1.keepassxreboot / keepassxc
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
- keepassxc
- keepass
- password-manager
- linux
- windows
- cross-platform
- +6 more
+3,000 stars
from 26,747 · score 8.01
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
68 repositories by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
2.WerWolv / ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
- hex-editor
- reverse-engineering
- ips
- dear-imgui
- disassembler
- analyzer
- +14 more
+2,592 stars
from 53,145 · score 7.86
3.justcallmekoko / ESP32Marauder
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
+2,385 stars
from 10,607 · score 7.78
4.x64dbg / x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
- debugger
- windows
- x64
- disassembler
- reverse-engineering
- security
- +14 more
+2,193 stars
from 47,996 · score 7.69
5.wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
- security
- compliance
- log-analysis
- vulnerability-detection
- cybersecurity
- file-integrity-monitoring
- +14 more
+2,157 stars
from 15,399 · score 7.68
6.rizinorg / cutter
Free and Open Source Reverse Engineering Platform powered by rizin
+1,511 stars
from 18,637 · score 7.32
7.falcosecurity / falco
Cloud Native Runtime Security
- cncf
- containers
- security
- falco
- ebpf
- kubernetes
- +4 more
+667 stars
from 8,883 · score 6.50
8.osquery / osquery
SQL powered operating system instrumentation, monitoring, and analytics.
- security
- monitoring
- intrusion-detection
- sql
- hacktoberfest
+559 stars
from 23,161 · score 6.33
9.SpacehuhnTech / WiFiDuck
Wireless keystroke injection attack platform
+480 stars
from 2,859 · score 6.18
+389 stars
from 9,592 · score 5.97
11.x64dbg / ScyllaHide
Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide
+312 stars
from 4,063 · score 5.75
12.google / nsjail
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
+307 stars
from 3,874 · score 5.73
+292 stars
from 3,044 · score 5.68
14.ayoubfaouzi / al-khaser
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
- anti-analysis
- anti-debugging
- anti-sandbox
- anti-vm
- anti-emulation
- code-injection
- +5 more
+281 stars
from 6,894 · score 5.64
15.lief-project / LIEF
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
- reverse-engineering
- malware-analysis
- binary-analysis
- parser
- modification
- executable-formats
- +13 more
+247 stars
from 5,381 · score 5.51
16.JonathanSalwan / Triton
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
- reverse-engineering
- symbolic-execution
- binary-analysis
- program-analysis
- taint-analysis
- binary-translation
- +5 more
+230 stars
from 4,129 · score 5.44
17.iamsopotatoe-coder / TinyLoad
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
- compression
- packer
- pe-packer
- pe-compress
- pe-protection
- pepacker
- +13 more
+197 stars
from 5 · score 5.29
18.avast / retdec
RetDec is a retargetable machine-code decompiler based on LLVM.
+181 stars
from 8,485 · score 5.20
19.kimci86 / bkcrack
Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
- crack
- zip
- multithread
- attack
- plaintext-attack
- ciphertext
- +5 more
+147 stars
from 2,090 · score 5.00
20.martinus / unordered_dense
A fast & densely stored hashmap and hashset
- c-plus-plus
- cpp17
- cpp
- hash
- hash-tables
- header-only-library
- +4 more
+144 stars
from 1,368 · score 4.98
+112 stars
from 661 · score 4.73
+106 stars
from 5,417 · score 4.67
+101 stars
from 1,354 · score 4.62
24.bailey27 / cppcryptfs
cppcryptfs is an implementation of the gocryptfs encrypted overlay filesystem in C++ for Windows.
+98 stars
from 912 · score 4.60
25.spacehuhn / esp8266_beaconSpam
Creates up to a thousand WiFi access points with custom SSIDs.
