+24,044 stars
from 230,362 · score 10.09
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
1–100 of 103 by Attention Score · May 9, 2026 – Nov 4, 2026 (UTC)
2.microsoft / PowerToys
Microsoft PowerToys is a collection of utilities that supercharge productivity and customization on Windows
+9,005 stars
from 131,555 · score 9.11
+4,676 stars
from 75,919 · score 8.45
4.openwrt / openwrt
This repository is a mirror of https://git.openwrt.org/openwrt/openwrt.git It is for reference only and is not active for check-ins. We will continue to accept Pull Requests here. They will be merged via staging trees then into openwrt.git.
+2,511 stars
from 26,574 · score 7.83
5.containers / bubblewrap
Low-level unprivileged sandboxing tool used by Flatpak and similar projects
- user-namespaces
- linux-containers
+2,360 stars
from 7,004 · score 7.77
6.valinet / ExplorerPatcher
This project aims to enhance the working environment on Windows
+2,181 stars
from 32,047 · score 7.69
7.winsiderss / systeminformer
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com
- administrator
- windows
- system-monitor
- performance-monitoring
- performance-tuning
- performance
- +13 more
+2,047 stars
from 14,365 · score 7.62
+1,269 stars
from 9,481 · score 7.15
9.immortalwrt / immortalwrt
An opensource OpenWrt variant for mainland China users.
+1,262 stars
from 10,606 · score 7.14
10.asmvik / yabai
A tiling window manager for macOS based on binary space partitioning
+1,203 stars
from 28,602 · score 7.09
11.ExistentialAudio / BlackHole
BlackHole is a modern macOS audio loopback driver that allows applications to pass audio to other applications with zero additional latency.
+1,164 stars
from 18,845 · score 7.06
12.reactos / reactos
A free Windows-compatible Operating System
- operating-system
- c
- kernel
- os
- osdev
- x86
- +7 more
+1,095 stars
from 17,341 · score 7.00
13.qemu / qemu
Official QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.
+963 stars
from 13,023 · score 6.87
14.systemd / systemd
The systemd System and Service Manager
+886 stars
from 16,111 · score 6.79
15.microsoft / mimalloc
mimalloc is a compact general purpose allocator with excellent performance.
+822 stars
from 12,706 · score 6.71
+796 stars
from 16,694 · score 6.68
+793 stars
from 14,827 · score 6.68
18.flightlessmango / MangoHud
A Vulkan and OpenGL overlay for monitoring FPS, temperatures, CPU/GPU load and more.
+758 stars
from 8,469 · score 6.63
19.jart / cosmopolitan
build-once run-anywhere c library
- polyglot
- containers
- linux
- openbsd
- netbsd
- freebsd
- +6 more
+749 stars
from 20,685 · score 6.62
20.NVIDIA / open-gpu-kernel-modules
NVIDIA Linux open GPU kernel module source
+735 stars
from 16,818 · score 6.60
+679 stars
from 6,858 · score 6.52
22.glfw / glfw
A multi-platform library for OpenGL, OpenGL ES, Vulkan, window and input
+569 stars
from 14,873 · score 6.35
23.Syllo / nvtop
GPU & Accelerator process monitoring for AMD, Apple, Huawei, Intel, NVIDIA and Qualcomm
- monitoring
- nvidia
- gpu
- ncurses
- intel
- linux
- +6 more
+568 stars
from 10,555 · score 6.34
24.raspberrypi / linux
Kernel source tree for Raspberry Pi-provided kernel builds. Issues unrelated to the linux kernel should be posted on the community forum at https://forums.raspberrypi.com/
+541 stars
from 12,753 · score 6.30
25.cilium / tetragon
eBPF-based Security Observability and Runtime Enforcement
+534 stars
from 4,620 · score 6.28
26.screetsec / TheFatRat
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
- thefatrat
- bypass
- linux
- autorun
- bypass-av
- antivirus
- +14 more
+497 stars
from 11,082 · score 6.21
27.karlstav / cava
Cross-platform Audio Visualizer
+464 stars
from 6,046 · score 6.14
28.eunomia-bpf / agentsight
lightweight system-level observability for AI Agents
+460 stars
from 311 · score 6.13
29.gojue / ecapture
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
+454 stars
from 15,077 · score 6.12
+431 stars
from 12,114 · score 6.07
+430 stars
from 31,181 · score 6.07
32.iovisor / bcc
BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more
+414 stars
from 22,313 · score 6.03
33.fontforge / fontforge
Free (libre) font editor for Windows, Mac OS X and GNU+Linux
+396 stars
from 7,662 · score 5.98
+369 stars
from 7,372 · score 5.91
35.microsoft / WSL2-Linux-Kernel
The source for the Linux kernel used in Windows Subsystem for Linux 2 (WSL2)
+319 stars
from 10,284 · score 5.77
36.imbushuo / mac-precision-touchpad
Windows Precision Touchpad Driver Implementation for Apple MacBook / Magic Trackpad
- windows-precision-touchpad
- driver
- apple-macbook
- hid
- usb-hid
- windows-driver
- +4 more
+304 stars
from 10,211 · score 5.72
+263 stars
from 1,970 · score 5.58
38.krallin / tini
A tiny but valid `init` for containers
+261 stars
from 11,025 · score 5.57
+244 stars
from 10,370 · score 5.50
40.GrapheneOS / hardened_malloc
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
- malloc
- security
- memory-allocation
- malloc-library
- memory-allocator
- memory
- +4 more
+242 stars
from 1,812 · score 5.49
+241 stars
from 1,883 · score 5.49
+196 stars
from 1,595 · score 5.28
43.m0nad / Diamorphine
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
- kernel-module
- security-tools
- +14 more
+193 stars
from 2,295 · score 5.27
44.ColleagueRiley / RGFW
A lightweight single-header cross-platform library for general windowing
+171 stars
from 1,747 · score 5.15
45.ashvardanian / StringZilla
Up to 100x faster strings for C, C++, CUDA, Python, Rust, Swift, JS, & Go, leveraging NEON, AVX2, AVX-512, SVE, GPGPU, & SWAR to accelerate search, hashing, sorting, edit distances, sketches, and memory ops 🦖
+161 stars
from 3,422 · score 5.09
46.simd-everywhere / simde
Implementations of SIMD instruction sets for systems which don't natively support them.
