工具说明为英文。

技术工具雷达: Cybersecurity

雷达筛选条件

工具排名

按实测增长排序，并在不同来源间归一化。 原始值保留各自的数据窗口；计算变化需要 7 天内至少两次测量。

  1. 1

    其他
    活跃

    AI-powered bug bounty hunting toolkit that works with or without subscription.

    Python许可证: MIT
    • ai-security
    • bug-bounty
    • bugcrowd
    • claude-ai
    • claude-code

    github实测增长打开来源 ↗

    4 673GitHub 星标+200 (+4.5 %)
  2. 2

    其他
    活跃

    Cyberful is an open-source AI Red Team for discovering, exploiting, verifying, and remediating vulnerabilities.

    TypeScript许可证: AGPL-3.0
    • agents
    • ai-hacking
    • ai-penetration-testing
    • ai-pentesting
    • bug-bounty

    github实测增长打开来源 ↗

    119GitHub 星标+9 (+8.2 %)
  3. 3

    其他
    活跃

    An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

    Python许可证: MIT
    • debugging
    • http
    • http2
    • man-in-the-middle
    • mitmproxy

    github实测增长打开来源 ↗

    44 892GitHub 星标+62 (+0.14 %)
  4. 4

    其他
    活跃

    KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.

    C++
    • cross-platform
    • hacktoberfest
    • keepass
    • keepassxc
    • linux

    github实测增长打开来源 ↗

    28 659GitHub 星标+57 (+0.20 %)
  5. 5

    其他
    活跃

    The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

    Go许可证: Apache-2.0
    • 2fa
    • authentication
    • docker
    • golang
    • kubernetes

    github实测增长打开来源 ↗

    28 777GitHub 星标+55 (+0.19 %)
  6. 6

    其他
    活跃

    An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

    C++
    • binary-analysis
    • ctf
    • cybersecurity
    • debugger
    • debugging

    github实测增长打开来源 ↗

    49 381GitHub 星标+57 (+0.12 %)
  7. 7

    其他
    活跃

    PoCs and exploits for CVEs discovered by NebuSec.

    C许可证: Apache-2.0

      github实测增长打开来源 ↗

      1 472GitHub 星标+23 (+1.6 %)
    • 8

      其他
      活跃

      🕵️‍♂️ All-in-one OSINT tool for analysing any website

      TypeScript许可证: MIT
      • osint
      • privacy
      • security
      • security-tools
      • sysadmin

      github实测增长打开来源 ↗

      34 652GitHub 星标+38 (+0.11 %)
    • 9

      其他
      活跃

      the LLM vulnerability scanner

      Python许可证: Apache-2.0
      • ai
      • llm-evaluation
      • llm-security
      • security-scanners
      • vulnerability-assessment

      github实测增长打开来源 ↗

      9 079GitHub 星标+31 (+0.34 %)
    • 10

      其他
      活跃

      一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

      Go许可证: MIT
      • fscan
      • scanner
      • scanning
      • sec
      • security

      github实测增长打开来源 ↗

      14 493GitHub 星标+31 (+0.21 %)
    • 11

      其他
      活跃

      PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.

      Python许可证: MIT
      • ai
      • ai-agents
      • ai-assistant
      • ai-cybersecurity
      • ai-hacking

      github实测增长打开来源 ↗

      3 039GitHub 星标+20 (+0.66 %)
    • 12

      其他
      活跃

      Fully autonomous AI Agents system capable of performing complex penetration testing tasks

      Go许可证: MIT
      • ai-agents
      • ai-security-tool
      • anthropic
      • autonomous-agents
      • golang

      github实测增长打开来源 ↗

      22 255GitHub 星标+23 (+0.10 %)
    • 13

      其他
      活跃

      WRAITH — a modern browser-hooking framework (BeEF + blind-XSS successor) for red teams, researchers, and educators. For authorized security testing, research & education only.

      JavaScript许可证: Apache-2.0
      • beef
      • blind-xss
      • browser-exploitation
      • man-in-the-browser
      • offensive-security

      github实测增长打开来源 ↗

      140GitHub 星标+5 (+3.7 %)
    • 14

      其他
      活跃

      A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.

