Data / Repositories / Hacking
Hacking repositories on GitHub: 21 ranked by stars
21 public repositories tagged Hacking are on GitHub, with 437,327 stars between them; 10 had a push in the last 30 days. Most are written in Python (5), Rust (2), Assembly (1). The most starred: trimstray/the-book-of-secret-knowledge (249,092), usestrix/strix (68,539), bee-san/Ciphey (21,675).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Language | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|---|
| trimstray/the-book-of-secret-knowledge | A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more. | 249,092 | 14,474 | MIT | Nov 19, 2024 | Oct 11 | |
| usestrix/strix | Open-source AI penetration testing tool to find and fix your app’s vulnerabilities. | Python | 68,539 | 7,595 | Apache-2.0 | Oct 14 | Oct 14 |
| bee-san/Ciphey | Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes | Rust | 21,675 | 1,447 | MIT | Oct 13 | Oct 14 |
| carpedm20/awesome-hacking | A curated list of awesome Hacking tutorials, tools and resources | 17,239 | 1,731 | MIT | Jun 2, 2024 | Oct 11 | |
| maurosoria/dirsearch | Web path scanner | Python | 14,951 | 2,453 | Oct 7 | Oct 14 | |
| mytechnotalent/Reverse-Engineering | A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures. | Assembly | 14,482 | 1,606 | Apache-2.0 | Oct 10 | Oct 11 |
| A-poc/RedTeam-Tools | Tools and Techniques for Red Team / Penetration Testing | 9,819 | 1,315 | Apr 18 | Oct 11 | ||
| six2dez/reconftw | reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities | Shell | 8,178 | 1,240 | MIT | Sep 26 | Oct 11 |
| infoslack/awesome-web-hacking | A list of web application security | 7,289 | 1,363 | MIT | Sep 18 | Oct 11 | |
| hahwul/WebHackersWeapons | Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting | Ruby | 5,088 | 854 | MIT | Sep 7 | Oct 11 |
| jekil/awesome-hacking | Awesome hacking is an awesome collection of hacking tools. | Python | 4,008 | 642 | May 16 | Oct 11 | |
| CyberStrikeus/CyberStrike | Open-source AI-powered offensive security harness for automated penetration testing. | TypeScript | 3,148 | 516 | AGPL-3.0 | Oct 14 | Oct 14 |
| danieldurnea/FBI-tools | OSINT Tools for gathering information and actions forensics | 2,700 | 379 | Mar 12, 2025 | Oct 11 | ||
| Jieyab89/OSINT-Cheat-sheet | OSINT cheat sheet, list OSINT tools, wiki, dataset, article, book , red team OSINT for hackers and OSINT tips and OSINT branch. This repository will grow every time will research… | HTML | 2,243 | 373 | MIT | Oct 10 | Oct 11 |
| wgpsec/AboutSecurity | Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。 | Python | 1,790 | 248 | Oct 10 | Oct 14 | |
| Berkanktk/CyberSecurity | A collection of essential and foundational cybersecurity knowledge, thoughtfully organized for easy comprehension. | Python | 1,612 | 137 | Feb 24 | Oct 11 | |
| six2dez/burp-ai-agent | Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more | Kotlin | 1,542 | 228 | MIT | Oct 13 | Oct 14 |
| taielab/awesome-hacking-lists | A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit! | 1,393 | 268 | Dec 4, 2025 | Oct 11 | ||
| Zeyad-Azima/Offensive-Resources | A Huge Learning Resources with Labs For Offensive Security Players | 1,174 | 246 | Dec 9, 2025 | Oct 11 | ||
| hahwul/jwt-hack | JSON Web Token Hack Toolkit | Rust | 1,086 | 131 | MIT | Oct 8 | Oct 8 |
| appsecco/vulnerable-mcp-servers-lab | A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers. | JavaScript | 279 | 57 | MIT | Dec 18, 2025 | Oct 14 |
By language
- Python 5
Related topics
- Security 13
- Penetration testing 9
- Pentesting 9
- Cybersecurity 8
- Bugbounty 7
- Bug bounty 6
- Awesome list 5
- Pentesting tools 4
- Security tools 4
- Agents 3
- Artificial intelligence 3
- Security automation 3
Read from GitHub by SpecStream between October 8, 2026 and October 14, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.