Awesome

GitHub projects from awesome lists

Search awesome repositories

Search names, descriptions, topics, tags, and stacks, then tune results by ecosystem, freshness, health, and cross-list signal.

Continue with GitHub Browse awesome lists Request a list

Repos indexed: 21,464
Awesome lists tracked: 149
Current results: 12

Find repositories

Start broad, then narrow by ecosystem, freshness, health, and growth.

Unsure which signals matter? Read the repository shortlisting guide.

Clear 1 refinement

Search repositories

Search mode

Keyword Semantic

Tune results

The controls most people need first.

Awesome list

Language

Freshness

Sort

Direction

More filters Topics, generated tags, stack, files, age, archive status, and growth.

Ecosystem

GitHub topic

Generated tag

Framework or stack

Package manager

Files

Has file

Choose a suggestion or use commas to require multiple files.

Health

Minimum stars

Repository age

Uses known first-commit dates.

Archive status

AI development signals

Momentum

Unmaintained for

Commit velocity

Star growth

Reset filters

12 repos shown

Topic: offensive-security

Browse

Highlighted

Open highlighted repo slot

Put your repository first

Promote a GitHub repo at the top of Awesome repository list views for 7 days.

usestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

AI dev

Stack

Python pytest React Tailwind CSS Vite Go modules npm uv

GitHub topics

#agents #ai-hacking #ai-penetration-testing #ai-pentesting #ai-security #artificial-intelligence

Updated: 2026-10-15
Lists: 1 list mention
First commit: 2025-08-09
History: 112 history points
License: Apache-2.0
Issues: 475 open

68,856

stars

Forks: 7,631
Commits: 925 commits
Star growth, last 7 days: +623 +0.9%
Commit velocity, last 7 days: +7 +0.8%

Website GitHub

x64dbg/x64dbg

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

Stack

C++ CMake PEP 517 pip

GitHub topics

#binary-analysis #ctf #cybersecurity #debugger #debugging #disassembler

Updated: 2026-10-09
Lists: 2 list mentions
First commit: 2013-11-14
History: 5 history points
License: NOASSERTION
Issues: 572 open

49,760

stars

Forks: 2,854
Commits: 6,377 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

KeygraphHQ/shannon

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

AI dev

Stack

TypeScript Express npm pnpm

GitHub topics

#ai-penetration-testing #ai-security #api-security #appsec #ci-cd #cybersecurity

Updated: 2026-10-15
Lists: 0 list mentions
First commit: 2025-10-04
History: 137 history points
License: AGPL-3.0
Issues: 24 open

48,994

stars

Forks: 5,613
Commits: 313 commits
Star growth, last 7 days: +256 +0.5%
Commit velocity, last 7 days: +1 +0.3%

Website GitHub

vxcontrol/pentagi

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

AI dev

Stack

Go Gin gRPC Go React Tailwind CSS Go modules pnpm

GitHub topics

#ai-agents #ai-security-tool #anthropic #autonomous-agents #golang #gpt

Updated: 2026-10-09
Lists: 3 list mentions
First commit: 2026-03-26
History: 1 history point
License: MIT
Issues: 20 open

27,646

stars

Forks: 4,063
Commits: 952 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

evyatarmeged/Raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

Stack

Python pip

GitHub topics

#enumeration #fuzzing #hacking #hacking-tool #information-gathering #offensive-security

Updated: 2026-04-21
Lists: 1 list mention
First commit: 2018-05-15
History: 5 history points
License: MIT
Issues: 14 open

4,045

stars

Forks: 505
Commits: 190 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

codingo/NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

Stack

Python pip

GitHub topics

#bugbounty #couchdb #databases #enumeration #hacking #hacking-tool

Updated: 2026-10-04
Lists: 1 list mention
First commit: 2013-09-24
History: 5 history points
License: GPL-3.0
Issues: 0 open

3,359

stars

Forks: 626
Commits: 304 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

vulnersCom/getsploit

Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.

Stack

Python pytest uv

GitHub topics

#cli #cve #exploit #exploit-database #exploitdb #exploits

Updated: 2026-10-06
Lists: 1 list mention
First commit: 2017-06-04
History: 5 history points
License: MIT
Issues: 6 open

1,827

stars

Forks: 245
Commits: 44 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

codingo/VHostScan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

Stack

Python pytest PEP 517 pip

GitHub topics

#bugbounty #ctf-tools #discovery-service #hacking #hacking-tool #hackthebox

Updated: 2025-08-18
Lists: 1 list mention
First commit: 2017-09-03
History: 5 history points
License: GPL-3.0
Issues: 1 open

1,312

stars

Forks: 237
Commits: 347 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

bountyyfi/lonkero

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

Stack

Rust Cargo

GitHub topics

#appsec #cve-scanning #cybersecurity #hackers #offensive-security #pentesting

Updated: 2026-08-16
Lists: 2 list mentions
First commit: 2025-12-05
History: 5 history points
License: NOASSERTION
Issues: 12 open

1,101

stars

Forks: 92
Commits: 969 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

ASCIT31/Dark-Moon

Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.

Stack

Python pip

GitHub topics

#active-directory #ai-penetration-testing #ai-red-team #ai-red-teaming #ai-security #ai-security-tool

Updated: 2026-10-01
Lists: 4 list mentions
First commit: 2025-10-29
History: 1 history point
License: GPL-3.0
Issues: 8 open

1,022

stars

Forks: 175
Commits: 225 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

h5i-dev/h5i

An agent-native web security workspace. Find vulnerabilities through red-teaming. Formally verify properties of Rust codes in Lean 4.

AI dev

Stack

Rust Axum React Vite Cargo npm pip

GitHub topics

#agentic-ai #agentic-workflow #ai-hacking #ai-safety #ai-security #browser-automation

Updated: 2026-10-07
Lists: 2 list mentions
First commit: 2026-03-11
History: 4 history points
License: Apache-2.0
Issues: 14 open

678

stars

Forks: 66
Commits: 698 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

andreisss/KslDump

KslDump — Why bring your own knife when Defender already left one in the kitchen?

Stack

Python

GitHub topics

#byovd #hacking-tool #lsass #lsass-dump #mimikatz-alternative #offensive-security

Updated: 2026-04-13
Lists: 1 list mention
First commit: 2026-03-16
History: 5 history points
License: MIT
Issues: Disabled

416

stars

Forks: 56
Commits: 17 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

Search awesome repositories

Find repositories

Put your repository first

How it works

Pricing

How it works

Pricing