Awesome

GitHub projects from awesome lists

Search awesome repositories

Search names, descriptions, topics, tags, and stacks, then tune results by ecosystem, freshness, health, and cross-list signal.

Continue with GitHub Browse awesome lists Request a list

Repos indexed: 21,815
Awesome lists tracked: 154
Current results: 122

Find repositories

Start broad, then narrow by ecosystem, freshness, health, and growth.

Unsure which signals matter? Read the repository shortlisting guide.

Clear 1 refinement

Search repositories

Search mode

Keyword Semantic

Tune results

The controls most people need first.

Awesome list

Language

Freshness

Sort

Direction

More filters Topics, generated tags, stack, files, age, archive status, and growth.

Ecosystem

GitHub topic

Generated tag

Framework or stack

Package manager

Files

Has file

Choose a suggestion or use commas to require multiple files.

Health

Minimum stars

Repository age

Uses known first-commit dates.

Archive status

AI development signals

Momentum

Unmaintained for

Commit velocity

Star growth

Reset filters

122 repos shown

List: awesome-web-security

Browse

Highlighted

Open highlighted repo slot

Put your repository first

Promote a GitHub repo at the top of Awesome repository list views for 7 days.

openai/codex

Lightweight coding agent that runs in your terminal

AI dev

Stack

Rust Axum Express Cargo pnpm uv

Updated: 2026-10-18
Lists: 11 list mentions
First commit: 2025-04-16
History: 13 history points
License: Apache-2.0
Issues: 23,276 open

129,694

stars

Forks: 20,417
Commits: 12,331 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Stack

Python

GitHub topics

#bounty #bugbounty #bypass #cheatsheet #enumeration #hacking

Updated: 2026-08-27
Lists: 4 list mentions
First commit: 2016-10-18
History: 7 history points
License: MIT
Issues: Disabled

81,817

stars

Forks: 17,477
Commits: 2,202 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

mitmproxy/mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

AI dev

Stack

Python Flask pytest React Tornado npm uv

GitHub topics

#debugging #http #http2 #man-in-the-middle #mitmproxy #proxy

Updated: 2026-10-13
Lists: 10 list mentions
First commit: 2010-02-16
History: 18 history points
License: MIT
Issues: 501 open

45,707

stars

Forks: 4,824
Commits: 11,249 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

sqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

Stack

Python .NET SDK

GitHub topics

#api-security #appsec #database #database-security #dbms #detection

Updated: 2026-10-17
Lists: 5 list mentions
First commit: 2008-10-15
History: 12 history points
License: NOASSERTION
Issues: 30 open

38,727

stars

Forks: 6,406
Commits: 11,104 commits
Star growth, last 7 days: +75 +0.2%
Commit velocity, last 7 days: +3 0.0%

Website GitHub

gchq/CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

AI dev

Stack

JavaScript npm

GitHub topics

#compression #data-analysis #data-manipulation #encoding #encryption #hashing

Updated: 2026-10-16
Lists: 4 list mentions
First commit: 2016-11-28
History: 9 history points
License: Apache-2.0
Issues: 600 open

36,148

stars

Forks: 4,177
Commits: 4,535 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

projectdiscovery/nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

AI dev

Stack

Go Gin gRPC Go Go modules

GitHub topics

#attack-surface #cve-scanner #dast #hacktoberfest #nuclei-engine #security

Updated: 2026-10-18
Lists: 3 list mentions
First commit: 2020-04-03
History: 7 history points
License: MIT
Issues: 141 open

32,099

stars

Forks: 3,970
Commits: 6,694 commits
Star growth, last 7 days: +81 +0.3%
Commit velocity, last 7 days: +14 +0.2%

Website GitHub

gitleaks/gitleaks

Find secrets with Gitleaks 🔑

Stack

Go Cobra gRPC Go Go modules

GitHub topics

#ai-powered #ci-cd #cicd #cli #data-loss-prevention #devsecops

Updated: 2026-09-30
Lists: 2 list mentions
First commit: 2018-01-27
History: 3 history points
License: MIT
Issues: 502 open

30,084

stars

Forks: 2,362
Commits: 1,291 commits
Star growth, last 7 days: +39 +0.1%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

radareorg/radare2

UNIX-like reverse engineering framework and command-line toolset

AI dev

Stack

C Meson npm

GitHub topics

#binary-analysis #c #commandline #disassembler #forensics #hacktoberfest

Updated: 2026-10-18
Lists: 4 list mentions
First commit: 2009-02-05
History: 9 history points
License: NOASSERTION
Issues: 787 open

