GitHub Open Source Insight
Computed at Sep 11, 2026GitHub repo leaderboard by stars, growth rate and activity.
KeygraphHQ
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
TypeScript47,886 starslast pushed 2 days agosqlmapproject
Automatic SQL injection and database takeover tool
Python38,395 starslast pushed 2 days agojassics
Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
—5,063 starslast pushed 4 days agometlo-labs
Metlo is an open-source API security platform.
TypeScript1,785 starslast pushed 1 year agoblst-security
Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.
Rust1,236 starslast pushed 2 years agoZeyad-Azima
A Huge Learning Resources with Labs For Offensive Security Players
—1,166 starslast pushed 9 months agoMehdi0x90
Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.
—806 starslast pushed 3 weeks agomomenbasel
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
JavaScript708 starslast pushed 2 months agopis10
发现藏在前端代码里的 API，验证未授权访问风险 · 动态浏览器追踪 × JavaScript 静态分析
Python346 starslast pushed 4 days ago
| # | Repo | Language | Stars | 30-day trend | Last updated |
|---|---|---|---|---|---|
| 1 | KeygraphHQ Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production. | TypeScript | 47,886 | last pushed 2 days ago | |
| 2 | sqlmapproject Automatic SQL injection and database takeover tool | Python | 38,395 | last pushed 2 days ago | |
| 3 | jassics Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on... | — | 5,063 | last pushed 4 days ago | |
| 4 | metlo-labs Metlo is an open-source API security platform. | TypeScript | 1,785 | last pushed 1 year ago | |
| 5 | blst-security Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests. | Rust | 1,236 | last pushed 2 years ago | |
| 6 | Zeyad-Azima A Huge Learning Resources with Labs For Offensive Security Players | — | 1,166 | last pushed 9 months ago | |
| 7 | Mehdi0x90 Bug Bounty Tricks and useful payloads and bypasses for Web Application Security. | — | 806 | last pushed 3 weeks ago | |
| 8 | momenbasel Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config. | JavaScript | 708 | last pushed 2 months ago | |
| 9 | pis10 发现藏在前端代码里的 API，验证未授权访问风险 · 动态浏览器追踪 × JavaScript 静态分析 | Python | 346 | last pushed 4 days ago |
All · 11,474