      TypeScript许可证: Apache-2.0
      • investigation
      • osint
      • python
      • recon

      github实测增长打开来源 ↗

      7 777GitHub 星标+18 (+0.23 %)
    • 15

      其他
      活跃

      Open, hands-on study notes on wireless security & Wi-Fi penetration testing (802.11, WEP/WPA/WPA2/WPA3, aircrack-ng). CC BY 4.0.

      • 802-11
      • aircrack-ng
      • cybersecurity
      • ethical-hacking
      • evil-twin

      github实测增长打开来源 ↗

      103GitHub 星标+4 (+4.0 %)
    • 16

      其他
      活跃

      (⌐■_■) - Raspberry Pi instrumenting Bettercap for Wi-Fi pwning.

      Python
      • gadget
      • hacking-tool
      • penetration-testing
      • pwn
      • pwnagotchi

      github实测增长打开来源 ↗

      2 899GitHub 星标+13 (+0.45 %)
    • 17

      其他
      活跃

      网络安全日报—每日推送；Daily updated report on cybersecurity hotspots

      HTML
      • cybersecurity
      • hacker-news
      • html
      • security
      • vulnerability

      github实测增长打开来源 ↗

      118GitHub 星标+4 (+3.5 %)
    • 18

      其他
      活跃

      Automated Adversary Emulation Platform

      Python许可证: Apache-2.0
      • adversary-emulation
      • caldera
      • cybersecurity
      • mitre-attack
      • red-team

      github实测增长打开来源 ↗

      7 231GitHub 星标+15 (+0.21 %)
    • 19

      其他
      活跃

      Apkx-Hunter is an Android Static Analysis Framework in Debian Package written entirely in C with OWASP MASVS scanning with 15 categories and 166 detection patterns for Android security assessments, reverse engineering, malware analysis, and…

      C许可证: Apache-2.0
      • android
      • android-malware
      • android-pentesting
      • android-reverse-engineering
      • android-security

      github实测增长打开来源 ↗

      89GitHub 星标+3 (+3.5 %)

    学习与参考资源

    按实测增长排序，并在不同来源间归一化。 这些资源可单独访问，不参与主要排名。

    1. 1

      Cybersecurity-Projects

      其他
      活跃打开来源 ↗

      Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Gamified Cybersecurity learning 👇

      Go许可证: AGPL-3.0
      • ai
      • certification
      • cloud-engineering
      • cyber
      • cybersecurity
      github资源实测增长
      6 643GitHub 星标+243 (+3.8 %)
    2. 2

      awesome-osint-arsenal

      其他
      活跃打开来源 ↗

      OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.

      Shell许可证: MIT
      • cybersecurity
      • data-breach
      • ethical-hacking
      • goverment-data
      • hacking
      github资源实测增长
      2 682GitHub 星标+64 (+2.4 %)
    3. 3

      IKONA-Security

      其他
      活跃打开来源 ↗

      🛡️ Comprehensive Cybersecurity Arsenal, Bug Bounty Payloads & Security Audit Tools by IKONA ONI

      Python
      • awesome-list
      • bug-bounty
      • cybersecurity
      • ethical-hacking
      • ikona
      github资源实测增长
      117GitHub 星标+7 (+6.4 %)
    4. 4

      h4cker

      其他
      活跃打开来源 ↗

      This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit…

      Jupyter Notebook许可证: MIT
      • ai
      • ai-security
      • artificial-intelligence
      • awesome-list
      • awesome-lists
      github资源实测增长
      29 247GitHub 星标+31 (+0.11 %)
    5. 5

      Awesome-Cybersecurity-Handbooks

      其他
      活跃打开来源 ↗

      A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

      许可证: GPL-3.0
      • blue-teaming
      • capture-the-flag
      • ctf
      • cybersecurity
      • defensive-security
      github资源实测增长
      4 081GitHub 星标+10 (+0.25 %)
    6. 6

      awesome-infosec

      其他
      活跃打开来源 ↗

      A curated list of awesome infosec courses and training resources.

      • awesome
      • courses
      • infosec
      • lab
      • penetration-testing
      github资源实测增长
      5 736GitHub 星标+8 (+0.14 %)