+13,695 stars
from 240,711 · score 9.52
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
1–100 of 103 by Attention Score · Aug 7, 2026 – Nov 4, 2026 (UTC)
2.microsoft / PowerToys
Microsoft PowerToys is a collection of utilities that supercharge productivity and customization on Windows
+3,850 stars
from 136,710 · score 8.26
+2,327 stars
from 78,268 · score 7.75
4.openwrt / openwrt
This repository is a mirror of https://git.openwrt.org/openwrt/openwrt.git It is for reference only and is not active for check-ins. We will continue to accept Pull Requests here. They will be merged via staging trees then into openwrt.git.
+1,328 stars
from 27,757 · score 7.19
5.containers / bubblewrap
Low-level unprivileged sandboxing tool used by Flatpak and similar projects
- user-namespaces
- linux-containers
+1,133 stars
from 8,231 · score 7.03
6.winsiderss / systeminformer
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com
- administrator
- windows
- system-monitor
- performance-monitoring
- performance-tuning
- performance
- +13 more
+896 stars
from 15,516 · score 6.80
7.valinet / ExplorerPatcher
This project aims to enhance the working environment on Windows
+866 stars
from 33,362 · score 6.77
+643 stars
from 10,107 · score 6.47
9.reactos / reactos
A free Windows-compatible Operating System
- operating-system
- c
- kernel
- os
- osdev
- x86
- +7 more
+613 stars
from 17,823 · score 6.42
10.immortalwrt / immortalwrt
An opensource OpenWrt variant for mainland China users.
+586 stars
from 11,282 · score 6.38
11.ExistentialAudio / BlackHole
BlackHole is a modern macOS audio loopback driver that allows applications to pass audio to other applications with zero additional latency.
+547 stars
from 19,462 · score 6.31
12.qemu / qemu
Official QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.
+509 stars
from 13,477 · score 6.23
13.systemd / systemd
The systemd System and Service Manager
+501 stars
from 16,496 · score 6.22
14.asmvik / yabai
A tiling window manager for macOS based on binary space partitioning
+500 stars
from 29,305 · score 6.22
+375 stars
from 17,115 · score 5.93
+372 stars
from 15,248 · score 5.92
17.flightlessmango / MangoHud
A Vulkan and OpenGL overlay for monitoring FPS, temperatures, CPU/GPU load and more.
+368 stars
from 8,859 · score 5.91
18.NVIDIA / open-gpu-kernel-modules
NVIDIA Linux open GPU kernel module source
+362 stars
from 17,191 · score 5.89
19.microsoft / mimalloc
mimalloc is a compact general purpose allocator with excellent performance.
+302 stars
from 13,226 · score 5.71
20.jart / cosmopolitan
build-once run-anywhere c library
- polyglot
- containers
- linux
- openbsd
- netbsd
- freebsd
- +6 more
+286 stars
from 21,148 · score 5.66
21.cilium / tetragon
eBPF-based Security Observability and Runtime Enforcement
+277 stars
from 4,877 · score 5.63
22.Syllo / nvtop
GPU & Accelerator process monitoring for AMD, Apple, Huawei, Intel, NVIDIA and Qualcomm
- monitoring
- nvidia
- gpu
- ncurses
- intel
- linux
- +6 more
+264 stars
from 10,859 · score 5.58
23.raspberrypi / linux
Kernel source tree for Raspberry Pi-provided kernel builds. Issues unrelated to the linux kernel should be posted on the community forum at https://forums.raspberrypi.com/
+262 stars
from 13,032 · score 5.57
24.glfw / glfw
A multi-platform library for OpenGL, OpenGL ES, Vulkan, window and input
+260 stars
from 15,182 · score 5.56
25.screetsec / TheFatRat
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
- thefatrat
- bypass
- linux
- autorun
- bypass-av
- antivirus
- +14 more
+250 stars
from 11,329 · score 5.53
26.karlstav / cava
Cross-platform Audio Visualizer
+229 stars
from 6,281 · score 5.44
27.eunomia-bpf / agentsight
lightweight system-level observability for AI Agents
+220 stars
from 551 · score 5.40
+206 stars
from 12,339 · score 5.33
29.fontforge / fontforge
Free (libre) font editor for Windows, Mac OS X and GNU+Linux
+200 stars
from 7,858 · score 5.30
+191 stars
from 31,420 · score 5.26
31.gojue / ecapture
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
+169 stars
from 15,362 · score 5.14
+159 stars
from 7,582 · score 5.08
33.iovisor / bcc
BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more
+157 stars
from 22,570 · score 5.06
34.imbushuo / mac-precision-touchpad
Windows Precision Touchpad Driver Implementation for Apple MacBook / Magic Trackpad
- windows-precision-touchpad
- driver
- apple-macbook
- hid
- usb-hid
- windows-driver
- +4 more
+147 stars
from 10,368 · score 5.00
35.microsoft / WSL2-Linux-Kernel
The source for the Linux kernel used in Windows Subsystem for Linux 2 (WSL2)
+135 stars
from 10,468 · score 4.91
+134 stars
from 2,099 · score 4.91
37.GrapheneOS / hardened_malloc
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
- malloc
- security
- memory-allocation
- malloc-library
- memory-allocator
- memory
- +4 more
+129 stars
from 1,925 · score 4.87
+126 stars
from 1,998 · score 4.84
+114 stars
from 10,500 · score 4.74
40.krallin / tini
A tiny but valid `init` for containers
+107 stars
from 11,179 · score 4.68
+96 stars
from 1,695 · score 4.57
42.simd-everywhere / simde
Implementations of SIMD instruction sets for systems which don't natively support them.