25,074

stars

Forks: 3,368
Commits: 37,805 commits
Star growth, last 7 days: +77 +0.3%
Commit velocity, last 7 days: +245 +0.7%

Website GitHub

ruby/ruby

The Ruby Programming Language

Stack

Ruby Ruby on Rails Bundler Cargo vcpkg

GitHub topics

#c #jit #language #object-oriented #programming-language #ruby

Updated: 2026-10-18
Lists: 1 list mention
First commit: 1998-01-16
History: 1 history point
License: NOASSERTION
Issues: Disabled

23,780

stars

Forks: 5,658
Commits: 103,163 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

smicallef/spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Stack

Python pytest npm pip

GitHub topics

#attacksurface #cti #cybersecurity #footprinting #hacking #information-gathering

Updated: 2026-04-13
Lists: 4 list mentions
First commit: 2012-04-28
History: 7 history points
License: MIT
Issues: 346 open

23,579

stars

Forks: 3,778
Commits: 3,742 commits
Star growth, last 7 days: +244 +1.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

cure53/DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Stack

JavaScript npm

GitHub topics

#cross-site-scripting #dom #dompurify #html #javascript #mathml

Updated: 2026-10-16
Lists: 3 list mentions
First commit: 2014-02-17
History: 10 history points
License: Apache-2.0
Issues: 12 open

17,470

stars

Forks: 871
Commits: 2,514 commits
Star growth, last 7 days: +2 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

s0md3v/XSStrike

Most advanced XSS scanner.

Stack

Python pip

GitHub topics

#waf-detection #xss #xss-bruteforce #xss-detection #xss-exploit #xss-python

Updated: 2025-04-26
Lists: 3 list mentions
First commit: 2017-06-26
History: 6 history points
License: GPL-3.0
Issues: 95 open

15,217

stars

Forks: 2,095
Commits: 475 commits
Star growth, last 7 days: +5 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

prowler-cloud/prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

AI dev

Stack

Python Celery Django Django REST Framework Next.js pip pnpm uv

GitHub topics

#aws #azure #cis-benchmark #cloud #cloudsecurity #compliance

Updated: 2026-10-16
Lists: 1 list mention
First commit: 2016-06-30
History: 1 history point
License: Apache-2.0
Issues: 484 open

15,053

stars

Forks: 2,443
Commits: 9,280 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

juice-shop/juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

AI dev

Stack

TypeScript Angular Express npm

GitHub topics

#24pullrequests #application-security #appsec #ctf #hacking #hacktoberfest

Updated: 2026-10-17
Lists: 3 list mentions
First commit: 2014-09-19
History: 7 history points
License: MIT
Issues: 7 open

14,123

stars

Forks: 20,104
Commits: 23,577 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

s0md3v/Photon

Incredibly fast crawler designed for OSINT.

Stack

Python pip

GitHub topics

#crawler #information-gathering #osint #python #spider

Updated: 2026-10-17
Lists: 4 list mentions
First commit: 2018-03-30
History: 7 history points
License: GPL-3.0
Issues: 61 open

13,291

stars

Forks: 1,687
Commits: 335 commits
Star growth, last 7 days: +21 +0.2%
Commit velocity, last 7 days: +1 +0.3%

GitHub

aboul3la/Sublist3r

Fast subdomains enumeration tool for penetration testers

Stack

Python pip

Updated: 2024-08-02
Lists: 3 list mentions
First commit: 2015-12-15
History: 7 history points
License: GPL-2.0
Issues: 254 open

11,063

stars

Forks: 2,215
Commits: 138 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

beefproject/beef

The Browser Exploitation Framework Project

Stack

JavaScript Sinatra Bundler npm

Updated: 2026-10-16
Lists: 2 list mentions
First commit: 2010-01-05
History: 6 history points
License: Unknown
Issues: 37 open

11,063

stars

Forks: 2,372
Commits: 5,334 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

tennc/webshell

This is a webshell open source project

Stack

PHP

GitHub topics

#asp #aspx #jsp #jspx #php #pl

Updated: 2024-12-24
Lists: 1 list mention
First commit: 2013-05-23
History: 1 history point
License: MIT
Issues: 0 open

