Topics / #hacking-tool

Hacking-tool projects on GitHub

Security utilities used for penetration testing, denial of service, and offensive hacking tasks.

As of , the most-starred Hacking-tool projects on GitHub are Win11Debloat (59.4K stars), x64dbg (49.9K stars) and HEU_KMS_Activator (44K stars). GitHub.Locker tracks 75 Hacking-tool repositories with 852.7K stars combined. The fastest-growing on October 16 was GhostTrack, with +122 stars in a day.

75Projects
852.7KStars in total
+719Stars in a day
Browse in the catalog →github.com/topics/hacking-tool ↗

Hot right now

Most stars gained in a day · Oct 16

+122

GhostTrack

HunxByts/GhostTrack · ★ 19.3K

GhostTrack is a Python command-line OSINT tool used to track a target's approximate location or gather details about a phone number, essentially a piece of information-gathering tooling for recon work.

+77

ai-security-tool

ZeroDayEvil/ai-security-tool · ★ 840

AI Security Tool is an open-source, cross-platform terminal and vulnerability scanner that combines a multi-protocol connectivity client (SSH, RDP, VNC, etc.), CVE/SBOM supply-chain auditing, and 12+ autonomous AI agents (DeepSeek, OpenAI) to automate pentesting, Red Team, and CTF workflows.

+67

Win11Debloat

Raphire/Win11Debloat · ★ 59.4K

Win11Debloat is a lightweight PowerShell script that removes pre-installed apps, disables telemetry, and tweaks the interface to declutter and customize Windows 10 and Windows 11.

+32

MFG-Unlocker

dashdogy/MFG-Unlocker · ★ 1.4K

An experimental Windows mod that unlocks higher DLSS Multi Frame Generation (MFG) multipliers, up to 6X, for games on NVIDIA RTX 40 series GPUs that already support Streamline DLSS Frame Generation.

The all-time top

75 projects · by stars

  1. #1 · Raphire/Win11Debloat

    Win11Debloat

    Win11Debloat is a lightweight PowerShell script that removes pre-installed apps, disables telemetry, and tweaks the interface to declutter and customize Windows 10 and Windows 11.

    59.4K
  2. #2 · x64dbg/x64dbg

    x64dbg

    x64dbg is an open-source user-mode debugger for Windows, built specifically for reverse engineering and malware analysis.

    49.9K
  3. #3 · zbezj/HEU_KMS_Activator

    HEU_KMS_Activator

    This is 'HEU_KMS_Activator', a tool whose name indicates it performs KMS (Key Management Service) based activation, most likely for Windows and Microsoft Office, though the README itself does not provide a description.

    44K
  1. 4

    metasploit-framework

    39.2Krapid7/metasploit-framework · Ruby

    Metasploit Framework is an open-source penetration testing framework written in Ruby — one of the best-known security toolkits on GitHub, with about 39,000 stars.

  2. 5

    sqlmap

    38.7Ksqlmapproject/sqlmap · Python

    sqlmap is an open-source penetration testing tool that automates detecting and exploiting SQL injection flaws and taking over the underlying database server.

  3. 6

    masscan

    26.1Krobertdavidgraham/masscan · C

    Masscan is an Internet-scale TCP port scanner that transmits SYN packets asynchronously and can scan the entire IPv4 Internet in under 5 minutes, sending up to 10 million packets per second from a single machine.

  4. 7

    radare2

    25.1Kradareorg/radare2 · C

    r2 (radare2) is a libre reverse engineering framework for Unix-like systems: a set of libraries, tools and plugins for analyzing, disassembling, emulating, debugging and modifying binaries.

  5. 8

    unleashed-firmware

    22.5KDarkFlippers/unleashed-firmware · C

    Unleashed is custom firmware for the Flipper Zero multitool — a fork of the official firmware (OFW) that adds extra features and improvements while staying compatible with official apps.

