Best Pentesting & Ethical Hacking GitHub Repositories

Hunt down social media accounts by username across social networks

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Fast web fuzzer written in Go

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Program for determining types of files for Windows, Linux and MacOS.

The recursive internet scanner for hackers. 🧡

Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Owned by my cybersecurity company 👇

Cyber Security ALL-IN-ONE Platform

Next generation web scanner

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

Autonomous Hacking Agent for Red Team

The Network Execution Tool

The ultimate WinRM shell for hacking/pentesting

A Security Tool for Bug Bounty, Pentest and Red Teaming.

🔍 Search anyone's digital footprint across 300+ websites

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Plugin for JADX to integrate MCP server