopsled/pwntools · Python

    Pwntools is a CTF framework and exploit development library written in Python, built for rapid prototyping with the goal of making exploit writing as simple as possible.

    • assembly
    • ctf
    • exploit
    • python3
57. 57

    GTFOBins.github.io

    13.8KGTFOBins/GTFOBins.github.io · YAML

    GTFOBins is a curated list of Unix-like executables that can be abused to bypass local security restrictions in misconfigured systems — for example, binaries a restricted user can turn into a root shell.

    • post-exploitation
    • exploitation
    • privilege-escalation
    • pentest
58. 58

    Photon

    13.3Ks0md3v/Photon · Python

    Photon is a fast web crawler built for OSINT (open-source intelligence) gathering, extracting URLs, emails, social media accounts, secret keys, subdomains and more while it crawls a target site.

    • osint-tools
    • spider
    • web-scraper
    • information-gathering
59. 59

    mastg

    13.3KOWASP/mastg · Python

    A comprehensive OWASP manual for mobile app security testing and reverse engineering. It gives technical processes for verifying the weaknesses listed in the OWASP Mobile Security Weakness Enumeration (MASWE).

    • dynamic-analysis
    • android-application
    • network-analysis
    • checklist
60. 60

    PowerSploit

    13.1KPowerShellMafia/PowerSploit · PowerShell

    PowerSploit is a collection of PowerShell modules that penetration testers use during all phases of an assessment, covering code execution, persistence, privilege escalation, credential theft, exfiltration and reconnaissance on Windows systems.

    • persistence
    • credentials
    • post-exploitation
    • encoding
61. 61

    hexstrike-ai

    12.9K0x4m4/hexstrike-ai · Python

    HexStrike AI MCP Agents is an MCP server that lets AI agents like Claude, GPT, or Copilot autonomously run 150+ real cybersecurity tools for automated pentesting, bug bounty hunting, CTF challenges, and vulnerability discovery.

    • ai-hacking
    • ctf-tools
    • ai-penetration-testing
    • ai-security-tool
62. 62

    atomic-red-team

    12.7Kredcanaryco/atomic-red-team · C

    Atomic Red Team is a library of small, portable security tests, each mapped to a specific MITRE ATT&CK technique, that security teams run to check whether their defenses actually detect real attacker behavior.

    • mitre-attack
    • offensive-security
    • red-team
    • ruby
63. 63

    wifi-cracking

    12.7Kbrannondorsey/wifi-cracking

    A step-by-step tutorial for cracking WPA/WPA2 Wi-Fi passwords: capture a handshake with Airodump-ng, then crack it offline with Aircrack-ng or Hashcat.

    • password-cracking
    • wireless
    • wifi-security
    • cracking
64. 64

    urh

    12.6Kjopohl/urh · Python

    URH (Universal Radio Hacker) is a suite for investigating wireless protocols: it captures radio signals via SDR hardware, demodulates them with automatic modulation detection, and helps you reverse-engineer the bits and bytes flying over the air.

    • sdr
    • wireless
    • radio
    • fuzzing
65. 65

    hacktricks

    12.6KHackTricks-wiki/hacktricks · JavaScript

    A free, open wiki of hacking tricks and techniques — everything the author has learnt from CTFs, real-world apps and security research, organized into a browsable reference with 12.5k+ GitHub stars.

    • pentesting-tools
    • exploitation
    • recon
    • privilege-escalation
66. 66

    thc-hydra

    12.4Kvanhauser-thc/thc-hydra · C

    Hydra is a parallelized network login cracker by van Hauser / THC: a proof-of-concept tool showing researchers and security consultants how easily a remote system can be broken into through weak passwords. It supports over 50 protocols.

    • brute-force
    • bruteforce
    • password-cracking
    • pentest-tool
67. 67

    fsociety

    12.3KManisso/fsociety · Python

    fsociety is a penetration testing toolkit that bundles dozens of existing hacking tools (Nmap, sqlmap, WPScan, Reaver, etc.) behind one menu-driven script, inspired by the tools used in the 'Mr. Robot' TV series.