  6. 9

    mimikatz

    21.9Kgentilkiwi/mimikatz · C

    A small Windows security tool, originally written to learn C. It is best known for extracting plaintext passwords, hashes, PIN codes and Kerberos tickets from memory, and can perform pass-the-hash, pass-the-ticket or build Golden tickets.

  7. 10

    Ciphey

    21.7Kbee-san/Ciphey · Rust

    ciphey automatically decrypts ciphertext without knowing the key or cipher, decodes encodings and cracks hashes. It is the Rust-built next generation of Ciphey — roughly 7x faster per decode — and the same team intends it to fully replace the original.

  8. 11

    cheat-engine

    19.3Kcheat-engine/cheat-engine · Pascal

    Cheat Engine is a development environment focused on modding games and applications for personal use. Its repository tags describe it as a memory scanner and debugger.

  9. 12

    GhostTrack

    19.3KHunxByts/GhostTrack · Python

    GhostTrack is a Python command-line OSINT tool used to track a target's approximate location or gather details about a phone number, essentially a piece of information-gathering tooling for recon work.

  10. 13

    zphisher

    17Khtr-tech/zphisher · HTML

    Zphisher is an automated phishing tool with 30+ ready-made login-page templates, written as a beginners-friendly shell script and intended purely for education.

  11. 14

    ffuf

    16.9Kffuf/ffuf · Go

    ffuf is a fast web fuzzer written in Go — a command-line tool that sends many crafted requests to a target to discover directories, virtual hosts, and fuzzable GET/POST parameters.

  12. 15

    MHDDoS

    16.9KMatrixTM/MHDDoS · Python

    MHDDoS is a Python 3 DDoS testing toolkit with 57 attack methods spanning Layer 7 (HTTP floods, Cloudflare/OVH bypasses) and Layer 4/3 (TCP, UDP, SYN, amplification attacks), meant for authorized security testing and research.

  13. 16

    PentestGPT

    16KGreyDGL/PentestGPT · Python

    PentestGPT is an agentic framework that uses large language models to run automated penetration testing and solve CTF challenges, working through staged phases like recon, exploitation and reporting.

  14. 17

    evilginx2

    15.7Kkgretzky/evilginx2 · Go

    Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which lets an attacker bypass 2-factor authentication.

  15. 18

    hacker-roadmap

    15.7Ksundowndev/hacker-roadmap

    This is a curated roadmap and toolkit index for learning and practicing ethical hacking: it explains what penetration testing is and groups hundreds of security tools, wordlists and references by category (recon, password attacks, wireless, exploitation, web hacking, post-exploitation, frameworks).

  16. 19

    social-engineer-toolkit

    15.4Ktrustedsec/social-engineer-toolkit · Python

    The Social-Engineer Toolkit (SET) is an open-source penetration testing framework for authorized social-engineering assessments, giving security teams guided attack vectors to test user awareness and validate controls.

  17. 20

    XSStrike

    15.2Ks0md3v/XSStrike · Python

    XSStrike is a Cross Site Scripting (XSS) detection suite built around four hand-written parsers, an intelligent payload generator, a fuzzing engine, and a fast crawler. Instead of just firing generic payloads like most scanners, it analyzes the live response and crafts payloads guaranteed to work through context analysis.

  18. 21

    esp8266_deauther

    15KSpacehuhnTech/esp8266_deauther · C

    ESP8266 Deauther is open-source firmware for the ESP8266 chip that lets you scan nearby WiFi networks, send deauthentication packets to disconnect devices, and spin up dozens of fake WiFi networks to confuse scanners - an affordable platform for testing and learning about WiFi security.

  19. 22

    dirsearch

    15Kmaurosoria/dirsearch · Python

    Dirsearch is an advanced command-line web path brute-forcer used to discover hidden files and directories on websites for security testing.

  20. 23

    wifiphisher

    14.9Kwifiphisher/wifiphisher · Python

    Wifiphisher is a rogue access point framework for conducting Wi-Fi phishing and man-in-the-middle attacks against wireless clients, used in red team and penetration testing engagements.