- ssid
- custom-ssids
- wifi
- esp8266
- spam
- flood
- +1 more
+91 stars
from 1,296 · score 4.52
26.simsong / bulk_extractor
This is the development tree. Production downloads are at:
+85 stars
from 1,356 · score 4.45
27.greg7mdp / parallel-hashmap
A family of header-only, very fast and memory-friendly hashmap and btree containers.
+67 stars
from 3,161 · score 4.22
28.tklengyel / drakvuf
DRAKVUF Black-box Binary Analysis
- malware-analysis
- virtualization
- xen
- introspection
+64 stars
from 1,226 · score 4.17
29.SpacehuhnTech / DeauthDetector
Detect deauthentication frames using an ESP8266
+59 stars
from 931 · score 4.09
30.cmu-sei / pharos
Automated static analysis tools for binary programs
- binary-analysis
- reverse-engineering
+56 stars
from 1,685 · score 4.04
+56 stars
from 1,118 · score 4.04
+49 stars
from 7,756 · score 3.91
33.baidu / openrasp
🔥Open source RASP solution
+46 stars
from 2,944 · score 3.85
34.Thalhammer / jwt-cpp
A header only library for creating and validating json web tokens in c++
- cpp
- header-only
- jwt
- json-web-token
+39 stars
from 1,130 · score 3.69
35.openwall / johnny
GUI frontend to John the Ripper password cracker
+34 stars
from 614 · score 3.56
36.Alia5 / PiCCANTE
PiCCANTE is a powerful tool for exploring and reversing CAN busses of vehicles, based on Raspberry Pi Pico (any model)
- can
- canbus
- car
- car-hacking
- reverse-engineering
- vehicle
- +2 more
+28 stars
from 75 · score 3.37
37.shrec / UltrafastSecp256k1
Ultra high-performance secp256k1 ECC engine | Python, Node.js, Rust, Go, C#, Swift, Java bindings | CUDA, Metal, OpenCL GPU | ECDSA, Schnorr, FROST, MuSig2, BIP-352 | 15+ platforms
- cryptography
- cuda
- riscv
- secp256k1
- arm64
- opencl
- +14 more
+25 stars
from 36 · score 3.26
38.nil0x42 / duplicut
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
+23 stars
from 961 · score 3.18
39.martinus / robin-hood-hashingArchived
Fast & memory efficient hashtable based on robin hood hashing for C++11/14/17/20
+20 stars
from 1,600 · score 3.04
40.DFIR-ORC / dfir-orc
Forensics artefact collection tool for systems running Microsoft Windows
- dfir
- incident-response
- collection
+18 stars
from 435 · score 2.94
41.greg7mdp / sparsepp
A fast, memory efficient hash map for C++
- hash-tables
- sparse-containers
- unordered
- sparsehash
- hashmap
- hash
- +2 more
+17 stars
from 1,298 · score 2.89
42.horsicq / Nauz-File-Detector
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
- detect
- reverse-engineering
- signature
- malware-analysis
- malware-research
- malware-detection
- +2 more
+15 stars
from 571 · score 2.77
43.avaneev / komihash
Very fast, high-quality hash function, discrete-incremental and streamed hashing-capable (non-cryptographic, header-only C/C++) 27GB/s + PRNG
+13 stars
from 275 · score 2.64
+10 stars
from 974 · score 2.40
45.leetonidas / demovfuscator
A work-in-progress deobfuscator for movfuscated binaries
+10 stars
from 756 · score 2.40
46.arun11299 / cpp-jwt
JSON Web Token library for C++
+9 stars
from 433 · score 2.30
47.codilime / velesArchived
Binary data analysis and visualization tool
- hexeditor
- qt
- cpp
- visualization
- shaders
- reverse-engineering
- +1 more
+8 stars
from 1,231 · score 2.20
48.hasherezade / persistence_demos
Demos of various (also non standard) persistence methods used by malware
+8 stars
from 224 · score 2.20
49.google / highwayhashArchived
Fast strong hash functions: SipHash/HighwayHash
