Repositories list

• bbot

  Public
  The recursive internet scanner for hackers. 🧡

  pythoncliautomation+ 17

  pythoncliautomationosintneo4jscannerasmhackingrecursionpentesting+ 10

  Python

  •

  GNU Affero General Public License v3.0

  •796796 forks•9.6k9.6k stars•5050 issues•2727 pull requests•Updated Apr 26, 2026Apr 26, 2026

• cloudcheck

  Public
  Check whether an IP address or hostname belongs to popular cloud providers

  pythonclicloud+ 11

  pythonclicloudosintpipelinecloud-providerspython-librarypypiipasn+ 4

  Python

  •77 forks•8989 stars•33 issues•44 pull requests•Updated Apr 26, 2026Apr 26, 2026

• CLA

  Public
  Contributor License Agreement for Black Lantern Security projects

  11 fork•00 stars•00 issues•00 pull requests•Updated Apr 25, 2026Apr 25, 2026

• bbot-server

  Public
  A persistent database + CLI for your BBOT scan data 🧡

  Python

  •

  GNU Affero General Public License v3.0

  •99 forks•4444 stars•1313 issues•99 pull requests•Updated Apr 24, 2026Apr 24, 2026

• MANSPIDER

  Public
  Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

  Python

  •

  GNU General Public License v3.0

  •157157 forks•1.3k1.3k stars•1212 issues•1919 pull requests•Updated Apr 24, 2026Apr 24, 2026

• baddns

  Public
  Check subdomains for subdomain takeovers and other DNS tomfoolery

  Python

  •

  GNU Affero General Public License v3.0

  •4141 forks•438438 stars•22 issues•11 pull request•Updated Apr 23, 2026Apr 23, 2026

• badsecrets

  Public
  A library for detecting known secrets across many web frameworks

  pythonrailsflask+ 12

  pythonrailsflasksecurityjwtdjangocryptographysymfonysecretspeoplesoft+ 5

  Python

  •

  GNU Affero General Public License v3.0

  •8080 forks•796796 stars•22 issues•55 pull requests•Updated Apr 23, 2026Apr 23, 2026

• blastdns

  Public
  An ultra-fast DNS resolver written in Rust, with Python bindings

  pythondnsrust+ 4

  pythondnsrustcliosintpython-bindingsdns-resolver

  Rust

  •00 forks•33 stars•00 issues•22 pull requests•Updated Apr 15, 2026Apr 15, 2026

• BloodHound.py

  Public
  A Python based ingestor for BloodHound

  Python

  •

  MIT License

  •369369 forks•00 stars•00 issues•00 pull requests•Updated Apr 15, 2026Apr 15, 2026

• impacket

  Public
  Impacket is a collection of Python classes for working with network protocols.

  Python

  •

  Other

  •3.9k3.9k forks•11 star•00 issues•00 pull requests•Updated Apr 13, 2026Apr 13, 2026

• NetExec

  Public
  The Network Execution Tool

  Python

  •

  BSD 2-Clause "Simplified" License

  •695695 forks•11 star•00 issues•00 pull requests•Updated Apr 8, 2026Apr 8, 2026

• TREVORspray

  Public
  TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

  microsoftpythonsecurity+ 14

  microsoftpythonsecurityoauthemailproxyhackingpasswordofficesocks+ 7

  Python

  •

  GNU General Public License v3.0

  •176176 forks•1.3k1.3k stars•66 issues•11 pull request•Updated Apr 1, 2026Apr 1, 2026

• public-dns-servers

  Public
  A CI/CD-verified list of the internet's known-good public DNS servers (from public-dns.info) Updated weekly!

  pythondnslist+ 14

  pythondnslistautomationosintpipelinepublicpython3recondns-server+ 7

  Python

  •77 forks•3636 stars•22 issues•11 pull request•Updated Apr 1, 2026Apr 1, 2026

• webcap

  Public
  An ultra lightweight web screenshot tool with advanced DOM analysis features.

  pythoncliscreenshot+ 10

  pythoncliscreenshotchromeosintscannerpython-libraryheadlesswebapppentesting+ 3

  Python

  •

  GNU General Public License v3.0

  •44 forks•4242 stars•44 issues•1414 pull requests•Updated Apr 1, 2026Apr 1, 2026

• TREVORproxy

  Public
  A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source…

  pythonproxyproxy-server+ 7

  pythonproxyproxy-serversockssocks5ip-addresstrevorpassword-sprayhack-toolwaf-bypass

