GitHub Open Source Insight
Computed at Sep 11, 2026GitHub repo leaderboard by stars, growth rate and activity.
six2dez
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Shell8,079 starslast pushed 6 days agojonaslejon
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
Python4,303 starslast pushed 2 weeks agodoyensec
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
Kotlin1,808 starslast pushed YesterdayAutumn-27
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
Go1,613 starslast pushed 3 weeks agoViralmaniar
BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.
C#1,567 starslast pushed 6 years agotaielab
A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit!
—1,386 starslast pushed 9 months agodwisiswant0
sh377c0d3
AppSec Payloads Arsenal for Pentration Tester and Bug Bounty Hunters
PHP947 starslast pushed 5 months agoR0X4R
An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.
Shell811 starslast pushed 4 months agochiasmod0n
Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.
Python698 starslast pushed 1 year ago
| # | Repo | Language | Stars | 30-day trend | Last updated |
|---|---|---|---|---|---|
| 1 | six2dez reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities | Shell | 8,079 | last pushed 6 days ago | |
| 2 | jonaslejon 💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh | Python | 4,303 | last pushed 2 weeks ago | |
| 3 | doyensec InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration. | Kotlin | 1,808 | last pushed Yesterday | |
| 4 | Autumn-27 ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes | Go | 1,613 | last pushed 3 weeks ago | |
| 5 | Viralmaniar BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation. | C# | 1,567 | last pushed 6 years ago | |
| 6 | taielab A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit! | — | 1,386 | last pushed 9 months ago | |
| 7 | dwisiswant0 The fastest dork scanner written in Go. | Go | 1,304 | last pushed 3 years ago | |
| 8 | sh377c0d3 AppSec Payloads Arsenal for Pentration Tester and Bug Bounty Hunters | PHP | 947 | last pushed 5 months ago | |
| 9 | R0X4R An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically. | Shell | 811 | last pushed 4 months ago | |
| 10 | chiasmod0n Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID. | Python | 698 | last pushed 1 year ago |
All · 11,474