10,792

stars

Forks: 5,545
Commits: 736 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

wpscanteam/wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

AI dev

Stack

Ruby React Tailwind CSS Vue Bundler Composer npm

GitHub topics

#hacking-tool #scan #scanner #security #security-scanner #wordpress

Updated: 2026-09-28
Lists: 1 list mention
First commit: 2012-07-11
History: 1 history point
License: NOASSERTION
Issues: 0 open

9,805

stars

Forks: 1,348
Commits: 3,416 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

fuzzdb-project/fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

Stack

PHP

Updated: 2023-11-10
Lists: 2 list mentions
First commit: 2010-04-17
History: 6 history points
License: Unknown
Issues: 15 open

9,003

stars

Forks: 2,100
Commits: 475 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

xmendez/wfuzz

Web application fuzzer

Stack

Python pytest pip

Updated: 2026-01-21
Lists: 1 list mention
First commit: 2014-10-22
History: 1 history point
License: GPL-2.0
Issues: 116 open

6,594

stars

Forks: 1,398
Commits: 1,157 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

michenriksen/gitrob

Reconnaissance tool for GitHub organizations

Archived

Stack

GitHub topics

#github-api #golang #osint #security

Updated: 2022-09-20
Lists: 1 list mention
First commit: 2018-06-09
History: 1 history point
License: MIT
Issues: Disabled

6,197

stars

Forks: 839
Commits: 7 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

rmusser01/Infosec_Reference

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

Stack

CSS

GitHub topics

#blueteam #forensics #hacking #hacking-simulator #hacktoberfest #hacktoberfest2021

Updated: 2025-10-20
Lists: 4 list mentions
First commit: 2014-09-12
History: 1 history point
License: MIT
Issues: 4 open

6,008

stars

Forks: 1,230
Commits: 541 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

michenriksen/aquatone

A Tool for Domain Flyovers

Archived

Stack

GitHub topics

#chrome-headless #chromium #golang #osint #reconnaissance #security

Updated: 2022-05-22
Lists: 2 list mentions
First commit: 2017-06-17
History: 6 history points
License: MIT
Issues: Disabled

5,956

stars

Forks: 901
Commits: 120 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

commixproject/commix

Automated Αll-in-One OS command injection exploitation tool.

Stack

Python pip

GitHub topics

#bugbounty #command-injection #commix #detection #exploitation #open-source

Updated: 2026-10-18
Lists: 1 list mention
First commit: 2015-03-20
History: 1 history point
License: NOASSERTION
Issues: 0 open

5,885

stars

Forks: 940
Commits: 2,592 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

leizongmin/js-xss

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

Stack

HTML npm

Updated: 2026-05-06
Lists: 2 list mentions
First commit: 2012-09-18
History: 8 history points
License: NOASSERTION
Issues: 69 open

5,308

stars

Forks: 634
Commits: 439 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

s0md3v/AwesomeXSS

Awesome XSS stuff

Stack

JavaScript

GitHub topics

#payload #payload-list #xss #xss-cheatsheet #xss-detection #xss-payloads

Updated: 2024-10-30
Lists: 2 list mentions
First commit: 2018-03-11
History: 6 history points
License: MIT
Issues: 1 open

5,151

stars

Forks: 781
Commits: 73 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

GerbenJavado/LinkFinder

A python script that finds endpoints in JavaScript files

Stack

Python pip

GitHub topics

#endpoints #infosec

Updated: 2024-04-13
Lists: 1 list mention
First commit: 2017-06-09
History: 1 history point
License: MIT
Issues: 53 open

4,466

stars

Forks: 665
Commits: 168 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

ngalongc/bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

Updated: 2024-07-31
Lists: 3 list mentions
First commit: 2016-09-01
History: 6 history points
License: Unknown
Issues: 3 open

4,275

stars

Forks: 1,024
Commits: 202 commits
Star growth, last 7 days: +3 +0.1%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

epinna/tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

Stack

Python Gradle pip

Updated: 2024-04-21
Lists: 1 list mention
First commit: 2016-06-30
History: 1 history point
License: GPL-3.0
Issues: 46 open

4,212

stars

Forks: 684
Commits: 719 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

Search awesome repositories

Find repositories

Put your repository first

How it works

Pricing

How it works

Pricing