+7 stars
from 1,597 · score 2.08
50.abumq / licensepp
Software licensing and registration using digital signatures and public cryptography 🪪
- licensing
- software-licensing
- software-license
- security
+7 stars
from 432 · score 2.08
51.WeaselGames / godot_luaAPIArchived
Godot LuaAPI
- godot
- game
- lua
- game-development
- godot-engine
- godot-module
- +5 more
+7 stars
from 412 · score 2.08
+6 stars
from 924 · score 1.95
53.secrary / Andromeda
Andromeda - Interactive Reverse Engineering Tool for Android Applications
- android
- reverse-engineering
- binary-analysis
- static-analysis
- apk
+6 stars
from 709 · score 1.95
54.BoomerangDecompiler / boomerang
Boomerang Decompiler - Fighting the code-rot :)
- c-plus-plus
- qt5
- reverse-engineering
- decompiler
- cmake
- x86
- +5 more
+6 stars
from 399 · score 1.95
55.CheckPointSW / showstopper
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
+6 stars
from 221 · score 1.95
56.EmberEmu / Hexi
Header-only, lightweight C++ library for binary streaming & serialization. Network data handling made easy peasy!
- binary-stream
- header-only
- serialisation
- serialization
- serialization-library
- buffer-management
- +10 more
+5 stars
from 284 · score 1.79
57.DOSAYGO-STUDIO / rain
The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm
- call-for-papers
- cryptanalysis
- cryptanalysis-tasks
- cryptography
- cryptohash
- hash
- +7 more
+4 stars
from 130 · score 1.61
58.ucsb-seclab / difuze
Fuzzer for Linux Kernel Drivers
+3 stars
from 383 · score 1.39
59.QuasarApp / Qt-SecretArchived
Simple encryption library supporting RSA and AES algorithms.
- rsa
- aes
- qt
- cryptography
- algorithms
- alghorithm
- +5 more
+3 stars
from 266 · score 1.39
60.akuafif / hXOR-Packer
A PE (Portable Executable) packer with Huffman Compression and Xor encryption.
- huffman-compression
- huffman-algorithm
- pe-header
- packer
- xor-encryption
- huffman-tree
- +1 more
+3 stars
from 65 · score 1.39
+2 stars
from 1,457 · score 1.10
62.swwwolf / wdbgark
WinDBG Anti-RootKit Extension
- kernel-mode
- c-plus-plus
- malware
- malware-analysis
- malware-research
- forensic-analysis
- +14 more
+2 stars
from 640 · score 1.10
63.season-lab / bluepill
BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)
+2 stars
from 127 · score 1.10
64.bhanuprakasheagala / eTraceGen
A modular Linux telemetry engine built with eBPF, libbpf CO-RE, and Modern C++ that captures kernel-level process, file, syscall, and network events through a portable event-processing pipeline for decoding, enrichment, filtering, and structured output—forming the foundation for higher-level runtime intelligence.
- cpp20
- ebpf
- event-logger
- filesystem
- linux
- linux-kernel
- +6 more
+2 stars
from 2 · score 1.10
65.google / certificate-transparencyArchived
Auditing for TLS certificates.
+1 stars
from 886 · score 0.69
66.redspah / xxhash_cpp
Port of the xxhash library to C++17.
+1 stars
from 185 · score 0.69
67.primihub / hehub
HEhub is a library for homomorphic encryption and its applications, and is part of the PrimiHub project.
- bgv
- ckks
- cryptography
- fhe
- fully-homomorphic-encryption
- homomorphic-encryption
- +3 more
+1 stars
from 111 · score 0.69
68.0xVavaldi / ruleprocessorY
Rule Processor Y is a next-gen Rule processor with complex multibyte character support built to support Hashcat
- cybersecurity
- hashcat
- hashcat-rules
- johntheripper
- jtr
- mdxfind
- +2 more
+1 stars
from 38 · score 0.69