Awesome

GitHub projects from awesome lists

Search awesome repositories

Search names, descriptions, topics, tags, and stacks, then tune results by ecosystem, freshness, health, and cross-list signal.

Continue with GitHub Browse awesome lists Request a list

Repos indexed: 21,815
Awesome lists tracked: 154
Current results: 122

Find repositories

Start broad, then narrow by ecosystem, freshness, health, and growth.

Unsure which signals matter? Read the repository shortlisting guide.

Clear 1 refinement

Search repositories

Search mode

Keyword Semantic

Tune results

The controls most people need first.

Awesome list

Language

Freshness

Sort

Direction

More filters Topics, generated tags, stack, files, age, archive status, and growth.

Ecosystem

GitHub topic

Generated tag

Framework or stack

Package manager

Files

Has file

Choose a suggestion or use commas to require multiple files.

Health

Minimum stars

Repository age

Uses known first-commit dates.

Archive status

AI development signals

Momentum

Unmaintained for

Commit velocity

Star growth

Reset filters

122 repos shown

List: awesome-web-security

Browse

Highlighted

Open highlighted repo slot

Put your repository first

Promote a GitHub repo at the top of Awesome repository list views for 7 days.

x0rz/EQGRP

Decrypted content of eqgrp-auction-file.tar.xz

Stack

Perl

GitHub topics

#equationgroup #exploits #hacking #nsa #shadowbrokers #tao

Updated: 2017-05-24
Lists: 1 list mention
First commit: 2017-04-08
History: 1 history point
License: Unknown
Issues: 18 open

4,205

stars

Forks: 2,075
Commits: 33 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

RetireJS/retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

AI dev

Stack

JavaScript npm

GitHub topics

#build-tool #chrome-extension #firefox-extension #grunt-plugins #insecure-libraries #javascript

Updated: 2026-10-18
Lists: 1 list mention
First commit: 2013-08-30
History: 1 history point
License: Apache-2.0
Issues: 4 open

4,185

stars

Forks: 444
Commits: 1,218 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

Greenwolf/social_mapper

A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)

Stack

Python Django pip

Updated: 2022-02-25
Lists: 1 list mention
First commit: 2018-07-07
History: 1 history point
License: GPL-3.0
Issues: 48 open

4,088

stars

Forks: 825
Commits: 190 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

evyatarmeged/Raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

Stack

Python pip

GitHub topics

#enumeration #fuzzing #hacking #hacking-tool #information-gathering #offensive-security

Updated: 2026-04-21
Lists: 2 list mentions
First commit: 2018-05-15
History: 6 history points
License: MIT
Issues: 14 open

4,055

stars

Forks: 502
Commits: 190 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

RhinoSecurityLabs/cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

Stack

Python Express Flask Go modules npm pip

Updated: 2026-10-14
Lists: 1 list mention
First commit: 2018-07-17
History: 1 history point
License: BSD-3-Clause
Issues: 19 open

3,760

stars

Forks: 774
Commits: 705 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

ElevenPaths/FOCA

Tool to find metadata and hidden information in the documents.

Stack

C# .NET SDK

Updated: 2022-12-08
Lists: 2 list mentions
First commit: 2017-10-02
History: 1 history point
License: GPL-3.0
Issues: 26 open

3,654

stars

Forks: 630
Commits: 90 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

lijiejie/subDomainsBrute

A fast sub domain brute tool for pentesters

Stack

Python

Updated: 2022-09-15
Lists: 1 list mention
First commit: 2015-04-01
History: 1 history point
License: Unknown
Issues: 16 open

3,621

stars

Forks: 1,005
Commits: 55 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

epinna/weevely3

Weaponized web shell

Stack

Python PEP 517 uv

Updated: 2025-10-01
Lists: 1 list mention
First commit: 2014-02-22
History: 1 history point
License: GPL-3.0
Issues: 17 open

3,542

stars

Forks: 620
Commits: 928 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

Bo0oM/fuzz.txt

Potentially dangerous files

GitHub topics

#dirbuster #files #fuzz #list #vulnerability #web

Updated: 2026-07-28
Lists: 1 list mention
First commit: 2016-01-19
History: 1 history point
License: WTFPL
Issues: 8 open

3,400

stars

Forks: 531
Commits: 275 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

maxchehab/CSS-Keylogging

Chrome extension and Express server that exploits keylogging abilities of CSS.

