bestofgithub.devRepositories with the GitHub topic “pentesting”: 46 repositories with 740k stars between them, mostly written in Python, Go and Shell. The highest-rated is sherlock-project/sherlock, #18 on the bestofgithub Elo ladder.
Hunt down social media accounts by username across social networks
brew install sherlock🕵️♂️ Collect a dossier on a person by username from 6K websites
brew install maigretAutonomous Hacking Agent for Red Team
git clone https://github.com/BitterSecurity/Decepticon.gitBjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.
git clone https://github.com/infinition/Bjorn.gitreconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
git clone https://github.com/six2dez/reconftw.gitBuilding 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Owned by my cybersecurity company 👇
git clone https://github.com/CarterPerez-dev/Cybersecurity-Projects.gitHunt down social media accounts by username across social networks
brew install sherlockHunt down social media accounts by username across social networks
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and…
🕵️♂️ Collect a dossier on a person by username from 6K websites
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT…
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Useful tool to track location or mobile number
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run…
Automatic SQL injection and database takeover tool
An OSINT tool to search for accounts by username and email in social networks.
Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or…
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
The recursive internet scanner for hackers. 🧡
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and…
Fast web fuzzer written in Go
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web…
🤖 The Modern Port Scanner 🤖
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing…
Web path scanner
Directory/File, DNS and VHost busting tool written in Go
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
Autonomous Hacking Agent for Red Team
This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform…
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+…
This is a multi-use bash script for Linux systems to audit wireless networks.
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined…
A collection of hacking tools, resources and references to practice ethical hacking.
Cybersecurity AI (CAI), the framework for AI Security
Gather and update all available and newest CVEs with their PoC.
An HTTP toolkit for security research.
Reverse engineering and pentesting for Android applications
An all-in-one hacking tool to remotely take over Android devices.
Next generation web scanner
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
A swiss army knife for pentesting networks
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous…
You Know, For WEB Fuzzing !
A list of web application security
Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in…
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
A Modern Orchestration Engine for Security
Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It…
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681…