  21. 24

    binwalk

    14.5KReFirmLabs/binwalk · Rust

    Binwalk is a firmware analysis tool that can identify, and optionally extract, files and data that have been embedded inside other files.

  22. 25

    gobuster

    14.2KOJ/gobuster · Go

    Gobuster is a fast, multi-threaded command-line tool written in Go for brute-forcing web directories/files, DNS subdomains, and virtual hosts, plus enumerating S3/GCS cloud storage buckets and TFTP files.

  23. 26

    wechat_jump_game

    13.8Kwangshub/wechat_jump_game · Python

    A Python script that plays WeChat's mini-game 'Jump Jump' (跳一跳) automatically, using image recognition to measure jump distance and ADB to control the phone screen.

  24. 27

    PowerSploit

    13.1KPowerShellMafia/PowerSploit · PowerShell

    PowerSploit is a collection of PowerShell modules that penetration testers use during all phases of an assessment, covering code execution, persistence, privilege escalation, credential theft, exfiltration and reconnaissance on Windows systems.

  25. 28

    ESP32Marauder

    12.8Kjustcallmekoko/ESP32Marauder · C++

    ESP32 Marauder is a suite of offensive and defensive WiFi and Bluetooth tools that run as firmware on an ESP32 microcontroller, used for things like wardriving, scanning, and wireless security testing.

  26. 29

    wifi-cracking

    12.7Kbrannondorsey/wifi-cracking

    A step-by-step tutorial for cracking WPA/WPA2 Wi-Fi passwords: capture a handshake with Airodump-ng, then crack it offline with Aircrack-ng or Hashcat.

  27. 30

    thc-hydra

    12.4Kvanhauser-thc/thc-hydra · C

    Hydra is a parallelized network login cracker by van Hauser / THC: a proof-of-concept tool showing researchers and security consultants how easily a remote system can be broken into through weak passwords. It supports over 50 protocols.

  28. 31

    Resources-for-Beginner-Bug-Bounty-Hunters

    12.3Knahamsec/Resources-for-Beginner-Bug-Bounty-Hunters

    A curated collection of resources for people getting started with web hacking and bug bounty hunting, including blog posts, talks, books, tools, labs and vulnerability-type guides.

  29. 32

    xray

    11.8Kchaitin/xray · Vue

    xray is a security assessment tool built by Chaitin for scanning common web vulnerabilities and running custom PoCs against targets.

  30. 33

    TheFatRat

    11.5Kscreetsec/TheFatRat · C

    TheFatRat is an exploiting tool that compiles malware from famous payloads — an easy way to generate backdoors built to slip past most anti-virus software.

  31. 34

    GhidraMCP

    11.4KLaurieWired/GhidraMCP · Java

    GhidraMCP is a Model Context Protocol server that lets LLMs autonomously reverse engineer applications by exposing Ghidra's core functionality (decompiling, renaming, listing imports/exports) to any MCP client.

  32. 35

    pwndbg

    11.1Kpwndbg/pwndbg · Python

    A plug-in for GDB and LLDB that makes debugging far less painful for low-level developers, hardware hackers, reverse-engineers and exploit developers — it adds the utilities vanilla debuggers are missing.

  33. 36

    beef

    11.1Kbeefproject/beef · JavaScript

    BeEF (Browser Exploitation Framework) is a penetration testing tool that focuses on the web browser, letting a tester assess the real security posture of a target by using client-side attack vectors instead of network-perimeter exploits.

  34. 37

    Sublist3r

    11.1Kaboul3la/Sublist3r · Python

    Sublist3r is a Python tool that enumerates subdomains of a target website using OSINT, helping penetration testers and bug hunters gather subdomains for a domain they are targeting.

  35. 38

    LaZagne

    11KAlessandroZ/LaZagne · Python

    LaZagne is an open-source tool that retrieves passwords stored locally on a computer by reverse-engineering the storage method of each software (plaintext, APIs, custom algorithms, databases, etc.).

