Awesome

GitHub projects from awesome lists

Search awesome repositories

Search names, descriptions, topics, tags, and stacks, then tune results by ecosystem, freshness, health, and cross-list signal.

Continue with GitHub Browse awesome lists Request a list

Repos indexed: 17,379
Awesome lists tracked: 125
Current results: 17

Find repositories

Start broad, then narrow by ecosystem, freshness, health, and growth.

Clear 1 refinement

Search repositories

Search mode

Keyword Semantic

Tune results

The controls most people need first.

Awesome list

Language

Freshness

Sort

Direction

More filters Topics, generated tags, stack, files, age, archive status, and growth.

Ecosystem

GitHub topic

Generated tag

Framework or stack

Package manager

Files

Has file

Choose a suggestion or use commas to require multiple files.

Health

Minimum stars

Repository age

Uses known first-commit dates.

Archive status

AI development signals

Momentum

Unmaintained for

Commit velocity

Star growth

Reset filters

17 repos shown

Topic: pentest

Browse

Highlighted

Open highlighted repo slot

Put your repository first

Promote a GitHub repo at the top of Awesome repository list views for 7 days.

swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Stack

Python

GitHub topics

#bounty #bugbounty #bypass #cheatsheet #enumeration #hacking

Updated: 2026-06-19
Lists: 3 list mentions
First commit: 2016-10-18
History: 3 history points
License: MIT
Issues: Disabled

79,048

stars

Forks: 17,161
Commits: 2,191 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

six2dez/reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

AI dev

Stack

Shell

GitHub topics

#bug-bounty #bugbounty #bugbounty-tool #dns #hacking #nuclei

Updated: 2026-06-29
Lists: 2 list mentions
First commit: 2020-12-30
History: 2 history points
License: MIT
Issues: 2 open

7,755

stars

Forks: 1,197
Commits: 2,363 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

foospidy/payloads

Git All the Payloads! A collection of web attack payloads.

Stack

Shell

GitHub topics

#appsec #cybersecurity #hacking #passwords #payload #payloads

Updated: 2023-05-15
Lists: 2 list mentions
First commit: 2016-02-21
History: 2 history points
License: GPL-3.0
Issues: 4 open

3,963

stars

Forks: 991
Commits: 97 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

nixawk/pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

Stack

Python

GitHub topics

#hacking #pentest #security

Updated: 2023-09-13
Lists: 2 list mentions
First commit: 2014-11-23
History: 2 history points
License: MIT
Issues: 20 open

3,743

stars

Forks: 934
Commits: 163 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

rewardone/OSCPRepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' CherryTree. Reconscan Py2 and Py3. Custom ISO building.

Stack

GitHub topics

#oscp #penetration-testing #pentest #reconscan

Updated: 2020-06-22
Lists: 1 list mention
First commit: 2017-11-12
History: 2 history points
License: MIT
Issues: 1 open

2,742

stars

Forks: 757
Commits: 387 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

TH3xACE/SUDO_KILLER

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

Stack

Shell

GitHub topics

#abuse-sudo #ctf #cve #exploits #linux-exploits #misconfiguration

Updated: 2026-03-11
Lists: 1 list mention
First commit: 2023-10-17
History: 2 history points
License: MIT
Issues: 1 open

2,469

stars

Forks: 264
Commits: 98 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

HolyBugx/HolyTips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

GitHub topics

#api #api-security #bugbounty #bugbounty-writeups #bugbountytips #checklist

Updated: 2021-09-05
Lists: 1 list mention
First commit: 2021-03-21
History: 2 history points
License: GPL-3.0
Issues: 0 open

2,014

stars

Forks: 335
Commits: 46 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

khast3x/Redcloud

Automated Red Team Infrastructure deployement using Docker

Stack

Python pip

GitHub topics

#bugbounty #docker #hacking #kali #metasploit #offensive

Updated: 2022-08-24
Lists: 1 list mention
First commit: 2019-03-10
History: 2 history points
License: MIT
Issues: 7 open

1,278

stars

Forks: 205
Commits: 79 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

yassineaboukir/sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

Stack

Python pip

GitHub topics

#bug-bounty #certificate-transparency #certificate-transparency-logs #hacking #information-gathering #monitoring-tool

Updated: 2021-02-05
Lists: 1 list mention
First commit: 2019-03-08
History: 2 history points
License: MIT
Issues: 17 open

1,033

stars

Forks: 165
Commits: 67 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

noraj/haiti

:key: Hash type identifier (CLI & lib)

Stack

Ruby Bundler

GitHub topics

#ctf #ctf-tools #cyber #cybersecurity #digest #hacking

Updated: 2026-07-03
Lists: 1 list mention
First commit: 2019-10-16
History: 3 history points
License: MIT
Issues: 3 open

990

stars

Forks: 59
Commits: 576 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

fportantier/habu

Hacking Toolkit

Stack

Python pytest pip

GitHub topics

#hacking #linux #network-analysis #networking #penetration-testing #pentest

Updated: 2025-12-30
Lists: 1 list mention
First commit: 2017-08-18
History: 2 history points
License: BSD-3-Clause
Issues: 2 open

981

stars

Forks: 164
Commits: 371 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

aaaguirrep/offensive-docker

Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

Stack

Dockerfile

GitHub topics

#bug-bounty #bugbounty #ctf-tools #hacking #hacking-tools #htb

Updated: 2022-03-11
Lists: 1 list mention
First commit: 2020-02-25
History: 2 history points
License: MIT
Issues: 2 open

768

stars

Forks: 160
Commits: 106 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

SpectralOps/keyscope

Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust

Stack

Rust Cargo Yarn

GitHub topics

#developer-tools #devops #pentest #rust #security #testing

Updated: 2025-07-24
Lists: 2 list mentions
First commit: 2021-10-01
History: 3 history points
License: Apache-2.0
Issues: 1 open

410

stars

Forks: 113
Commits: 90 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

s0rg/crawley

The unix-way web crawler

Stack

Go Go modules

GitHub topics

#cli #crawler #go #golang #golang-application #pentest

Updated: 2026-06-19
Lists: 2 list mentions
First commit: 2021-10-27
History: 5 history points
License: MIT
Issues: 4 open

339

stars

Forks: 18
Commits: 158 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

Warxim/petep

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

Stack

Java Gradle

GitHub topics

#ethical-hacking #ethical-hacking-tools #hacking #hacking-tool #hacking-tools #hackingtools

Updated: 2023-12-01
Lists: 1 list mention
First commit: 2020-08-01
History: 2 history points
License: GPL-3.0
Issues: 0 open

228

stars

Forks: 22
Commits: 49 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

bl4de/research

Bug Bounty writeups, Vulnerability Research, Tutorials, Tips&Tricks

Stack

JavaScript

GitHub topics

#bugbounty #burp #burpsuite #hacking #itsecurity #javascript

Updated: 2024-08-07
Lists: 1 list mention
First commit: 2015-12-12
History: 2 history points
License: Unknown
Issues: Disabled

211

stars

Forks: 46
Commits: 300 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

momenbasel/htb-writeups

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

Stack

HTML Bundler

GitHub topics

#active-directory #cheatsheet #ctf #ctf-writeups #cybersecurity #ethical-hacking

Updated: 2026-06-10
Lists: 1 list mention
First commit: 2026-04-10
History: 2 history points
License: MIT
Issues: 0 open

150

stars

Forks: 35
Commits: 27 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

Search awesome repositories

Find repositories

Put your repository first

How it works

Pricing

How it works

Pricing