1.WerWolv / ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
- hex-editor
- reverse-engineering
- ips
- dear-imgui
- disassembler
- analyzer
- +14 more
+810 stars
from 54,940 · score 6.70
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
54 repositories by Attention Score · Oct 6, 2026 – Nov 4, 2026 (UTC)
2.keepassxreboot / keepassxc
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
- keepassxc
- keepass
- password-manager
- linux
- windows
- cross-platform
- +6 more
+735 stars
from 29,036 · score 6.60
3.x64dbg / x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
- debugger
- windows
- x64
- disassembler
- reverse-engineering
- security
- +14 more
+556 stars
from 49,646 · score 6.32
4.wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
- security
- compliance
- log-analysis
- vulnerability-detection
- cybersecurity
- file-integrity-monitoring
- +14 more
+467 stars
from 17,101 · score 6.15
5.justcallmekoko / ESP32Marauder
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
+457 stars
from 12,548 · score 6.13
6.rizinorg / cutter
Free and Open Source Reverse Engineering Platform powered by rizin
+255 stars
from 19,896 · score 5.55
7.osquery / osquery
SQL powered operating system instrumentation, monitoring, and analytics.
- security
- monitoring
- intrusion-detection
- sql
- hacktoberfest
+125 stars
from 23,600 · score 4.84
8.falcosecurity / falco
Cloud Native Runtime Security
- cncf
- containers
- security
- falco
- ebpf
- kubernetes
- +4 more
+104 stars
from 9,447 · score 4.65
9.x64dbg / ScyllaHide
Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide
+66 stars
from 4,310 · score 4.20
10.lief-project / LIEF
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
- reverse-engineering
- malware-analysis
- binary-analysis
- parser
- modification
- executable-formats
- +13 more
+53 stars
from 5,579 · score 3.99
+49 stars
from 9,933 · score 3.91
12.JonathanSalwan / Triton
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
- reverse-engineering
- symbolic-execution
- binary-analysis
- program-analysis
- taint-analysis
- binary-translation
- +5 more
+48 stars
from 4,312 · score 3.89
13.google / nsjail
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
+48 stars
from 4,135 · score 3.89
+46 stars
from 3,290 · score 3.85
15.bailey27 / cppcryptfs
cppcryptfs is an implementation of the gocryptfs encrypted overlay filesystem in C++ for Windows.
+44 stars
from 966 · score 3.81
16.ayoubfaouzi / al-khaser
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
- anti-analysis
- anti-debugging
- anti-sandbox
- anti-vm
- anti-emulation
- code-injection
- +5 more
+38 stars
from 7,137 · score 3.66
17.avast / retdec
RetDec is a retargetable machine-code decompiler based on LLVM.
+33 stars
from 8,634 · score 3.53
18.kimci86 / bkcrack
Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
- crack
- zip
- multithread
- attack
- plaintext-attack
- ciphertext
- +5 more
+30 stars
from 2,207 · score 3.43
+21 stars
from 5,503 · score 3.09
20.SpacehuhnTech / WiFiDuck
Wireless keystroke injection attack platform
+20 stars
from 3,320 · score 3.04
21.martinus / unordered_dense
A fast & densely stored hashmap and hashset
- c-plus-plus
- cpp17
- cpp
- hash
- hash-tables
- header-only-library
- +4 more
+20 stars
from 1,491 · score 3.04
22.simsong / bulk_extractor
This is the development tree. Production downloads are at:
+15 stars
from 1,426 · score 2.77
+14 stars
from 1,442 · score 2.71
+14 stars
from 1,160 · score 2.71
+14 stars
from 759 · score 2.71
26.greg7mdp / parallel-hashmap
A family of header-only, very fast and memory-friendly hashmap and btree containers.
+13 stars
from 3,216 · score 2.64
27.spacehuhn / esp8266_beaconSpam
Creates up to a thousand WiFi access points with custom SSIDs.
