GitHub repo leaderboard by stars, growth rate and activity.

• Mr-xn

  #1Mr-xn/Penetration_Testing_POC

  渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

  HTML7,491 starslast pushed 14 hours ago
• insightglacier

  #2insightglacier/Dictionary-Of-Pentesting

  Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

  Shell2,073 starslast pushed 3 years ago
• 1N3

  #31N3/BlackWidow

  A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

  Python1,822 starslast pushed 5 months ago
• vladko312

  #4vladko312/SSTImap

  Automatic SSTI detection tool with interactive interface

  Python1,638 starslast pushed 2 weeks ago
• tianchong-zerotemp

  #5tianchong-zerotemp/dianxing

  DianXing - AI-Driven End-to-End Code Security Auditing

  —873 starslast pushed 3 months ago
• Chocapikk

  #6Chocapikk/CVE-2026-21858

  n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0)

  Python260 starslast pushed 6 months ago
• AiGptCode

  #7AiGptCode/AiGPT-WordPress-Exploitation-Framework

  AiGPT started from the concept of CVE‑2024‑27956 , the WP Automatic CSV injection — but has been completely rebuilt into a multi‑vector, unauthenticated WordPress exploitation engine. It now chains 13 real‑world CVEs to create an administrator account or drop a web shell directly, then automatically injects a reverse shell into the active theme

  Python133 starslast pushed 3 months ago

#	Repo	Language	Stars	30-day trend	Last updated
1	Mr-xn Mr-xn/Penetration_Testing_POC 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms	HTML	7,491		last pushed 14 hours ago
2	insightglacier insightglacier/Dictionary-Of-Pentesting Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。	Shell	2,073		last pushed 3 years ago
3	1N3 1N3/BlackWidow A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.	Python	1,822		last pushed 5 months ago
4	vladko312 vladko312/SSTImap Automatic SSTI detection tool with interactive interface	Python	1,638		last pushed 2 weeks ago
5	tianchong-zerotemp tianchong-zerotemp/dianxing DianXing - AI-Driven End-to-End Code Security Auditing	—	873		last pushed 3 months ago
6	Chocapikk Chocapikk/CVE-2026-21858 n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0)	Python	260		last pushed 6 months ago
7	AiGptCode AiGptCode/AiGPT-WordPress-Exploitation-Framework AiGPT started from the concept of CVE‑2024‑27956 , the WP Automatic CSV injection — but has been completely rebuilt into a multi‑vector, unauthenticated WordPress exploitation engine. It now chains 13 real‑world CVEs to create an administrator account or drop a web shell directly, then automatically injects a reverse shell into the active theme	Python	133		last pushed 3 months ago

All · 11,658