Highlighted
Open highlighted repo slot
Put your repository first
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
Awesome List
Awesome Web Security
๐ถ A curated list of Web Security materials and resources.
qazbnm456/awesome-web-security
#awesome
#awesome-list
#list
#penetration-testing
#security
#web
#websecurity
- List stars
- 13,913
- README repos
- 129
- Indexed repos
- 122
- List commits
- 584
- Forks
- 1,884
- Open issues
- 20
Tracked list growth
GitHub stars and default-branch commits for qazbnm456/awesome-web-security.
Latest scan 2026-10-18 10:50
Likes history
GitHub starsCommits history
Default branch commits
Latest repo push 2026-10-18
sqlmapproject/sqlmap
Automatic SQL injection and database takeover tool
GitHub topics
- Updated
- 2026-10-17
- Lists
- 5 list mentions
- First commit
- 2008-10-15
- License
- NOASSERTION
- Issues
- 30 open
38,727
stars
- Forks
- 6,406
- Commits
- 11,104 commits
- Star growth, last 7 days
- +75 +0.2%
- Commit velocity, last 7 days
- +3 0.0%
smicallef/spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
GitHub topics
- Updated
- 2026-04-13
- Lists
- 4 list mentions
- First commit
- 2012-04-28
- License
- MIT
- Issues
- 346 open
23,579
stars
- Forks
- 3,778
- Commits
- 3,742 commits
- Star growth, last 7 days
- +244 +1.0%
- Commit velocity, last 7 days
- 0 0.0%
juice-shop/juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
AI dev
Stack
GitHub topics
- Updated
- 2026-10-17
- Lists
- 3 list mentions
- First commit
- 2014-09-19
- License
- MIT
- Issues
- 7 open
14,123
stars
- Forks
- 20,104
- Commits
- 23,577 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
rmusser01/Infosec_Reference
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
Stack
- Updated
- 2025-10-20
- Lists
- 4 list mentions
- First commit
- 2014-09-12
- License
- MIT
- Issues
- 4 open
6,008
stars
- Forks
- 1,230
- Commits
- 541 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
commixproject/commix
Automated ฮll-in-One OS command injection exploitation tool.
GitHub topics
- Updated
- 2026-10-18
- Lists
- 1 list mention
- First commit
- 2015-03-20
- License
- NOASSERTION
- Issues
- 0 open
5,885
stars
- Forks
- 940
- Commits
- 2,592 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
evyatarmeged/Raccoon
A high performance offensive security tool for reconnaissance and vulnerability scanning
- Updated
- 2026-04-21
- Lists
- 2 list mentions
- First commit
- 2018-05-15
- License
- MIT
- Issues
- 14 open
4,055
stars
- Forks
- 502
- Commits
- 190 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
lukechilds/reverse-shell
Reverse Shell as a Service
Stack
GitHub topics
- Updated
- 2026-02-18
- Lists
- 1 list mention
- First commit
- 2017-09-13
- License
- MIT
- Issues
- 1 open
2,067
stars
- Forks
- 250
- Commits
- 98 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
Nekmo/dirhunt
Find web directories without bruteforce
GitHub topics
- Updated
- 2023-10-29
- Lists
- 2 list mentions
- First commit
- 2018-01-05
- License
- MIT
- Issues
- 15 open
2,009
stars
- Forks
- 272
- Commits
- 329 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
ASCIT31/Dark-Moon
Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.
- Updated
- 2026-10-01
- Lists
- 5 list mentions
- First commit
- 2025-10-29
- License
- GPL-3.0
- Issues
- 8 open
1,033
stars
- Forks
- 178
- Commits
- 225 commits
- Star growth, last 7 days
- +11 +1.1%
- Commit velocity, last 7 days
- 0 0.0%
momenbasel/keyFinder
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
Stack
GitHub topics
- Updated
- 2026-07-19
- Lists
- 2 list mentions
- First commit
- 2019-08-07
- License
- MIT
- Issues
- 5 open
725
stars
- Forks
- 128
- Commits
- 28 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
ReversecLabs/dref
DNS Rebinding Exploitation Framework
Stack
GitHub topics
- Updated
- 2021-04-27
- Lists
- 1 list mention
- First commit
- 2018-06-23
- License
- Unknown
- Issues
- 2 open
494
stars
- Forks
- 70
- Commits
- 108 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
WangYihang/Reverse-Shell-Manager
:hammer: A multiple reverse shell session/client manager via terminal
GitHub topics
- Updated
- 2023-07-05
- Lists
- 1 list mention
- First commit
- 2017-10-23
- License
- Unknown
- Issues
- 0 open
- Forks
- 61
- Commits
- 88 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
inflictx/Arsenal
Offline-first, searchable arsenal for pentesting & bug bounty: payloads, a click-to-build command generator, GTFOBins, wordlists, embedded CyberChef, reverse shells, checklists & an engagement tracker.
GitHub topics
- Updated
- 2026-07-09
- Lists
- 1 list mention
- First commit
- 2026-06-23
- License
- GPL-3.0
- Issues
- 4 open
184
stars
- Forks
- 26
- Commits
- 54 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%