Repositories list

• bbot

  Public
  The recursive internet scanner for hackers. 🧡

  pythoncliautomation+ 17

  pythoncliautomationosintneo4jscannerasmhackingrecursionpentesting+ 10

  Python

  •

  GNU Affero General Public License v3.0

  •851851 forks•9.9k9.9k stars•3434 issues•1414 pull requests•Updated Jun 16, 2026Jun 16, 2026

• crowsnest

  Public
  Security News Curator

  HTML

  •00 forks•00 stars•00 issues•00 pull requests•Updated Jun 15, 2026Jun 15, 2026

• blastdns

  Public
  An ultra-fast DNS resolver written in Rust, with Python bindings

  pythondnsrust+ 4

  pythondnsrustcliosintpython-bindingsdns-resolver

  Rust

  •00 forks•66 stars•00 issues•33 pull requests•Updated Jun 15, 2026Jun 15, 2026

• badsecrets

  Public
  A library for detecting known secrets across many web frameworks

  pythonrailsflask+ 12

  pythonrailsflasksecurityjwtdjangocryptographysymfonysecretspeoplesoft+ 5

  Python

  •

  GNU Affero General Public License v3.0

  •8181 forks•803803 stars•33 issues•00 pull requests•Updated Jun 14, 2026Jun 14, 2026

• cloudcheck

  Public
  Check whether an IP address or hostname belongs to popular cloud providers

  pythonclicloud+ 11

  pythonclicloudosintpipelinecloud-providerspython-librarypypiipasn+ 4

  Python

  •77 forks•9090 stars•55 issues•44 pull requests•Updated Jun 14, 2026Jun 14, 2026

• nanodump

  Public
  The swiss army knife of LSASS dumping

  C

  •

  MIT License

  •268268 forks•00 stars•00 issues•00 pull requests•Updated Jun 13, 2026Jun 13, 2026

• CLA

  Public
  Contributor License Agreement for Black Lantern Security projects

  11 fork•00 stars•00 issues•00 pull requests•Updated Jun 13, 2026Jun 13, 2026

• baddns

  Public
  Check subdomains for subdomain takeovers and other DNS tomfoolery

  Python

  •

  GNU Affero General Public License v3.0

  •4242 forks•441441 stars•22 issues•11 pull request•Updated Jun 9, 2026Jun 9, 2026

• BloodHound.py

  Public
  A Python based ingestor for BloodHound

  Python

  •

  MIT License

  •379379 forks•00 stars•00 issues•00 pull requests•Updated Jun 9, 2026Jun 9, 2026

• impacket

  Public
  Impacket is a collection of Python classes for working with network protocols.

  Python

  •

  Other

  •3.9k3.9k forks•22 stars•00 issues•00 pull requests•Updated May 28, 2026May 28, 2026

• TREVORspray

  Public
  TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

  microsoftpythonsecurity+ 14

  microsoftpythonsecurityoauthemailproxyhackingpasswordofficesocks+ 7

  Python

  •

  GNU General Public License v3.0

  •175175 forks•1.3k1.3k stars•66 issues•22 pull requests•Updated May 21, 2026May 21, 2026

• bbot-server

  Public
  A persistent database + CLI for your BBOT scan data 🧡

  Python

  •

  GNU Affero General Public License v3.0

  •99 forks•4646 stars•1313 issues•99 pull requests•Updated May 4, 2026May 4, 2026

• NetExec

  Public
  The Network Execution Tool

  Python

  •

  BSD 2-Clause "Simplified" License

  •716716 forks•11 star•00 issues•11 pull request•Updated Apr 29, 2026Apr 29, 2026

• MANSPIDER

  Public
  Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

  Python

  •

  GNU General Public License v3.0

  •159159 forks•1.4k1.4k stars•99 issues•2020 pull requests•Updated Apr 24, 2026Apr 24, 2026

• public-dns-servers

  Public
  A CI/CD-verified list of the internet's known-good public DNS servers (from public-dns.info) Updated weekly!

  pythondnslist+ 14

  pythondnslistautomationosintpipelinepublicpython3recondns-server+ 7

  Python

  •77 forks•3838 stars•22 issues•11 pull request•Updated Apr 1, 2026Apr 1, 2026

• webcap

  Public
  An ultra lightweight web screenshot tool with advanced DOM analysis features.