  36. 39

    Red-Teaming-Toolkit

    10.8Kinfosecn1nja/Red-Teaming-Toolkit

    It is a curated list of cutting-edge open-source security tools for red teamers and threat hunters, covering the full attack lifecycle from reconnaissance to exfiltration.

  37. 40

    nikto

    10.8Ksullo/nikto · Perl

    Nikto is an open-source web server scanner that checks servers for dangerous files, outdated software versions, and other common vulnerabilities.

  38. 41

    bbot

    10.7Kblacklanternsecurity/bbot · Python

    BBOT is a recursive internet scanner for hackers — it automates recon, bug bounty work and attack surface management (ASM), inspired by Spiderfoot.

  39. 42

    awesome-honeypots

    10.6Kparalax/awesome-honeypots · Python

    A curated, categorized list of honeypot software and related tools used by security researchers to deceive attackers, log their behavior, and study exploitation attempts.

  40. 43

    nishang

    10.2Ksamratashok/nishang · PowerShell

    Nishang is a framework and large collection of PowerShell scripts and payloads for offensive security, penetration testing, and red teaming, covering every phase of an engagement.

  41. 44

    ProxyBridge

    6.8KInterceptSuite/ProxyBridge · C

    ProxyBridge is a cross-platform proxy client that transparently redirects TCP and UDP traffic from specific Windows/macOS/Linux applications through SOCKS5 or HTTP proxies, acting as an open-source alternative to Proxifier.

  42. 45

    T3MP3ST

    6.6Kelder-plinius/T3MP3ST · TypeScript

    T3MP3ST is a multi-agent offensive-security framework that turns an AI coding agent you already use into an autonomous red-teaming operator. Point it at an authorized target and it runs the kill chain — recon, exploit, report — from a browser 'War Room' or the CLI.

  43. 46

    Agentic-Bug-Hunter

    5.4Kawarexone/Agentic-Bug-Hunter · Python

    Agentic Bug Hunter is an AI-powered bug bounty toolkit that runs recon, tests for vulnerabilities, validates findings against a strict gate, and writes submission-ready reports for HackerOne, Bugcrowd, Intigriti, or Immunefi, right from your terminal.

  44. 47

    dirtyfrag

    5.1KV4bel/dirtyfrag · C

    Dirty Frag is a proof-of-concept Linux kernel local privilege escalation exploit that chains two page-cache write vulnerabilities (CVE-2026-43284 and CVE-2026-43500) to obtain root on major Linux distributions.

  45. 48

    antigravity-proxy

    4.5Kyuaotian/antigravity-proxy · C++

    Antigravity-Proxy is a Windows DLL injector that forces the Antigravity code editor (and its CLI) to route its network traffic through your SOCKS5/HTTP proxy, without needing Clash's TUN mode.

  46. 49

    GenP

    4.3KTheMythologist/GenP · AutoIt

    GenP is an open-source Adobe Creative Cloud patcher written in AutoIt that applies binary hex patches to Adobe app files to disable their licensing checks, letting apps like Photoshop, Illustrator, and Premiere Pro run without an active subscription.

  47. 50

    airgorah

    4.2Kmartin-olivier/airgorah · Rust

    Airgorah is a WiFi security auditing tool written in Rust that captures nearby WiFi traffic, discovers clients connected to access points, performs deauthentication attacks, captures handshakes and PMKIDs, and cracks access point passwords.

  48. 51

    skitter-creek-bath-salts

    2.1Kxoreaxeaxeax/skitter-creek-bath-salts · C

    A security research project that shows how to unlock protected regions on an AMD CPU — the Platform Security Processor, System Management Mode, C6 DRAM, and CPU microcode — by scrambling the DRAM controller's physical-to-DRAM address translation.

