Open source hacking projects
Every project in the registry tagged hacking, ranked by real GitHub adoption.
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
LEAKED SYSTEM PROMPTS FOR CHATGPT, CLAUDE, GEMINI, GROK, PERPLEXITY, CURSOR, LOVABLE, REPLIT, AND MORE! - AI SYSTEMS TRANSPARENCY FOR ALL! 👐
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data corr
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Gather and update all available and newest CVEs with their PoC.
Next generation web scanner
A Modern Orchestration Engine for Security
All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.
An all-in-one hacking tool to remotely take over Android devices.
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
Cameradar hacks its way into RTSP videosurveillance cameras
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
A high performance offensive security tool for reconnaissance and vulnerability scanning
EMBA - The firmware security analyzer
Automated NoSQL database enumeration and web application exploitation tool.
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access
OSINT Tool: Generate username lists for companies on LinkedIn
Gives you one-liners that aids in penetration testing operations, privilege escalation and more
GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the
NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations.
ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军
Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
Fast, red-teaming browser built for AI agents, with direct HTTP traffic control, sandboxed execution, and auditable sessions. Pure Rust.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
Pen Test Report Generation and Assessment Collaboration
VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/
Related tags
Frequently asked questions
How many open source hacking projects are there?
This registry tracks 29 projects tagged hacking, with 259,295 GitHub stars between them. The most-adopted is PayloadsAllTheThings at 82,315 stars.
Are these hacking projects free to use?
Yes — 29 of the 29 carry an explicit open-source licence across 5 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which hacking project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these hacking projects still maintained?
22 of the 29 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.