  pythoncliscreenshot+ 10

  pythoncliscreenshotchromeosintscannerpython-libraryheadlesswebapppentesting+ 3

  Python

  •

  GNU General Public License v3.0

  •44 forks•4343 stars•44 issues•1414 pull requests•Updated Apr 1, 2026Apr 1, 2026

• TREVORproxy

  Public
  A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source…

  pythonproxyproxy-server+ 7

  pythonproxyproxy-serversockssocks5ip-addresstrevorpassword-sprayhack-toolwaf-bypass

  Python

  •

  GNU General Public License v3.0

  •7777 forks•525525 stars•22 issues•22 pull requests•Updated Apr 1, 2026Apr 1, 2026

• blue-resources

  Public
  A collection of helpful blue team resources

  PowerShell

  •

  GNU General Public License v3.0

  •11 fork•88 stars•00 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• WebAppLabs

  Public
  Intentionally vulnerable web applications

  PHP

  •11 fork•11 star•00 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• writehat

  Public
  A pentest reporting tool written in Python. Free yourself from Microsoft Word.

  Python

  •

  GNU General Public License v3.0

  •252252 forks•1.5k1.5k stars•3434 issues•44 pull requests•Updated Apr 1, 2026Apr 1, 2026

• wordpredictor

  Public
  Predicts complete words from prefixes using vector-based word similarity.

  Python

  •

  GNU General Public License v3.0

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• bbot-vivagraphjs

  Public
  Visualize BBOT scans in realtime with VivaGraphJS

  visualizationjavascriptwebgl+ 5

  visualizationjavascriptwebglosintgraphvivagraphbbotvivagraphjs

  HTML

  •66 forks•6363 stars•33 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• dp_cryptomg

  Public
  Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.

  cryptographyvulnerabilitytelerik-ui+ 1

  cryptographyvulnerabilitytelerik-uicve-2017-9248

  Python

  •

  GNU Affero General Public License v3.0

  •1111 forks•6060 stars•66 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• ASM_BBOT_Training

  Public
  HCL

  •33 forks•22 stars•00 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• enter_the_matrix

  Public
  ETM enables the creation of detailed attack graphs and figures while calculating the risk associated with your attack narratives. ETM was built keeping NIST rec…

  risk-analysisgraphsmatrix+ 6

  risk-analysisgraphsmatrixrisk-assessmentrisk-managementattack-defenserisk-modellingrisk-mitigationthreat-matrix

  C#

  •

  GNU General Public License v3.0

  •88 forks•2727 stars•1212 issues•11 pull request•Updated Apr 1, 2026Apr 1, 2026

• offensive-azure

  Public
  Collection of offensive tools targeting Microsoft Azure

  cloudazurehacking+ 2

  cloudazurehackingoffensive-securityredteam-tools

  Python

  •

  GNU General Public License v3.0

  •4646 forks•223223 stars•11 issue•22 pull requests•Updated Apr 1, 2026Apr 1, 2026

• spiderfoot-neo4j

  Public
  Import, visualize, and analyze SpiderFoot scans in Neo4j, a graph database

  Python

  •

  GNU General Public License v3.0

  •1010 forks•8585 stars•11 issue•11 pull request•Updated Apr 1, 2026Apr 1, 2026

• bbot-module-playground

  Public
  A proving grounds for young and aspiring BBOT modules

  Python

  •

  GNU General Public License v3.0

  •22 forks•1515 stars•00 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• zmap-asset-inventory

  Public
  Python script which takes internal asset inventory at scale using zmap. Outputs to CSV.

  Python

  •

  GNU General Public License v3.0

  •1111 forks•2222 stars•00 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• nmappalyzer

  Public
  A lightweight Python 3 Nmap wrapper that doesn't try too hard. Gracefully handles any Nmap command, providing access to all output types (normal, greppable, xml…

  pythonwrapperlibrary+ 6

  pythonwrapperlibraryscannernmapscanningportscanwrapper-libraryportscanner

  Python

  •

  GNU General Public License v3.0

  •11 fork•1717 stars•00 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026