    • finder
    • penetration-testing-tools
    • post-exploitation
    • exploitation
68. 68

    OSINT-Framework

    12.3Klockfale/OSINT-Framework · JavaScript

    OSINT Framework is a curated, browsable index of free OSINT (open-source intelligence) tools and resources, organized into a clickable category tree so you can find the right tool for a given task.

    • osint-framework
    • threat-intelligence
    • directory
    • reconnaissance
69. 69

    Resources-for-Beginner-Bug-Bounty-Hunters

    12.3Knahamsec/Resources-for-Beginner-Bug-Bounty-Hunters

    A curated collection of resources for people getting started with web hacking and bug bounty hunting, including blog posts, talks, books, tools, labs and vulnerability-type guides.

    • xss
    • mobile-security
    • hacking-tools
    • bugbounty
70. 70

    movies-for-hackers

    12Kk4m4/movies-for-hackers · Shell

    It is a curated list of movies every hacker and cyberpunk fan should watch, with each title scored by its IMDb rating — plus a section of TV shows.

    • movie
    • movies
    • tv
    • collection
71. 71

    awesome-ctf

    11.9Kapsdehal/awesome-ctf · JavaScript

    A curated list of frameworks, libraries, tools, and resources for Capture The Flag (CTF) competitions, covering everything from building challenges to solving them.

    • ctf-tools
    • forensics
    • ctf
    • exploit
72. 72

    TheFatRat

    11.5Kscreetsec/TheFatRat · C

    TheFatRat is an exploiting tool that compiles malware from famous payloads — an easy way to generate backdoors built to slip past most anti-virus software.

    • post-exploitation
    • kali-linux
    • remote
    • malware
73. 73

    Sn1per

    11.5K1N3/Sn1per · Shell

    Sn1per is an offensive-security platform that bundles reconnaissance, vulnerability scanning, exploitation and reporting into one workspace, orchestrating 600+ exploits and 90+ third-party tools for pentesters and attack-surface-management teams.

    • osint-framework
    • pentest-tool
    • pentesting-tools
    • osint-tool
74. 74

    awesome-hacker-search-engines

    11.3Kedoardottt/awesome-hacker-search-engines · Shell

    A curated list of search engines useful for penetration testing, vulnerability assessment, red/blue team operations, bug bounty hunting, and general OSINT work.

    • redteaming
    • vulnerabilities
    • osint-tool
    • cve
75. 75

    beef

    11.1Kbeefproject/beef · JavaScript

    BeEF (Browser Exploitation Framework) is a penetration testing tool that focuses on the web browser, letting a tester assess the real security posture of a target by using client-side attack vectors instead of network-perimeter exploits.

    • context
    • exploitation
    • pentest
    • website
76. 76

    _s

    11KAutomattic/_s · CSS

    _s (Underscores) is an archived, officially inactive WordPress starter theme by Automattic, meant as a blank slate developers hack into their own custom theme rather than use as-is.

    • composer
    • lint
    • lean
    • navigation
77. 77

    webshell

    10.8Ktennc/webshell · PHP

    It's a community collection of webshells - scripts that give you control of a web server once uploaded - covering all the common server-side languages and maintained by tennc with 10k+ stars.

    • waf
    • perl
    • hacking-tools
    • anti-detection
78. 78

    Red-Teaming-Toolkit

    10.8Kinfosecn1nja/Red-Teaming-Toolkit

    It is a curated list of cutting-edge open-source security tools for red teamers and threat hunters, covering the full attack lifecycle from reconnaissance to exfiltration.

    • command-and-control
    • credentials
    • phishing
    • privilege-escalation
79. 79

    bbot

    10.7Kblacklanternsecurity/bbot · Python

    BBOT is a recursive internet scanner for hackers — it automates recon, bug bounty work and attack surface management (ASM), inspired by Spiderfoot.

    • subdomain-enumeration
    • osint-framework
    • bruteforce
    • recon
80. 80

    reverse-engineering

    10.6KwtsxDev/reverse-engineering

    A curated list of reverse engineering resources: books, courses, practice grounds, and a big toolbox section spanning hex editors, disassemblers, debuggers, and dynamic analysis tools.

