Topics / #pentest-tool

Pentest-tool projects on GitHub

Toolkits for penetration testers covering scanning, brute force, and exploitation.

As of , the most-starred Pentest-tool projects on GitHub are dirsearch (15K stars), HackBrowserData (14.6K stars) and thc-hydra (12.4K stars). GitHub.Locker tracks 8 Pentest-tool repositories with 74.5K stars combined. The fastest-growing on October 17 was dirsearch, with +4 stars in a day.

8Projects
74.5KStars in total
+19Stars in a day
Browse in the catalog →github.com/topics/pentest-tool ↗

Hot right now

Most stars gained in a day · Oct 17

+4

dirsearch

maurosoria/dirsearch · ★ 15K

Dirsearch is an advanced command-line web path brute-forcer used to discover hidden files and directories on websites for security testing.

+4

thc-hydra

vanhauser-thc/thc-hydra · ★ 12.4K

Hydra is a parallelized network login cracker by van Hauser / THC: a proof-of-concept tool showing researchers and security consultants how easily a remote system can be broken into through weak passwords. It supports over 50 protocols.

+4

Sn1per

1N3/Sn1per · ★ 11.5K

Sn1per is an offensive-security platform that bundles reconnaissance, vulnerability scanning, exploitation and reporting into one workspace, orchestrating 600+ exploits and 90+ third-party tools for pentesters and attack-surface-management teams.

+3

OneForAll

shmilylty/OneForAll · ★ 10.1K

OneForAll is a powerful subdomain collection tool: point it at a target domain and it gathers subdomains from many sources — a core reconnaissance step in penetration testing, which is why the author built it.

The all-time top

8 projects · by stars

  1. #1 · maurosoria/dirsearch

    dirsearch

    Dirsearch is an advanced command-line web path brute-forcer used to discover hidden files and directories on websites for security testing.

    15K
  2. #2 · moonD4rk/HackBrowserData

    HackBrowserData

    HackBrowserData is a command-line tool that decrypts and exports browser data — passwords, cookies, history, bookmarks, credit cards and more — from Chromium-based browsers, Firefox and Safari, built for security research.

    14.6K
  3. #3 · vanhauser-thc/thc-hydra

    thc-hydra

    Hydra is a parallelized network login cracker by van Hauser / THC: a proof-of-concept tool showing researchers and security consultants how easily a remote system can be broken into through weak passwords. It supports over 50 protocols.

    12.4K
  1. 4

    Sn1per

    11.5K1N3/Sn1per · Shell

    Sn1per is an offensive-security platform that bundles reconnaissance, vulnerability scanning, exploitation and reporting into one workspace, orchestrating 600+ exploits and 90+ third-party tools for pentesters and attack-surface-management teams.

  2. 5

    httpx

    10.5Kprojectdiscovery/httpx · Go

    httpx is a fast, multi-purpose HTTP toolkit from ProjectDiscovery that runs many probes against lists of hosts and URLs, built on the retryablehttp library to stay reliable under high thread counts.

  3. 6

    OneForAll

    10.1Kshmilylty/OneForAll · Python

    OneForAll is a powerful subdomain collection tool: point it at a target domain and it gathers subdomains from many sources — a core reconnaissance step in penetration testing, which is why the author built it.

  4. 7

    k8scout

    258k8scout/k8scout · Go

    k8scout is a single-binary tool you drop into a compromised Kubernetes pod to automatically map every realistic attack path from that foothold to cluster-admin, node escape, secret theft, or cloud IAM takeover.

  5. 8

    Claude-AD

    212ADScanPro/Claude-AD

    Claude-AD is a Claude Code plugin that gives Claude the methodology for an internal Active Directory penetration test: skills, agents and slash commands covering Kerberoasting, ADCS ESC1-17, DCSync, ACL abuse, NTLM relay and delegation abuse, each with OPSEC and telemetry notes.

Often tagged together