  49. 52

    V3SP3R

    1.7Kelder-plinius/V3SP3R · Java

    Vesper (V3SP3R) is an Android app that turns a Flipper Zero into an AI-powered hardware hacking assistant you control entirely through natural language, voice, or photos.

  50. 53

    MFG-Unlocker

    1.4Kdashdogy/MFG-Unlocker · C++

    An experimental Windows mod that unlocks higher DLSS Multi Frame Generation (MFG) multipliers, up to 6X, for games on NVIDIA RTX 40 series GPUs that already support Streamline DLSS Frame Generation.

  51. 54

    DeltaForce-OBS-Locker

    1.4Kace-trump-tech/DeltaForce-OBS-Locker · Python

    An aim-lock assistant for the game Delta Force (三角洲行动) that watches the game feed through OBS, runs a custom YOLO-omni object-detection model trained to recognize in-game characters, and then drives simulated mouse/keyboard input for smooth tracking and recoil suppression. It ships a PC (Python) version and an Android APK version, plus an auto-fishing module.

  52. 55

    PwnPad

    1.2Ktwelvesec/PwnPad · C++

    PwnPad is an affordable DIY hardware hacking platform that teaches embedded security through 15 hands-on challenges, covering everything from PCB assembly to side-channel and fault-injection attacks.

  53. 56

    ps5-webkit-autoloader

    1.1KitsPLK/ps5-webkit-autoloader · JavaScript

    It is an automated payload loader for exploited (jailbroken) PS5 consoles: it boots the WebKit exploit chain and then sends your ELF payloads automatically, all triggered from a homescreen shortcut on the console itself.

  54. 57

    3105

    901YangJiiii/3105 · Swift

    3105 is a native iOS app for browsing app-container (sandboxed) files, managing portable file patches, cleaning app caches, and installing PosterBoard wallpaper packages, without installing a persistent jailbreak.

  55. 58

    ai-security-tool

    840ZeroDayEvil/ai-security-tool · HTML

    AI Security Tool is an open-source, cross-platform terminal and vulnerability scanner that combines a multi-protocol connectivity client (SSH, RDP, VNC, etc.), CVE/SBOM supply-chain auditing, and 12+ autonomous AI agents (DeepSeek, OpenAI) to automate pentesting, Red Team, and CTF workflows.

  56. 59

    Xbox360PeerPressure

    784grimdoomer/Xbox360PeerPressure

    Peer Pressure is a persistent softmod exploit for the Xbox 360. It modifies the console's NAND image and HDD security sectors to trigger a chain of DMA attacks at startup, letting you run unsigned code and homebrew.

  57. 60

    dsh-redteam-model

    719SeaOf0/dsh-redteam-model · Python

    A plugin pack for the dsh (DeepSeek Harness) AI agent that adds nine preset red-team security research modes and seventeen runtime plugins, covering pentesting, code audit, binary analysis, anti-detection, incident response, cloud security and CTF solving.

  58. 61

    trustmebro

    534DavidCarliez/trustmebro · Go

    TrustMeBro is a red-team CLI tool that intercepts command-line tools called by coding agents (like Codex, Claude Code, and pi) through PATH shims, so testers can feed the agent fabricated, modified, or blocked tool output and see how it reacts.

  59. 62

    patchright-enhanced

    498whaleyxbt/patchright-enhanced · TypeScript

    It's a stealth browser automation toolkit built on top of Patchright (a patched Playwright) aimed at QA testing, monitoring, scraping, and penetration testing. It focuses on producing clean Chrome sessions that get past WAFs like Cloudflare, Kasada, and DataDome out of the box.

  60. 63

    CVE-2026-9830

    477opaxial/CVE-2026-9830 · Python

    A Python proof-of-concept that validates a reported unauthenticated REST API exposure in the BookingPress Pro WordPress plugin, which can leak booking and customer data.

