Awesome

GitHub projects from awesome lists

Search awesome repositories

Search names, descriptions, topics, tags, and stacks, then tune results by ecosystem, freshness, health, and cross-list signal.

Repos indexed
21,464
Awesome lists tracked
149
Current results
19

Find repositories

Start broad, then narrow by ecosystem, freshness, health, and growth.

Unsure which signals matter? Read the repository shortlisting guide.

Clear 1 refinement
Search mode
Tune results
More filters Topics, generated tags, stack, files, age, archive status, and growth.
Ecosystem
Files

Choose a suggestion or use commas to require multiple files.

Health

Uses known first-commit dates.

Momentum
Filters by observed commit-count growth over the repository's latest 7-day capture window. Repositories without a recent baseline are excluded.
Filters by observed GitHub star growth over the repository's latest 7-day capture window. Repositories without a recent baseline are excluded.
Reset filters
Highlighted

Open highlighted repo slot

Put your repository first

Promote a GitHub repo at the top of Awesome repository list views for 7 days.

usestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

AI dev
Updated
2026-10-15
Lists
1 list mention
First commit
2025-08-09
History
112 history points
License
Apache-2.0
Issues
475 open
Forks
7,631
Commits
925 commits
Star growth, last 7 days
+623 +0.9%
Commit velocity, last 7 days
+7 +0.8%
KeygraphHQ/shannon

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

AI dev
Updated
2026-10-15
Lists
0 list mentions
First commit
2025-10-04
History
137 history points
License
AGPL-3.0
Issues
24 open
Forks
5,613
Commits
313 commits
Star growth, last 7 days
+256 +0.5%
Commit velocity, last 7 days
+1 +0.3%
mukul975/Anthropic-Cybersecurity-Skills

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

AI dev
Updated
2026-08-31
Lists
2 list mentions
First commit
2026-02-25
History
1 history point
License
Apache-2.0
Issues
45 open
Forks
3,899
Commits
245 commits
Star growth, last 7 days
No 7-day history
Commit velocity, last 7 days
No 7-day history
vxcontrol/pentagi

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

AI dev
Updated
2026-10-09
Lists
3 list mentions
First commit
2026-03-26
History
1 history point
License
MIT
Issues
20 open
Forks
4,063
Commits
952 commits
Star growth, last 7 days
0 0.0%
Commit velocity, last 7 days
0 0.0%
wazuh/wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Updated
2026-10-03
Lists
4 list mentions
First commit
2005-09-23
History
9 history points
License
NOASSERTION
Issues
3,145 open
Forks
2,523
Commits
51,684 commits
Star growth, last 7 days
No 7-day history
Commit velocity, last 7 days
No 7-day history
future-architect/vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Updated
2026-10-05
Lists
2 list mentions
First commit
2016-03-27
History
8 history points
License
GPL-3.0
Issues
91 open
Forks
1,250
Commits
1,924 commits
Star growth, last 7 days
No 7-day history
Commit velocity, last 7 days
No 7-day history
guardicore/monkey

Infection Monkey - An open-source adversary emulation platform

Updated
2025-05-01
Lists
2 list mentions
First commit
2015-08-30
History
6 history points
License
GPL-3.0
Issues
240 open
Forks
825
Commits
19,752 commits
Star growth, last 7 days
0 0.0%
Commit velocity, last 7 days
0 0.0%
infobyte/faraday

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

Updated
2026-10-06
Lists
1 list mention
First commit
2013-11-06
History
5 history points
License
GPL-3.0
Issues
15 open
Forks
1,076
Commits
14,159 commits
Star growth, last 7 days
No 7-day history
Commit velocity, last 7 days
No 7-day history
DefectDojo/django-DefectDojo

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

AI dev
Updated
2026-10-10
Lists
1 list mention
First commit
2015-03-13
History
5 history points
License
BSD-3-Clause
Issues
232 open
Forks
1,960
Commits
15,705 commits
Star growth, last 7 days
No 7-day history
Commit velocity, last 7 days
No 7-day history
GH05TCREW/pentestagent

PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.

AI dev
Updated
2026-09-07
Lists
2 list mentions
First commit
2025-05-15
History
7 history points
License
MIT
Issues
30 open
Forks
613
Commits
391 commits
Star growth, last 7 days
No 7-day history
Commit velocity, last 7 days
No 7-day history
Bearer/bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Updated
2026-10-05
Lists
1 list mention
First commit
2022-09-27
History
5 history points
License
NOASSERTION
Issues
26 open
Forks
156
Commits
1,443 commits
Star growth, last 7 days
No 7-day history
Commit velocity, last 7 days
No 7-day history
oritera/Cairn

A AI general-purpose state-space search engine, validated first on autonomous penetration testing.

AI dev
Updated
2026-09-07
Lists
1 list mention
First commit
2026-04-19
History
1 history point
License
AGPL-3.0
Issues
10 open
Forks
364
Commits
70 commits
Star growth, last 7 days
No 7-day history
Commit velocity, last 7 days
No 7-day history
aress31/burpgpt

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.

Updated
2024-06-09
Lists
1 list mention
First commit
2023-04-08
History
7 history points
License
Apache-2.0
Issues
Disabled
Forks
290
Commits
79 commits
Star growth, last 7 days
No 7-day history
Commit velocity, last 7 days
No 7-day history
bountyyfi/lonkero

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

Updated
2026-08-16
Lists
2 list mentions
First commit
2025-12-05
History
5 history points
License
NOASSERTION
Issues
12 open
Forks
92
Commits
969 commits
Star growth, last 7 days
No 7-day history
Commit velocity, last 7 days
No 7-day history
h5i-dev/h5i

An agent-native web security workspace. Find vulnerabilities through red-teaming. Formally verify properties of Rust codes in Lean 4.

AI dev
Updated
2026-10-07
Lists
2 list mentions
First commit
2026-03-11
History
4 history points
License
Apache-2.0
Issues
14 open
Forks
66
Commits
698 commits
Star growth, last 7 days
No 7-day history
Commit velocity, last 7 days
No 7-day history
insidersec/insider

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

Updated
2022-04-10
Lists
1 list mention
First commit
2019-11-12
History
5 history points
License
MIT
Issues
21 open
Forks
80
Commits
163 commits
Star growth, last 7 days
No 7-day history
Commit velocity, last 7 days
No 7-day history
cynative/cynative

Open-source security agents for cloud, code and runtime. 45 built-in agents audit AWS, GCP, Azure, Kubernetes, GitHub and GitLab for privilege escalation, public exposure, supply chain and more, or build your own in one markdown file. Live, read-only access to your infrastructure.

AI dev
Updated
2026-09-16
Lists
3 list mentions
First commit
2026-06-24
History
3 history points
License
Apache-2.0
Issues
19 open
Forks
31
Commits
224 commits
Star growth, last 7 days
No 7-day history
Commit velocity, last 7 days
No 7-day history
MutableSecurity/mutablesecurity

CLI program for automating the setup, configuration, and use of cybersecurity solutions

Archived
Updated
2023-02-12
Lists
1 list mention
First commit
2022-03-15
History
5 history points
License
MIT
Issues
7 open
Forks
7
Commits
65 commits
Star growth, last 7 days
No 7-day history
Commit velocity, last 7 days
No 7-day history