GitHub Open Source Insight
Computed at Sep 11, 2026GitHub repo leaderboard by stars, growth rate and activity.
frohoff
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Java9,048 starslast pushed 9 months agotrickest
Gather and update all available and newest CVEs with their PoC.
HTML8,057 starslast pushed 2 days agoMr-xn
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
HTML7,487 starslast pushed 7 days agok8gege
Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)或方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等，大量高危漏洞检测模块MS17010、Zimbra、Exchange
C#5,324 starslast pushed 1 year agozan8in
A Security Tool for Bug Bounty, Pentest and Red Teaming.
HTML4,402 starslast pushed 3 days agoPuliczek
🐱💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks
Java948 starslast pushed 5 years ago🦄🔒 Awesome list of secrets in environment variables 🖥️
—908 starslast pushed 4 years agoUnclecheng-li
Recent CVE PoC & reproduction scripts. Focused on high-severity vulnerabilities across Linux kernel, Windows, macOS and more.
C796 starslast pushed 1 week agochushuai
Wscan is a web security scanner that focuses on web security, dedicated to making web security accessible to everyone.
Go712 starslast pushed 4 days agokomomon
🚀Komo, a comprehensive asset collection and vulnerability scanning tool. Komo 一个综合资产收集和漏洞扫描工具，集成了20余款工具，通过多种方式对子域进行获取，收集域名邮箱，进行存活探测，域名指纹识别，域名反查ip，ip端口扫描，web服务链接爬取并发送给xray，对web服务进行POC漏洞扫描，对主机进行主机漏洞扫描。
Python567 starslast pushed 3 years ago
| # | Repo | Language | Stars | 30-day trend | Last updated |
|---|---|---|---|---|---|
| 1 | frohoff A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. | Java | 9,048 | last pushed 9 months ago | |
| 2 | trickest Gather and update all available and newest CVEs with their PoC. | HTML | 8,057 | last pushed 2 days ago | |
| 3 | Mr-xn 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms | HTML | 7,487 | last pushed 7 days ago | |
| 4 | k8gege Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)或方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等，大量高危漏洞检测模块MS17010、Zimbra、Exchange | C# | 5,324 | last pushed 1 year ago | |
| 5 | zan8in A Security Tool for Bug Bounty, Pentest and Red Teaming. | HTML | 4,402 | last pushed 3 days ago | |
| 6 | Puliczek 🐱💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks | Java | 948 | last pushed 5 years ago | |
| 7 | Puliczek 🦄🔒 Awesome list of secrets in environment variables 🖥️ | — | 908 | last pushed 4 years ago | |
| 8 | Unclecheng-li Recent CVE PoC & reproduction scripts. Focused on high-severity vulnerabilities across Linux kernel, Windows, macOS and more. | C | 796 | last pushed 1 week ago | |
| 9 | chushuai Wscan is a web security scanner that focuses on web security, dedicated to making web security accessible to everyone. | Go | 712 | last pushed 4 days ago | |
| 10 | komomon 🚀Komo, a comprehensive asset collection and vulnerability scanning tool. Komo 一个综合资产收集和漏洞扫描工具，集成了20余款工具，通过多种方式对子域进行获取，收集域名邮箱，进行存活探测，域名指纹识别，域名反查ip，ip端口扫描，web服务链接爬取并发送给xray，对web服务进行POC漏洞扫描，对主机进行主机漏洞扫描。 | Python | 567 | last pushed 3 years ago |
All · 11,474