  61. 64

    VioletToolBox

    464Smart-Paocai/VioletToolBox · C#

    VioletToolBox is a Windows desktop toolbox for Android device flashing, rooting, and ROM management, with about 110 functions covering ADB, Fastboot, EDL (9008 mode), and more, aimed at Chinese Android brands like OPPO, OnePlus, Xiaomi, and Redmi.

  62. 65

    FilzaSlop

    4510xjohnnydev/FilzaSlop · Objective-C

    FilzaSlop is a fork of FilzaJailedDS that adds a sandbox escape exploit and app container access to the Filza file manager on iOS 18, iOS 26, and iOS 27 beta 1-4, plus a bundled PosterBoard Wallpaper Lab.

  63. 66

    umium

    436hotline1337/umium · C++

    Umium is a security-focused anti-debugging and anti-reverse-engineering library for high-resilience Windows 10/11 x64 applications. It uses undocumented Windows NT system functions and runtime modifications to detect and neutralize debugging, memory tampering, or sandboxing attempts.

  64. 67

    vmp-lazy-unpack

    402x86rc/vmp-lazy-unpack · Python

    This is a Python tool that automatically unpacks Windows x64 binaries protected with VMProtect 3.x and rebuilds their import table (IAT), without needing a debugger or live memory dump.

  65. 68

    allinonetools

    396LinkMouseIndex/allinonetools

    A PowerShell tool that claims to give free, instant access to Steam's full game library (50,000+ titles) through a shared-account auto-login system, launched by pasting a single command into an admin terminal.

  66. 69

    EvilFontTool

    353DoctorEww/EvilFontTool · Python

    EvilFontTool is a font-based deception tool for red teaming and security research. It generates 'Evil Fonts' — fonts that remap glyphs so a document shows humans one text while terminals, AI systems, and copy-paste see completely different text.

  67. 70

    SteamDaddy-Backup

    296Contrary7/SteamDaddy-Backup · PowerShell

    SteamDaddy is a Windows tool that replaces SteamTools and GreenLuma for unlocking Steam games and DLCs, fixing 'No Internet Connection' and purchase errors, managing game manifests, and auto-patching online multiplayer fixes, all from a native UI inside the Steam client.

  68. 71

    UniRoot

    229kuuky29/UniRoot · Kotlin

    UniRoot is a one-tap rooting app for Samsung Galaxy devices. It ships a new unprivileged kernel exploit (DirtyFrag, CVE-2026-43284) that roots the phone with a single button press, plus an older CVE-2026-43499-based exploit with per-device profiles, and it automatically re-roots the device on every boot.

  69. 72

    Claude-AD

    212ADScanPro/Claude-AD

    Claude-AD is a Claude Code plugin that gives Claude the methodology for an internal Active Directory penetration test: skills, agents and slash commands covering Kerberoasting, ADCS ESC1-17, DCSync, ACL abuse, NTLM relay and delegation abuse, each with OPSEC and telemetry notes.

  70. 73

    CVE-2026-62911

    187hypnguyen1209/CVE-2026-62911 · Python

    A proof-of-concept exploit for CVE-2026-62911, a pre-auth RCE in Microsoft Exchange Server that relays an NTLM machine account hash to the MRSProxy service to drop and run an ASPX webshell, giving full SYSTEM access without any credentials.

  71. 74

    Rise-6.9.5

    165NoHackClient/Rise-6.9.5 · Java

    Rise 6.9.5 is an open-source rebuild of a Minecraft hacked/cheat client: the original closed-source RiseClient 6.9.5 was decompiled, deobfuscated, renamed and cleaned up so the source can be built and modified.

  72. 75

    qoder-workflow

    142d4ncboz/qoder-workflow · Python

    Qoder Workflow is an unofficial toolkit built around Qoder (an AI coding assistant) that patches machine identity, harvests Personal Access Tokens, decrypts local session credentials, and exposes the resulting access through an OpenAI-compatible gateway serving 15 upstream models (Claude, Qwen, Kimi, GLM, DeepSeek, MiniMax, and more).

Often tagged together