+151 stars
from 2,993 · score 5.02
47.microsoft / ebpf-for-windows
eBPF implementation that runs on top of Windows
+135 stars
from 3,453 · score 4.91
48.gphoto / libgphoto2
The libgphoto2 camera access and control library.
+134 stars
from 1,279 · score 4.91
49.bdwgc / bdwgc
The Boehm-Demers-Weiser conservative C/C++ Garbage Collector (bdwgc, also known as bdw-gc, boehm-gc, libgc)
- garbage-collection
- memory-management
- memory-leak-detection
- c
- cpp
- c-plus-plus
- +8 more
+119 stars
from 3,437 · score 4.79
50.cilium / pwru
Packet, where are you? -- eBPF-based Linux kernel networking debugger
+113 stars
from 3,734 · score 4.74
51.libbpf / libbpf
Automated upstream mirror for libbpf stand-alone build.
+110 stars
from 2,669 · score 4.71
52.mjansson / rpmalloc
Public domain cross platform lock free thread caching 16-byte aligned memory allocator implemented in C
- concurrency
- thread
- memory
- allocator
+101 stars
from 2,432 · score 4.62
53.apple / darwin-xnuArchived
Legacy mirror of Darwin Kernel. Replaced by https://github.com/apple-oss-distributions/xnu
+95 stars
from 11,176 · score 4.56
54.mattconte / tlsf
Two-Level Segregated Fit memory allocator implementation.
+95 stars
from 1,543 · score 4.56
55.hengyoush / kyanos
Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
- command-line-tool
- ebpf
- network
- bpf
- capture
- sniffer
- +4 more
+90 stars
from 4,988 · score 4.51
56.jtsylve / LiME
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
+84 stars
from 1,971 · score 4.44
57.OpenKinect / libfreenect
Drivers and libraries for the Xbox Kinect device on Windows, Linux, and OS X
+78 stars
from 3,778 · score 4.37
58.mozillazg / ptcpdump
Process-aware, eBPF-based tcpdump
- ebpf
- ebpf-tc
- tcpdump
- tcpdump-like
- ebpf-go
- network-capture
- +9 more
+73 stars
from 1,226 · score 4.30
59.ntop / PF_RING
High-speed packet processing framework
- pf-ring
- capture-packets
- high-speed
- 100gbit
- 10gbit
- 40gbit
+71 stars
from 2,919 · score 4.28
60.zlib-ng / minizip-ng
Fork of the popular zip manipulation library found in the zlib distribution.
- minizip
- zip
- zlib
- lzma
- bzip2
- winzip-aes
- +9 more
+62 stars
from 1,447 · score 4.14
61.Xfennec / progress
Linux tool to show progress for cp, mv, dd, ... (formerly known as cv)
+58 stars
from 8,796 · score 4.08
+53 stars
from 744 · score 3.99
63.h3xduck / TripleCross
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
+47 stars
from 1,945 · score 3.87
64.Mutasem-mk4 / procscope
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
- bpf
- ebpf
- forensics
- golang
- linux-security
- reverse-engineering
- +14 more
+46 stars
from 2 · score 3.85
65.kolemannix / ffc.h
Single-header c99 accelerated float/double parsing. Port of the fast_float library.
+41 stars
from 184 · score 3.74
+38 stars
from 136 · score 3.66
67.libguestfs / libguestfs
library and tools for accessing and modifying virtual machine disk images.
