GitHub Open Source Insight
Computed at Sep 10, 2026GitHub repo leaderboard by stars, growth rate and activity.
swisskyrepo
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Python80,733 starslast pushed 2 weeks agoaquasecurity
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Go37,840 starslast pushed 2 days agoThe-Art-of-Hacking
This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org
Jupyter Notebook29,338 starslast pushed 4 days agochaitin
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
Go22,537 starslast pushed 1 week agofrohoff
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Java9,048 starslast pushed 9 months agotrickest
Gather and update all available and newest CVEs with their PoC.
HTML8,056 starslast pushed 3 days agoinfoslack
daffainfo
All about bug bounty (bypasses, payloads, and etc)
—6,851 starslast pushed 3 years agoinfobyte
Open Source Vulnerability Management Platform
Python6,713 starslast pushed 6 days agoalexandreborges
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
Python4,082 starslast pushed 5 weeks ago
| # | Repo | Language | Stars | 30-day trend | Last updated |
|---|---|---|---|---|---|
| 1 | swisskyrepo A list of useful payloads and bypass for Web Application Security and Pentest/CTF | Python | 80,733 | — | last pushed 2 weeks ago |
| 2 | aquasecurity Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more | Go | 37,840 | — | last pushed 2 days ago |
| 3 | The-Art-of-Hacking This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org | Jupyter Notebook | 29,338 | — | last pushed 4 days ago |
| 4 | chaitin SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits. | Go | 22,537 | — | last pushed 1 week ago |
| 5 | frohoff A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. | Java | 9,048 | — | last pushed 9 months ago |
| 6 | trickest Gather and update all available and newest CVEs with their PoC. | HTML | 8,056 | — | last pushed 3 days ago |
| 7 | infoslack A list of web application security | — | 7,262 | — | last pushed 7 days ago |
| 8 | daffainfo All about bug bounty (bypasses, payloads, and etc) | — | 6,851 | — | last pushed 3 years ago |
| 9 | infobyte Open Source Vulnerability Management Platform | Python | 6,713 | — | last pushed 6 days ago |
| 10 | alexandreborges Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis. | Python | 4,082 | — | last pushed 5 weeks ago |
All · 11,474