metasploit-framework by rapid7

Metasploit Framework

created at Aug. 30, 2011, 6:13 a.m.

Ruby

2,042 +2

32,759 +44

13,668 +33

GitHub
PayloadsAllTheThings by swisskyrepo

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

created at Oct. 18, 2016, 7:29 a.m.

Python

1,800 +4

56,688 +149

13,964 +24

GitHub
awesome-awesomeness by bayandin

A curated list of awesome awesomeness

created at July 8, 2014, 5:44 a.m.

Ruby

1,664 +2

31,256 +31

3,533 +2

GitHub
awesome-pentest by enaqx

A collection of awesome penetration testing resources, tools and other shiny things

created at Aug. 3, 2014, 11:13 p.m.

Unknown languages

1,171 +1

20,473 +42

4,368 +3

GitHub
jadx by skylot

Dex to Java decompiler

created at March 18, 2013, 5:08 p.m.

Java

814 +1

39,000 +175

4,622 +7

GitHub
Apktool by iBotPeaches

A tool for reverse engineering Android apk files

created at March 19, 2012, 5:46 p.m.

Java

660 -1

18,835 +54

3,513 +1

GitHub
Dshell by USArmyResearchLab

Dshell is a network forensic analysis framework.

created at Dec. 17, 2014, 12:04 p.m.

Python

592 +0

5,442 +1

1,150 -1

GitHub
awesome-sysadmin by awesome-foss

A curated list of amazingly awesome open-source sysadmin resources.

created at Dec. 23, 2014, 8:41 a.m.

Unknown languages

591 -1

22,549 +91

1,334 +8

GitHub
awesome-threat-intelligence by hslatman

A curated list of Awesome Threat Intelligence resources

created at Dec. 21, 2015, 11:31 a.m.

Unknown languages

548 +0

7,268 +20

1,393 +4

GitHub
owasp-mastg by OWASP

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

created at Sept. 30, 2016, 8:22 a.m.

Python

430 +2

11,260 +12

2,228 +5

GitHub
fingerprintjs by fingerprintjs

Browser fingerprinting library. Accuracy of this version is 40-60%, accuracy of the commercial Fingerprint Identification is 99.5%. V4 of this library is BSL licensed.

created at Feb. 11, 2015, 8:49 a.m.

TypeScript

418 +2

20,899 +35

2,181 +4

GitHub
zaproxy by zaproxy

The ZAP core project

created at June 3, 2015, 4:55 p.m.

Java

396 -1

11,970 +16

2,189 +6

GitHub
movies-for-hackers by k4m4

🎬 A curated list of movies every hacker & cyberpunk must watch.

created at Feb. 19, 2017, 3:24 p.m.

Shell

386 +1

10,269 +14

884 +0

GitHub
awesome-sec-talks by PaulSec

A collected list of awesome security talks

created at Jan. 19, 2016, 11:25 a.m.

Unknown languages

364 +0

3,958 +3

484 +0

GitHub
google-authenticator by google

Open source version of Google Authenticator (except the Android app)

created at Oct. 8, 2014, 5:54 p.m.

Java

362 +0

5,134 +2

959 +2

GitHub
arkime by arkime

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

created at July 6, 2012, 4:10 p.m.

JavaScript

349 +0

6,107 +16

1,030 +4

GitHub
confidant by lyft

Confidant: your secret keeper. https://lyft.github.io/confidant

created at Sept. 11, 2015, 6:02 p.m.

Python

345 -1

1,813 +0

107 +1

GitHub
ptf by trustedsec

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

created at May 12, 2015, 6:37 p.m.

Python

323 +0

4,970 +1

1,209 +2

GitHub
frida by frida

Clone this repo to build Frida

created at April 12, 2013, 10:35 p.m.

Meson

322 +0

14,683 +49

1,542 +3

GitHub
grr by google

GRR Rapid Response: remote live forensics for incident response

created at Dec. 4, 2013, 12:17 a.m.

Python

316 +0

4,647 +2

759 +0

GitHub