Top Penetration Testing repositories

Repositories with the GitHub topic “penetration-testing”: 35 repositories with 712k stars between them, mostly written in Python, HTML and Shell. The highest-rated is usestrix/strix, #93 on the bestofgithub Elo ladder.

Biggest movers this week

A-poc/RedTeam-Tools

Open on GitHub

Tools and Techniques for Red Team / Penetration Testing

  • 1,731+28 Elo, change today
  • 10.1k stars
  • 1.3k forks
  • 155 watchers
git
git clone https://github.com/A-poc/RedTeam-Tools.git
  • cheatsheet
  • cybersecurity
  • enumeration
  • hacking

six2dez/reconftw

Open on GitHubShell

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

  • 1,560+4 Elo, change today
  • 8.3k stars
  • 1.2k forks
git
git clone https://github.com/six2dez/reconftw.git
  • bug-bounty
  • bugbounty
  • bugbounty-tool
  • dns

mishakorzik/AllHackingTools

Open on GitHubShell

All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.

  • 1,538−2 Elo, change today
  • 6.5k stars
  • 1k forks
git
git clone https://github.com/mishakorzik/AllHackingTools.git
  • all-in-one
  • bruteforce
  • cibersecurity
  • ctf-tools

qazbnm456/awesome-web-security

Open on GitHubPython

🐶 A curated list of Web Security materials and resources.

  • 1,654−3 Elo, change today
  • 14k stars
  • 1.8k forks
git
git clone https://github.com/qazbnm456/awesome-web-security.git
  • awesome
  • awesome-list
  • list
  • penetration-testing

OWASP/wstg

Open on GitHubCSS

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

  • 1,671+7 Elo, change today
  • 10.2k stars
  • 1.7k forks
git
git clone https://github.com/OWASP/wstg.git
  • application-security
  • appsec
  • best-practices
  • bugbounty

Top 35 on the Elo ladder

  1. #93
    usestrix/strix

    Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

    2,249 Elo +875.7kPython
  2. #117
    Hack-with-Github/Awesome-Hacking

    A collection of various awesome lists for hackers, pentesters and security researchers

    2,214 Elo −3125k
  3. #212
    vxcontrol/pentagi

    Fully autonomous AI Agents system capable of performing complex penetration testing tasks

    2,119 Elo +334.2kGo
  4. #226
    KeygraphHQ/shannon

    Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and…

    2,112 Elo −2551.9kTypeScript
  5. #297
    mukul975/Anthropic-Cybersecurity-Skills

    817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS…

    2,067 Elo +3336.1kPython
  6. #305
    swisskyrepo/PayloadsAllTheThings

    A list of useful payloads and bypass for Web Application Security and Pentest/CTF

    2,064 Elo −3482.6kPython
  7. #802
    The-Art-of-Hacking/h4cker

    This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical…

    1,894 Elo −3430.2kJupyter Notebook
  8. #950
    Datalux/Osintgram

    Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any…

    1,865 Elo +3215.6kPython
  9. #1,153
    GreyDGL/PentestGPT

    Automated Penetration Testing Agentic Framework Powered by Large Language Models

    1,834 Elo +2916.4kPython
  10. #1,966
    A-poc/RedTeam-Tools

    Tools and Techniques for Red Team / Penetration Testing

    1,731 Elo +12610.1k
  11. #2,485
    1,677 Elo +2012.5kC
  12. #2,552
    OWASP/wstg

    The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web…

    1,671 Elo +4110.2kCSS
  13. #2,773
    qazbnm456/awesome-web-security

    🐶 A curated list of Web Security materials and resources.

    1,654 Elo +4414kPython
  14. #2,955
    vitalysim/Awesome-Hacking-Resources

    A collection of hacking / penetration testing resources to make you better!

    1,640 Elo −3517.6k
  15. #3,145
    maurosoria/dirsearch

    Web path scanner

    1,627 Elo +4415kPython
  16. #4,233
    six2dez/reconftw

    reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform…

    1,560 Elo +538.3kShell
  17. #4,314
    1N3/Sn1per

    Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+…

    1,556 Elo −411.5kShell
  18. #4,636
    mishakorzik/AllHackingTools

    All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.

    1,538 Elo +486.5kShell
  19. #4,682
    samratashok/nishang

    Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

    1,535 Elo +1010.2kPowerShell
  20. #4,770
    We5ter/Scanners-Box

    The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵

    1,530 Elo +59.2k
  21. #5,067
    yogeshojha/rengine

    reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined…

    1,516 Elo +328.9kHTML
  22. #5,087
    sundowndev/hacker-roadmap

    A collection of hacking tools, resources and references to practice ethical hacking.

    1,515 Elo −715.7k
  23. #5,349
    trickest/cve

    Gather and update all available and newest CVEs with their PoC.

    1,503 Elo +278.2kHTML
  24. #5,853
    Mr-xn/Penetration_Testing_POC

    渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell…

    1,480 Elo +27.5kHTML
  25. #6,021
    AzeemIdrisi/PhoneSploit-Pro

    An all-in-one hacking tool to remotely take over Android devices.

    1,472 Elo +296.4kPython
  26. #6,456
    urbanadventurer/WhatWeb

    Next generation web scanner

    1,454 Elo +17kRuby
  27. #6,551
    jakejarvis/awesome-shodan-queries

    🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

    1,450 Elo +247.8k
  28. #6,705
    daffainfo/AllAboutBugBounty

    All about bug bounty (bypasses, payloads, and etc)

    1,444 Elo +66.9k
  29. #6,745
    mandiant/commando-vm

    Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine…

    1,443 Elo +167.8kPowerShell
  30. #6,800
    infobyte/faraday

    Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous…

    1,441 Elo +336.8kPython
  31. #6,816
    infoslack/awesome-web-hacking

    A list of web application security

    1,440 Elo −37.3k
  32. #7,104
    S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet

    A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

    1,429 Elo +196.8k
  33. #7,239
    j3ssie/osmedeus

    A Modern Orchestration Engine for Security

    1,424 Elo +306.6kGo
  34. #7,825
    yeahhub/Hacking-Security-Ebooks

    Top 100 Hacking & Security E-Books (Free Download)

    1,402 Elo +196.5k
  35. #8,640
    guardicore/monkey

    Infection Monkey - An open-source adversary emulation platform

    1,369 Elo −97.1kPython