Awesome

GitHub projects from awesome lists

Search awesome repositories

Search names, descriptions, topics, tags, and stacks, then tune results by ecosystem, freshness, health, and cross-list signal.

Continue with GitHub Browse awesome lists Request a list

Repos indexed: 21,464
Awesome lists tracked: 149
Current results: 51

Find repositories

Start broad, then narrow by ecosystem, freshness, health, and growth.

Unsure which signals matter? Read the repository shortlisting guide.

Clear 1 refinement

Search repositories

Search mode

Keyword Semantic

Tune results

The controls most people need first.

Awesome list

Language

Freshness

Sort

Direction

More filters Topics, generated tags, stack, files, age, archive status, and growth.

Ecosystem

GitHub topic

Generated tag

Framework or stack

Package manager

Files

Has file

Choose a suggestion or use commas to require multiple files.

Health

Minimum stars

Repository age

Uses known first-commit dates.

Archive status

AI development signals

Momentum

Unmaintained for

Commit velocity

Star growth

Reset filters

51 repos shown

Topic: pentesting

Browse

Highlighted

Open highlighted repo slot

Put your repository first

Promote a GitHub repo at the top of Awesome repository list views for 7 days.

aress31/burpgpt

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.

Stack

Java Gradle

GitHub topics

#ai #burp-extensions #burp-plugin #burpsuite #burpsuite-extender #cybersecurity

Updated: 2024-06-09
Lists: 1 list mention
First commit: 2023-04-08
History: 7 history points
License: Apache-2.0
Issues: Disabled

2,389

stars

Forks: 290
Commits: 79 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

HolyBugx/HolyTips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

GitHub topics

#api #api-security #bugbounty #bugbounty-writeups #bugbountytips #checklist

Updated: 2021-09-05
Lists: 1 list mention
First commit: 2021-03-21
History: 5 history points
License: GPL-3.0
Issues: 0 open

2,022

stars

Forks: 338
Commits: 46 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

Nekmo/dirhunt

Find web directories without bruteforce

Stack

Python npm pip

GitHub topics

#crawler #dirscanner #pentesting #python #security #security-tools

Updated: 2023-10-29
Lists: 1 list mention
First commit: 2018-01-05
History: 5 history points
License: MIT
Issues: 15 open

2,009

stars

Forks: 272
Commits: 329 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

GrrrDog/weird_proxies

Reverse proxies cheatsheet

Stack

Python

GitHub topics

#cheatsheet #pentesting #reverse-proxy #security

Updated: 2023-11-04
Lists: 1 list mention
First commit: 2018-12-17
History: 5 history points
License: Unknown
Issues: 2 open

1,890

stars

Forks: 220
Commits: 112 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

sleventyeleven/linuxprivchecker

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

Stack

Python PEP 517 pip

GitHub topics

#ctf-tools #hackthebox #htb #linux-privilege-escalation #linux-security #oscp

Updated: 2022-01-31
Lists: 1 list mention
First commit: 2016-03-02
History: 5 history points
License: MIT
Issues: Disabled

1,849

stars

Forks: 544
Commits: 37 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

vulnersCom/getsploit

Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.

Stack

Python pytest uv

GitHub topics

#cli #cve #exploit #exploit-database #exploitdb #exploits

Updated: 2026-10-06
Lists: 1 list mention
First commit: 2017-06-04
History: 5 history points
License: MIT
Issues: 6 open

1,827

stars

Forks: 245
Commits: 44 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

PabloLec/RecoverPy

Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal

Stack

Python pytest uv

GitHub topics

#cli #console #cybersecurity #data #data-recovery #files

Updated: 2026-08-03
Lists: 1 list mention
First commit: 2021-02-24
History: 8 history points
License: GPL-3.0
Issues: 3 open

1,793

stars

Forks: 90
Commits: 1,450 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

CERT-Polska/Artemis

A modular vulnerability scanner with automatic report generation capabilities.

Stack

Python Cobra Django FastAPI Flask Go modules PEP 517 pip

GitHub topics

#artemis #pentesting #security #security-scanner #security-tools #vulnerability-detection

Updated: 2026-10-06
Lists: 1 list mention
First commit: 2020-11-06
History: 5 history points
License: BSD-3-Clause
Issues: 47 open

1,237

stars

Forks: 150
Commits: 2,684 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

bountyyfi/lonkero

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

Stack

Rust Cargo

GitHub topics

#appsec #cve-scanning #cybersecurity #hackers #offensive-security #pentesting

Updated: 2026-08-16
Lists: 2 list mentions
First commit: 2025-12-05
History: 5 history points
License: NOASSERTION
Issues: 12 open

1,101

stars

Forks: 92
Commits: 969 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

ASCIT31/Dark-Moon

Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.

