GitHub repo leaderboard by stars, growth rate and activity.

• KeygraphHQ

  #1KeygraphHQ/shannon

  Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

  TypeScript47,886 starslast pushed 2 days ago
• sqlmapproject

  #2sqlmapproject/sqlmap

  Automatic SQL injection and database takeover tool

  Python38,395 starslast pushed 2 days ago
• OWASP

  #3OWASP/CheatSheetSeries

  The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

  Python33,133 starslast pushed 3 days ago
• chaitin

  #4chaitin/SafeLine

  SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

  Go22,549 starslast pushed 1 week ago
• zaproxy

  #5zaproxy/zaproxy

  The ZAP by Checkmarx Core project

  Java15,754 starslast pushed Yesterday
• maurosoria

  #6maurosoria/dirsearch

  Web path scanner

  Python14,711 starslast pushed 22 hours ago
• OWASP

  #7OWASP/wstg

  The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

  Python9,803 starslast pushed 22 hours ago
• infoslack

  #8infoslack/awesome-web-hacking

  A list of web application security

  —7,261 starslast pushed 7 days ago
• urbanadventurer

  #9urbanadventurer/WhatWeb

  Next generation web scanner

  Ruby6,829 starslast pushed 5 months ago
• infobyte

  #10infobyte/faraday

  Open Source Vulnerability Management Platform

  Python6,713 starslast pushed 6 days ago

#	Repo	Language	Stars	30-day trend	Last updated
1	KeygraphHQ KeygraphHQ/shannon Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.	TypeScript	47,886		last pushed 2 days ago
2	sqlmapproject sqlmapproject/sqlmap Automatic SQL injection and database takeover tool	Python	38,395		last pushed 2 days ago
3	OWASP OWASP/CheatSheetSeries The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.	Python	33,133		last pushed 3 days ago
4	chaitin chaitin/SafeLine SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.	Go	22,549		last pushed 1 week ago
5	zaproxy zaproxy/zaproxy The ZAP by Checkmarx Core project	Java	15,754		last pushed Yesterday
6	maurosoria maurosoria/dirsearch Web path scanner	Python	14,711		last pushed 22 hours ago
7	OWASP OWASP/wstg The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.	Python	9,803		last pushed 22 hours ago
8	infoslack infoslack/awesome-web-hacking A list of web application security	—	7,261		last pushed 7 days ago
9	urbanadventurer urbanadventurer/WhatWeb Next generation web scanner	Ruby	6,829		last pushed 5 months ago
10	infobyte infobyte/faraday Open Source Vulnerability Management Platform	Python	6,713		last pushed 6 days ago

All · 11,474