    • disassembler
    • malware
    • forensics
    • decompiler
81. 81

    BloodHound-Legacy

    10.6KSpecterOps/BloodHound-Legacy · PowerShell

    BloodHound Legacy is a security tool that uses graph theory to map hidden relationships and attack paths inside an Active Directory environment, helping find the shortest route to Domain Admin — hence its tagline 'Six Degrees of Domain Admin'.

    • neo4j
    • graph-database
    • reconnaissance
    • graph
82. 82

    awesome-honeypots

    10.6Kparalax/awesome-honeypots · Python

    A curated, categorized list of honeypot software and related tools used by security researchers to deceive attackers, log their behavior, and study exploitation attempts.

    • incident-response
    • threat-intelligence
    • malware
    • forensics
83. 83

    nishang

    10.2Ksamratashok/nishang · PowerShell

    Nishang is a framework and large collection of PowerShell scripts and payloads for offensive security, penetration testing, and red teaming, covering every phase of an engagement.

    • malware
    • redteam
    • infosec
    • exploit
84. 84

    Cybersecurity-Projects

    8.3KCarterPerez-dev/Cybersecurity-Projects · Go

    This is a growing collection of 70 hands-on cybersecurity projects with full source code, organized into four difficulty tiers, plus 10 certification roadmaps and curated learning resources for cybersecurity careers.

    • certification
    • malware
    • red-team
    • agplv3
85. 85

    android-reverse-engineering-skill

    8.2KSimoneAvogadro/android-reverse-engineering-skill · Shell

    A Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs used by the app — Retrofit endpoints, OkHttp calls, hardcoded URLs, and authentication patterns — so you can document and reproduce them without the original source code.

    • mobile-security
    • decompiler
    • penetration-testing
    • static-analysis
86. 86

    Claude-Red

    7.6KSnailSploit/Claude-Red · Python

    claude-red is a curated library of offensive security skills for the Claude Skills system: structured SKILL.md files that prime Claude with expert-level methodology for one attack surface each, from SQLi to shellcode.

    • vulnerability-research
    • phishing
    • post-exploitation
    • pentesting-tools
87. 87

    AirCard

    6.7KMak5er/AirCard · Swift

    AirCard is a macOS app that lets you customize Apple Wallet card skins and iOS lockscreen passcode keypad themes on iOS 18+ without jailbreaking your iPhone.

    • universal
    • iphone
    • x86
    • jailbreak
88. 88

    Decepticon

    6.3KBitterSecurity/Decepticon · Python

    Decepticon is a professional autonomous Red Team agent that runs full attack chains — reconnaissance, exploitation, privilege escalation, lateral movement, and C2 — the way a real adversary would, instead of just scanning and printing a report.

    • ai-penetration-testing
    • command-and-control
    • kali-linux
    • mitre-attack
89. 89

    Agentic-Bug-Hunter

    5.4Kawarexone/Agentic-Bug-Hunter · Python

    Agentic Bug Hunter is an AI-powered bug bounty toolkit that runs recon, tests for vulnerabilities, validates findings against a strict gate, and writes submission-ready reports for HackerOne, Bugcrowd, Intigriti, or Immunefi, right from your terminal.

    • recon
    • bug-bounty
    • claude-ai
    • ethical-hacking
90. 90

    device-activity-tracker

    5.2Kgommzystudio/device-activity-tracker · TypeScript

    This is a proof-of-concept security research tool that monitors WhatsApp and Signal users by measuring the Round-Trip Time (RTT) of message delivery receipts, revealing whether a target's device is actively in use, idle, or offline.

    • messenger
    • phone-number
    • poc
    • surveillance
91. 91

    exploitarium

    5.2Kbikini/exploitarium · Python

    Exploitarium is a single consolidated archive of the author's public proof-of-concept exploits and vulnerability research writeups, merging dozens of their former standalone PoC repos into one place.