Stack

CSS Express npm Yarn

Updated: 2018-02-20
Lists: 1 list mention
First commit: 2018-02-20
History: 1 history point
License: Unknown
Issues: 0 open

3,237

stars

Forks: 420
Commits: 4 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

plasma-disassembler/plasma

Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.

Stack

Python pip

GitHub topics

#arm #capstone #disassembler #mips #reverse-engineering #x86

Updated: 2021-08-31
Lists: 2 list mentions
First commit: 2015-03-09
History: 6 history points
License: GPL-3.0
Issues: 15 open

3,071

stars

Forks: 270
Commits: 922 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

baidu/openrasp

🔥Open source RASP solution

Stack

C++ Spring Boot Symfony Vue Composer Go modules Maven

GitHub topics

#devsecops #iast #rasp #security #waf

Updated: 2025-10-02
Lists: 2 list mentions
First commit: 2017-08-10
History: 6 history points
License: Apache-2.0
Issues: 62 open

2,988

stars

Forks: 622
Commits: 4,596 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

cure53/H5SC

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

Stack

JavaScript npm

Updated: 2026-09-09
Lists: 1 list mention
First commit: 2014-03-28
History: 1 history point
License: MPL-2.0
Issues: 0 open

2,938

stars

Forks: 415
Commits: 91 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

flipkart-incubator/Astra

Automated Security Testing For REST API's

Stack

Python Celery Flask pip

GitHub topics

#ci-cd #owasp #penetration-testing #penetration-testing-framework #postman-collection #python

Updated: 2024-06-05
Lists: 1 list mention
First commit: 2018-01-10
History: 1 history point
License: Apache-2.0
Issues: 66 open

2,670

stars

Forks: 416
Commits: 489 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

coffeehb/Some-PoC-oR-ExP

各种漏洞poc、Exp的收集或编写

Stack

Python

Updated: 2025-06-24
Lists: 1 list mention
First commit: 2015-03-13
History: 1 history point
License: Unknown
Issues: 2 open

2,503

stars

Forks: 962
Commits: 175 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

nil0x42/phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

Stack

Python pip

GitHub topics

#advanced-persistent-threat #backdoor #blackhat #c2 #command-and-control #hacking

Updated: 2024-05-06
Lists: 3 list mentions
First commit: 2012-07-08
History: 7 history points
License: GPL-3.0
Issues: 27 open

2,501

stars

Forks: 465
Commits: 1,021 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

evilsocket/xray

XRay is a tool for recon, mapping and OSINT gathering from public networks.

Archived

Stack

Go Gin Go modules

GitHub topics

#intelligence #mapping #network #osint #security #shodan

Updated: 2024-07-10
Lists: 1 list mention
First commit: 2017-07-08
History: 1 history point
License: GPL-3.0
Issues: 5 open

2,332

stars

Forks: 295
Commits: 109 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

tunz/js-vuln-db

A collection of JavaScript engine CVEs with PoCs

GitHub topics

#cve #javascript #vulnerability

Updated: 2019-09-03
Lists: 1 list mention
First commit: 2016-08-06
History: 1 history point
License: Unknown
Issues: 0 open

2,321

stars

Forks: 402
Commits: 173 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

evilcos/xssor2

XSS'OR - Hack with JavaScript.

