- PayloadsAllTheThings by swisskyrepo, 83k stars. Collection of payloads and filter bypasses for web app pentests and CTFs
- hackingtool by Z4nzu, 82k stars. Menu-driven collection of penetration testing and hacking tools in one script
- strix by usestrix, 76k stars. AI agent tool that runs penetration tests to find vulnerabilities in apps
- shannon by KeygraphHQ, 52k stars. AI pentesting tool that analyzes source code and runs exploits against web apps
- reverse-skill by zhaoxuya520, 45k stars. Skill pack that routes reverse engineering and pentest tasks to tools
- metasploit-framework by rapid7, 40k stars. Penetration testing framework
- Anthropic-Cybersecurity-Skills by mukul975, 36k stars. 817 cybersecurity skills for agents, mapped to MITRE ATT&CK and NIST
- Claude-Red by SnailSploit, 11k stars. Collection of SKILL.md files that give Claude offensive security methods
- faraday by infobyte, 6.9k stars. Vulnerability management platform with AI-assisted pentesting tools
- Decepticon by BitterSecurity, 6.6k stars. Autonomous red team agent built on LangGraph for offensive security testing
- commix by commixproject, 5.9k stars. Automated tool for detecting and exploiting OS command injection flaws
- Claude-BugHunter by elementalsouls, 5.8k stars. Claude Code skills for bug hunting and external red-team testing
- deepteam by confident-ai, 3.1k stars. Framework for red teaming LLMs and AI agents to find safety issues
- hack-skills by yaklang, 2.7k stars. Skill pack that teaches AI agents offensive security techniques
- pentest-agents by H-mmer, 1.1k stars. Bug bounty framework of agents, commands, and MCP servers for coding assistants
- airecon by pikpikcu, 1.1k stars. Autonomous pentest agent running on a local Ollama model in Kali Docker
- DedSec by dedsec1121fk, 928 stars. Python security tools for penetration testing, runnable on Termux
- AutoProber by GainSec, 338 stars. Agent-driven flying probe and CNC stack for hardware security testing
- vulnerator-ai by irraz, 280 stars. Autonomous pentesting agent using an OODA loop, Kali tools over MCP and ATT&CK mapping
- violin by Strategic-Automation, 162 stars. Supervised penetration testing profile for the Hermes agent with reporting
- ravage by duriantaco, 58 stars. AI-driven web security scanner for targets you are authorized to test
New repos every two days, stars refreshed daily. Visits are counted without cookies, and the numbers are public. How it works Data RSS Newsletter