    • cve
    • exploit-development
    • fuzzing
    • ethical-hacking
92. 92

    dirtyfrag

    5.1KV4bel/dirtyfrag · C

    Dirty Frag is a proof-of-concept Linux kernel local privilege escalation exploit that chains two page-cache write vulnerabilities (CVE-2026-43284 and CVE-2026-43500) to obtain root on major Linux distributions.

    • vulnerability-research
    • poc
    • exploitation
    • cve
93. 93

    reverse-SynthID

    5Kaloshdenny/reverse-SynthID · Python

    reverse-SynthID reverse-engineers Google's SynthID watermark embedded in Gemini-generated images using signal processing and spectral analysis, and ships tools that detect and surgically bypass that watermark without any access to Google's proprietary encoder/decoder.

    • adversarial-attacks
    • image-manipulation
    • forensics
    • bypass
94. 94

    METATRON

    4.2Ksooryathejas/METATRON · Python

    Metatron is a CLI-based AI penetration testing assistant that runs real recon tools against a target and lets a locally-hosted LLM analyze the results, suggest exploits, and recommend fixes, with no cloud or API keys involved.

    • mariadb
    • reconnaissance
    • vulnerability
    • local-ai
95. 95

    copy-fail-CVE-2026-31431

    4.1Ktheori-io/copy-fail-CVE-2026-31431 · Python

    This repository is a technical writeup and proof-of-concept for CVE-2026-31431, a 9-year-old Linux kernel local privilege escalation (LPE) vulnerability found by Theori's AI vulnerability research tool, Xint Code.

    • privilege-escalation
    • linux-kernel
    • ethical-hacking
    • redteam
96. 96

    misaka26

    4Kstraight-tamago/misaka26

    misaka26 is an iOS/iPadOS customization tool that uses the same underlying bug as TrollRestore to unlock hidden system features on supported devices, running iOS 16.0 through 26.1 and the 26.2 beta 1, without a full jailbreak.

    • tweaks
    • jailbreak
    • exploit
    • ios-app
97. 97

    grok-bot-0.18-reconstructed

    3.5Kb-nnett/grok-bot-0.18-reconstructed · TypeScript

    It's an unofficial, source-oriented reconstruction of the publicly shipped Grok Bot 0.18.0 macOS app, rebuilt into readable TypeScript sources and extended with an inference router, MCP tools, local usage tracking, and an optional local Docker sandbox.

    • llm-router
    • openrouter
    • sandbox
    • reverse-engineering
98. 98

    redamon

    3.1Ksamugit83/redamon · Python

    RedAmon is an open-source, self-hosted AI framework that chains reconnaissance, exploitation and post-exploitation into one pipeline, maps the attack surface into a Neo4j graph, and then triages findings and opens GitHub pull requests that fix what it discovers.

    • penetration-testing-tools
    • kali-linux
    • exploitation
    • neo4j
99. 99

    jailbreaks

    3.1Ktogg53192-cmd/jailbreaks

    This is a personal collection of jailbreak prompts meant to bypass the safety restrictions of AI chatbots like ChatGPT.

    • prompt-injection
    • ai-safety
    • jailbreak
    • ai-security
100. 100

     dsh-infinite-gen-5

     3KMinglink/dsh-infinite-gen-5 · JavaScript

     This is a system-prompt injection plugin for the DeepSeek Harness (dsh) ecosystem that tries to bypass DeepSeek-V4.1 Flash's safety guardrails, framed as a red-team robustness benchmark suite for studying model defenses.

     • system-prompt
     • prompt-injection
     • red-teaming
     • llm-security

Showing the 100 most-starred of 135. See every one in the catalog.

• security977
• cybersecurity244
• security-tools281
• penetration-testing125
• pentesting112
• reverse-engineering222
• open-source5,666
• linux4,181
• windows3,401
• exploit51
• red-team78
• macos3,544
• offensive-security77
• python2,396
• hacking-tool75
• cli2,227
• mit3,311
• resources706
• curated-list634
• tool1,294
• awesome-list497
• docker1,657
• osint68
• terminal1,100