Stack

Python pip

GitHub topics

#active-directory #ai-penetration-testing #ai-red-team #ai-red-teaming #ai-security #ai-security-tool

Updated: 2026-10-01
Lists: 4 list mentions
First commit: 2025-10-29
History: 1 history point
License: GPL-3.0
Issues: 8 open

1,022

stars

Forks: 175
Commits: 225 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

noraj/haiti

:key: Hash type identifier (CLI & lib)

Stack

Ruby Bundler

GitHub topics

#ctf #ctf-tools #cyber #cybersecurity #digest #hacking

Updated: 2026-09-24
Lists: 1 list mention
First commit: 2019-10-16
History: 6 history points
License: MIT
Issues: 3 open

1,004

stars

Forks: 61
Commits: 588 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

fportantier/habu

Hacking Toolkit

Stack

Python pytest pip

GitHub topics

#hacking #linux #network-analysis #networking #penetration-testing #pentest

Updated: 2025-12-30
Lists: 1 list mention
First commit: 2017-08-18
History: 5 history points
License: BSD-3-Clause
Issues: 3 open

991

stars

Forks: 163
Commits: 371 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

bl4de/security-tools

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Stack

Python

GitHub topics

#bug-bounties #bug-bounty #bugbounty #ctf #ctf-tools #hacking

Updated: 2026-04-22
Lists: 1 list mention
First commit: 2014-08-19
History: 5 history points
License: MIT
Issues: 2 open

924

stars

Forks: 183
Commits: 857 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

aaaguirrep/offensive-docker

Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

Stack

Dockerfile

GitHub topics

#bug-bounty #bugbounty #ctf-tools #hacking #hacking-tools #htb

Updated: 2022-03-11
Lists: 1 list mention
First commit: 2020-02-25
History: 5 history points
License: MIT
Issues: 3 open

771

stars

Forks: 157
Commits: 106 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

Chrismettal/flipper-zero-backpacks

Backpack-style addon boards for the Flipper Zero!

Stack

C++

GitHub topics

#addon #backpack #board #devboard #development #electronics

Updated: 2026-04-25
Lists: 1 list mention
First commit: 2023-01-07
History: 1 history point
License: NOASSERTION
Issues: 3 open

447

stars

Forks: 25
Commits: 106 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

HightechSec/git-scanner

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

Stack

Shell

GitHub topics

#bash #bughunting #git-dumper #hacking-tools #pentest-tool #pentesting

Updated: 2020-06-23
Lists: 1 list mention
First commit: 2020-05-17
History: 5 history points
License: MIT
Issues: 3 open

386

stars

Forks: 93
Commits: 20 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

s0rg/crawley

The unix-way web crawler

Stack

Go Go modules

GitHub topics

#cli #crawler #go #golang #golang-application #pentest

Updated: 2026-09-11
Lists: 2 list mentions
First commit: 2021-10-27
History: 8 history points
License: MIT
Issues: 8 open

339

stars

Forks: 18
Commits: 158 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

appsecco/vulnerable-mcp-servers-lab

A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.

Stack

JavaScript Express npm

GitHub topics

#ai-red-teaming #ai-research #appsecco #bugbounty #hacking #learning-pentesting

Updated: 2025-12-18
Lists: 1 list mention
First commit: 2025-12-18
History: 5 history points
License: MIT
Issues: 1 open

279

stars

Forks: 57
Commits: 12 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

Warxim/petep

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

Stack

Java Gradle

GitHub topics

#ethical-hacking #ethical-hacking-tools #hacking #hacking-tool #hacking-tools #hackingtools

Updated: 2023-12-01
Lists: 1 list mention
First commit: 2020-08-01
History: 5 history points
License: GPL-3.0
Issues: 0 open

231

stars

Forks: 24
Commits: 49 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

bl4de/research

Bug Bounty writeups, Vulnerability Research, Tutorials, Tips&Tricks

Stack

JavaScript

GitHub topics

#bugbounty #burp #burpsuite #hacking #itsecurity #javascript

Updated: 2024-08-07
Lists: 1 list mention
First commit: 2015-12-12
History: 5 history points
License: Unknown
Issues: Disabled

212

stars

Forks: 46
Commits: 300 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

AlSch092/EasyHandles

Driver + DLL which allows us to open handles to callback-protected processes

Stack

GitHub topics

#anticheat-bypass #debugging #handles-bypass #pentesting #redteam-tools #thickapp-pentesting

Updated: 2025-11-25
Lists: 1 list mention
First commit: 2025-11-22
History: 5 history points
License: GPL-3.0
Issues: 0 open

stars

Forks: 6
Commits: 10 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

Search awesome repositories

Find repositories

Put your repository first

How it works

Pricing

How it works

Pricing