Stack

JavaScript

GitHub topics

#csrf #encoding #hack #hacking-tool #pentest #pentest-tool

Updated: 2021-12-12
Lists: 1 list mention
First commit: 2017-06-25
History: 1 history point
License: BSD-2-Clause
Issues: 4 open

2,217

stars

Forks: 380
Commits: 40 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

UnkL4b/GitMiner

Tool for advanced mining for content on Github

Stack

Python pip

GitHub topics

#git-mining-tool #gitminer #information-gathering-tool

Updated: 2025-11-05
Lists: 1 list mention
First commit: 2016-02-27
History: 1 history point
License: GPL-3.0
Issues: 13 open

2,148

stars

Forks: 419
Commits: 55 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

FeeiCN/GSIL

GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）

Archived

Stack

Python pip

GitHub topics

#security-scanner #security-tools #sensitive-data #sensitive-data-security

Updated: 2023-11-28
Lists: 1 list mention
First commit: 2017-10-11
History: 1 history point
License: GPL-3.0
Issues: 7 open

2,146

stars

Forks: 485
Commits: 103 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

cure53/HTTPLeaks

HTTPLeaks - All possible ways, a website can leak HTTP requests

Stack

HTML

Updated: 2026-09-09
Lists: 1 list mention
First commit: 2015-04-17
History: 1 history point
License: BSD-2-Clause
Issues: 0 open

2,127

stars

Forks: 205
Commits: 112 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

s0md3v/ReconDog

Reconnaissance Swiss Army Knife

Stack

Python pip

GitHub topics

#cms-detector #honeypot-detector #information-gathering #recon #subdomain-enumeration

Updated: 2021-01-26
Lists: 1 list mention
First commit: 2017-06-12
History: 1 history point
License: Apache-2.0
Issues: 15 open

2,118

stars

Forks: 363
Commits: 33 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

hannob/snallygaster

Tool to scan for secret files on HTTP servers

Stack

Python PEP 517 pip

GitHub topics

#security #websecurity

Updated: 2026-10-14
Lists: 1 list mention
First commit: 2018-04-10
History: 1 history point
License: 0BSD
Issues: 12 open

2,114

stars

Forks: 231
Commits: 273 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

lukechilds/reverse-shell

Reverse Shell as a Service

Stack

Go Go modules

GitHub topics

#exploit #microservice #pentesting #reverse-shell #security #vulnerability

Updated: 2026-02-18
Lists: 1 list mention
First commit: 2017-09-13
History: 1 history point
License: MIT
Issues: 1 open

2,067

stars

Forks: 250
Commits: 98 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

Nekmo/dirhunt

Find web directories without bruteforce

Stack

Python npm pip

GitHub topics

#crawler #dirscanner #pentesting #python #security #security-tools

Updated: 2023-10-29
Lists: 2 list mentions
First commit: 2018-01-05
History: 6 history points
License: MIT
Issues: 15 open

2,009

stars

Forks: 272
Commits: 329 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

vaguileradiaz/tinfoleak

The most complete open-source tool for Twitter intelligence analysis

Stack

Python

GitHub topics

#intelligence #osint #socialmedia #socmint #twitter

Updated: 2019-02-06
Lists: 1 list mention
First commit: 2018-01-27
History: 1 history point
License: CC-BY-SA-4.0
Issues: 28 open

1,987

stars

Forks: 262
Commits: 41 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

0xInfection/TIDoS-Framework

The Offensive Manual Web Application Penetration Testing Framework.

Stack

Python pip

GitHub topics

#enumeration #exploitation #footprinting #intelligence-gathering #osint #reconnaissance

Updated: 2023-04-19
Lists: 1 list mention
First commit: 2018-06-08
History: 1 history point
License: GPL-3.0
Issues: 16 open

1,869

stars

Forks: 391
Commits: 801 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

eldraco/domain_analyzer

Analyze the security of any domain by finding all the information possible. Made in python.

Stack

Python pip

Updated: 2022-12-29
Lists: 1 list mention
First commit: 2017-08-08
History: 1 history point
License: Unknown
Issues: 10 open

1,864

stars

Forks: 235
Commits: 81 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

brunofacca/zen-rails-security-checklist

Checklist of security precautions for Ruby on Rails applications.

Stack

Ruby

GitHub topics

#checklist #rails #ruby #ruby-on-rails #security #security-vulnerability

Updated: 2020-03-09
Lists: 1 list mention
First commit: 2017-04-10
History: 1 history point
License: MIT
Issues: 1 open

1,814

stars

Forks: 143
Commits: 79 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

Search awesome repositories

Find repositories

Put your repository first

How it works

Pricing

How it works

Pricing