+33 stars
from 718 · score 3.53
68.pathtofile / bad-bpf
A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29
+31 stars
from 680 · score 3.47
69.jakogut / tinyvm
TinyVM is a small, fast, lightweight virtual machine written in pure ANSI C.
+30 stars
from 3,300 · score 3.43
70.Gui774ume / ebpfkit
ebpfkit is a rootkit powered by eBPF
- ebpf
- security
- rootkit
- linux
- linux-kernel
- linux-kernel-hacking
- +2 more
+27 stars
from 839 · score 3.33
71.ngircd / ngircd
Free, portable and lightweight Internet Relay Chat server
+26 stars
from 556 · score 3.30
72.hishamhm / htopArchived
htop is an interactive text-mode process viewer for Unix systems. It aims to be a better 'top'.
+24 stars
from 5,868 · score 3.22
+24 stars
from 3,156 · score 3.22
74.hexchat / hexchatArchived
GTK+ IRC client
+22 stars
from 3,202 · score 3.14
75.rhash / RHash
Great utility for computing hash sums
- hash-functions
- rhash
- magnet-link
- librhash
- sha3
- gost3411-2012
- +8 more
+22 stars
from 713 · score 3.14
76.Cybereason-Public / owLSM
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
- ebpf
- security
- linux-kernel
- linux-security-module
- sigma-rule
+22 stars
from 260 · score 3.14
77.spaskalev / buddy_alloc
A single header buddy memory allocator for C & C++
- allocator
- allocators
- memory-allocation
- memory-management
- memory-allocator
- buddy-allocator
- +3 more
+17 stars
from 237 · score 2.89
78.sidevesh / Luminance
A simple GTK application to control brightness of displays including external displays supporting DDC/CI
+17 stars
from 164 · score 2.89
79.mellowcandle / bitwise
Terminal based bit manipulator in ncurses
- curses
- c
- bitwise
- bitwise-operation
- linux
- terminal-app
+16 stars
from 708 · score 2.83
80.yodaos-project / yodaos
Yet another Linux distribution for voice-enabled IoT and embrace Web standards
+14 stars
from 1,213 · score 2.71
81.gen0sec / jailer
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
- bpf
- ebpf
- kernel
- linux
- linux-kernel
- mac
- +1 more
+14 stars
from 48 · score 2.71
82.cxong / tinydir
Lightweight, portable and easy to integrate C directory and file reader
- c
- posix
- portable
- header-only
- filesystem
- directory
+12 stars
from 863 · score 2.56
+10 stars
from 1,194 · score 2.40
84.EUA / wxHexEditor
wxHexEditor official GIT repo
+10 stars
from 611 · score 2.40
85.microsoft / SysinternalsEBPF
The Linux port of the Sysinternals Sysmon tool.
+9 stars
from 279 · score 2.30
+9 stars
from 150 · score 2.30
87.fast-pack / streamvbyte
Fast integer compression in C using the StreamVByte codec
+6 stars
from 413 · score 1.95
88.linux-lock / bpflock
bpflock - eBPF driven security for locking and auditing Linux machines
- bpf
- ebpf
- security
- lsm
- containers
- kubernetes
- +3 more
+6 stars
from 151 · score 1.95
89.jvm-profiling-tools / perf-map-agent
A java agent to generate method mappings to use with the linux `perf` tool
+5 stars
from 1,696 · score 1.79
+5 stars
from 1,630 · score 1.79
91.duraki / virtualcar
A virtual car. Because you wouldn't download a car, would you?
- car
- ecu
- linux-kernel
- automobiles
- canbus
+5 stars
from 154 · score 1.79
92.seandewar / actually-doom.nvim
Play DOOM in Neovim v0.11+ on Linux & macOS
- doom
- game
- neovim
- neovim-plugin
- linux
- kitty-graphics
- +2 more
+5 stars
from 135 · score 1.79
93.netfoundry / zfw
An EBPF based IPv4/IPv6 firewall with integrations for OpenZiti Zero-Trust Framework edge-routers and tunnellers
+5 stars
from 80 · score 1.79
94.smuellerDD / libkcapi
Linux Kernel Crypto API User Space Interface Library
+4 stars
from 193 · score 1.61
95.Gui774ume / ebpfkit-monitor
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
- linux
- security
- kernel
- rootkit
- linux-kernel
- ebpf
- +2 more
+4 stars
from 141 · score 1.61
96.redcanaryco / redcanary-ebpf-sensor
Red Canary's eBPF Sensor
+4 stars
from 114 · score 1.61
97.open-power / skiboot
OPAL boot and runtime firmware for POWER
+3 stars
from 111 · score 1.39
+2 stars
from 9 · score 1.10
99.netoptimizer / prototype-kernel
Prototyping kernel development work outside mainline
- kernel-modules
- kernel
- xdp
- ebpf-programs
- linux-kernel
+1 stars
from 315 · score 0.69
100.oblitum / caps2escArchived
Transforming the most useless key ever in the most useful one
+1 stars
from 174 · score 0.69