- ssid
- custom-ssids
- wifi
- esp8266
- spam
- flood
- +1 more
+13 stars
from 1,376 · score 2.64
28.tklengyel / drakvuf
DRAKVUF Black-box Binary Analysis
- malware-analysis
- virtualization
- xen
- introspection
+10 stars
from 1,280 · score 2.40
29.SpacehuhnTech / DeauthDetector
Detect deauthentication frames using an ESP8266
+10 stars
from 981 · score 2.40
30.Alia5 / PiCCANTE
PiCCANTE is a powerful tool for exploring and reversing CAN busses of vehicles, based on Raspberry Pi Pico (any model)
- can
- canbus
- car
- car-hacking
- reverse-engineering
- vehicle
- +2 more
+7 stars
from 96 · score 2.08
31.iamsopotatoe-coder / TinyLoad
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
- compression
- packer
- pe-packer
- pe-compress
- pe-protection
- pepacker
- +13 more
+6 stars
from 196 · score 1.95
32.cmu-sei / pharos
Automated static analysis tools for binary programs
- binary-analysis
- reverse-engineering
+5 stars
from 1,737 · score 1.79
33.Thalhammer / jwt-cpp
A header only library for creating and validating json web tokens in c++
- cpp
- header-only
- jwt
- json-web-token
+5 stars
from 1,164 · score 1.79
+4 stars
from 7,801 · score 1.61
35.baidu / openrasp
🔥Open source RASP solution
+4 stars
from 2,987 · score 1.61
36.greg7mdp / sparsepp
A fast, memory efficient hash map for C++
- hash-tables
- sparse-containers
- unordered
- sparsehash
- hashmap
- hash
- +2 more
+4 stars
from 1,311 · score 1.61
37.nil0x42 / duplicut
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
+4 stars
from 981 · score 1.61
38.DFIR-ORC / dfir-orc
Forensics artefact collection tool for systems running Microsoft Windows
- dfir
- incident-response
- collection
+4 stars
from 449 · score 1.61
39.AristoChen / usb-proxy
A USB proxy based on raw-gadget and libusb
- usb
- proxy
- libusb
- otg
- raspberry-pi
- usb-otg
- +7 more
+4 stars
from 286 · score 1.61
40.openwall / johnny
GUI frontend to John the Ripper password cracker
+3 stars
from 645 · score 1.39
41.avaneev / komihash
Very fast, high-quality hash function, discrete-incremental and streamed hashing-capable (non-cryptographic, header-only C/C++) 27GB/s + PRNG
+3 stars
from 286 · score 1.39
42.martinus / robin-hood-hashingArchived
Fast & memory efficient hashtable based on robin hood hashing for C++11/14/17/20
+2 stars
from 1,618 · score 1.10
43.google / highwayhashArchived
Fast strong hash functions: SipHash/HighwayHash
+2 stars
from 1,602 · score 1.10
44.secrary / Andromeda
Andromeda - Interactive Reverse Engineering Tool for Android Applications
- android
- reverse-engineering
- binary-analysis
- static-analysis
- apk
+2 stars
from 713 · score 1.10
45.horsicq / Nauz-File-Detector
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
- detect
- reverse-engineering
- signature
- malware-analysis
- malware-research
- malware-detection
- +2 more
+2 stars
from 584 · score 1.10
46.shrec / UltrafastSecp256k1
Ultra high-performance secp256k1 ECC engine | Python, Node.js, Rust, Go, C#, Swift, Java bindings | CUDA, Metal, OpenCL GPU | ECDSA, Schnorr, FROST, MuSig2, BIP-352 | 15+ platforms
- cryptography
- cuda
- riscv
- secp256k1
- arm64
- opencl
- +14 more
+2 stars
from 59 · score 1.10
47.codilime / velesArchived
Binary data analysis and visualization tool
- hexeditor
- qt
- cpp
- visualization
- shaders
- reverse-engineering
- +1 more
+1 stars
from 1,238 · score 0.69
+1 stars
from 983 · score 0.69
49.leetonidas / demovfuscator
A work-in-progress deobfuscator for movfuscated binaries
+1 stars
from 765 · score 0.69
50.arun11299 / cpp-jwt
JSON Web Token library for C++
+1 stars
from 441 · score 0.69
51.abumq / licensepp
Software licensing and registration using digital signatures and public cryptography 🪪
- licensing
- software-licensing
- software-license
- security
+1 stars
from 439 · score 0.69
52.hasherezade / persistence_demos
Demos of various (also non standard) persistence methods used by malware
+1 stars
from 232 · score 0.69
53.CheckPointSW / showstopper
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
+1 stars
from 226 · score 0.69
+1 stars
from 208 · score 0.69