  Python

  •

  GNU General Public License v3.0

  •7676 forks•520520 stars•22 issues•22 pull requests•Updated Apr 1, 2026Apr 1, 2026

• blue-resources

  Public
  A collection of helpful blue team resources

  PowerShell

  •

  GNU General Public License v3.0

  •11 fork•88 stars•00 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• WebAppLabs

  Public
  Intentionally vulnerable web applications

  PHP

  •11 fork•11 star•00 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• writehat

  Public
  A pentest reporting tool written in Python. Free yourself from Microsoft Word.

  Python

  •

  GNU General Public License v3.0

  •253253 forks•1.5k1.5k stars•3434 issues•44 pull requests•Updated Apr 1, 2026Apr 1, 2026

• wordpredictor

  Public
  Predicts complete words from prefixes using vector-based word similarity.

  Python

  •

  GNU General Public License v3.0

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• bbot-vivagraphjs

  Public
  Visualize BBOT scans in realtime with VivaGraphJS

  visualizationjavascriptwebgl+ 5

  visualizationjavascriptwebglosintgraphvivagraphbbotvivagraphjs

  HTML

  •66 forks•6363 stars•33 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• dp_cryptomg

  Public
  Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.

  cryptographyvulnerabilitytelerik-ui+ 1

  cryptographyvulnerabilitytelerik-uicve-2017-9248

  Python

  •

  GNU Affero General Public License v3.0

  •1111 forks•6060 stars•66 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• ASM_BBOT_Training

  Public
  HCL

  •33 forks•22 stars•00 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• enter_the_matrix

  Public
  ETM enables the creation of detailed attack graphs and figures while calculating the risk associated with your attack narratives. ETM was built keeping NIST rec…

  risk-analysisgraphsmatrix+ 6

  risk-analysisgraphsmatrixrisk-assessmentrisk-managementattack-defenserisk-modellingrisk-mitigationthreat-matrix

  C#

  •

  GNU General Public License v3.0

  •88 forks•2727 stars•1212 issues•11 pull request•Updated Apr 1, 2026Apr 1, 2026

• offensive-azure

  Public
  Collection of offensive tools targeting Microsoft Azure

  cloudazurehacking+ 2

  cloudazurehackingoffensive-securityredteam-tools

  Python

  •

  GNU General Public License v3.0

  •4545 forks•221221 stars•11 issue•22 pull requests•Updated Apr 1, 2026Apr 1, 2026

• spiderfoot-neo4j

  Public
  Import, visualize, and analyze SpiderFoot scans in Neo4j, a graph database

  Python

  •

  GNU General Public License v3.0

  •1010 forks•8181 stars•11 issue•11 pull request•Updated Apr 1, 2026Apr 1, 2026

• bbot-module-playground

  Public
  A proving grounds for young and aspiring BBOT modules

  Python

  •

  GNU General Public License v3.0

  •22 forks•1515 stars•00 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• zmap-asset-inventory

  Public
  Python script which takes internal asset inventory at scale using zmap. Outputs to CSV.

  Python

  •

  GNU General Public License v3.0

  •1111 forks•2222 stars•00 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• nmappalyzer

  Public
  A lightweight Python 3 Nmap wrapper that doesn't try too hard. Gracefully handles any Nmap command, providing access to all output types (normal, greppable, xml…

  pythonwrapperlibrary+ 6

  pythonwrapperlibraryscannernmapscanningportscanwrapper-libraryportscanner

  Python

  •

  GNU General Public License v3.0

  •11 fork•1717 stars•00 issues•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• credshed-gui

  Public
  Vue.js frontend for credshed

  SCSS

  •

  GNU General Public License v3.0

  •55 forks•88 stars•11 issue•00 pull requests•Updated Apr 1, 2026Apr 1, 2026

• kali-setup-script

  Public
  Bash script which prepares Kali for a pentest by enabling session logging, installing tools, and making common configuration changes

  Shell

  •4848 forks•149149 stars•00 issues•11 pull request•Updated Apr 1, 2026Apr 1, 2026