+81 stars
from 3,063 · score 4.41
43.m0nad / Diamorphine
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
- kernel-module
- security-tools
- +14 more
+77 stars
from 2,411 · score 4.36
44.ColleagueRiley / RGFW
A lightweight single-header cross-platform library for general windowing
+76 stars
from 1,842 · score 4.34
45.gphoto / libgphoto2
The libgphoto2 camera access and control library.
+75 stars
from 1,338 · score 4.33
46.microsoft / ebpf-for-windows
eBPF implementation that runs on top of Windows
+66 stars
from 3,522 · score 4.20
47.ashvardanian / StringZilla
Up to 100x faster strings for C, C++, CUDA, Python, Rust, Swift, JS, & Go, leveraging NEON, AVX2, AVX-512, SVE, GPGPU, & SWAR to accelerate search, hashing, sorting, edit distances, sketches, and memory ops 🦖
+63 stars
from 3,520 · score 4.16
48.mjansson / rpmalloc
Public domain cross platform lock free thread caching 16-byte aligned memory allocator implemented in C
- concurrency
- thread
- memory
- allocator
+54 stars
from 2,479 · score 4.01
49.mattconte / tlsf
Two-Level Segregated Fit memory allocator implementation.
+51 stars
from 1,587 · score 3.95
50.bdwgc / bdwgc
The Boehm-Demers-Weiser conservative C/C++ Garbage Collector (bdwgc, also known as bdw-gc, boehm-gc, libgc)
- garbage-collection
- memory-management
- memory-leak-detection
- c
- cpp
- c-plus-plus
- +8 more
+49 stars
from 3,507 · score 3.91
51.mozillazg / ptcpdump
Process-aware, eBPF-based tcpdump
- ebpf
- ebpf-tc
- tcpdump
- tcpdump-like
- ebpf-go
- network-capture
- +9 more
+49 stars
from 1,250 · score 3.91
52.OpenKinect / libfreenect
Drivers and libraries for the Xbox Kinect device on Windows, Linux, and OS X
+46 stars
from 3,810 · score 3.85
53.cilium / pwru
Packet, where are you? -- eBPF-based Linux kernel networking debugger
+46 stars
from 3,801 · score 3.85
54.libbpf / libbpf
Automated upstream mirror for libbpf stand-alone build.
+45 stars
from 2,734 · score 3.83
55.ntop / PF_RING
High-speed packet processing framework
- pf-ring
- capture-packets
- high-speed
- 100gbit
- 10gbit
- 40gbit
+36 stars
from 2,954 · score 3.61
56.hengyoush / kyanos
Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
- command-line-tool
- ebpf
- network
- bpf
- capture
- sniffer
- +4 more
+35 stars
from 5,043 · score 3.58
57.jtsylve / LiME
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
+35 stars
from 2,020 · score 3.58
58.zlib-ng / minizip-ng
Fork of the popular zip manipulation library found in the zlib distribution.
- minizip
- zip
- zlib
- lzma
- bzip2
- winzip-aes
- +9 more
+33 stars
from 1,476 · score 3.53
+29 stars
from 7,508 · score 3.40
60.apple / darwin-xnuArchived
Legacy mirror of Darwin Kernel. Replaced by https://github.com/apple-oss-distributions/xnu
+28 stars
from 11,243 · score 3.37
61.kolemannix / ffc.h
Single-header c99 accelerated float/double parsing. Port of the fast_float library.
+27 stars
from 198 · score 3.33
62.eunomia-bpf / ActPlane
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
- ebpf
- harness
- ifc
- policy-engine
+27 stars
from 82 · score 3.33
+26 stars
from 771 · score 3.30
64.h3xduck / TripleCross
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
+23 stars
from 1,969 · score 3.18
65.Mutasem-mk4 / procscope
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
- bpf
- ebpf
- forensics
- golang
- linux-security
- reverse-engineering
- +14 more
+23 stars
from 25 · score 3.18
66.Xfennec / progress
Linux tool to show progress for cp, mv, dd, ... (formerly known as cv)
+21 stars
from 8,833 · score 3.09
67.jakogut / tinyvm
TinyVM is a small, fast, lightweight virtual machine written in pure ANSI C.
+16 stars
from 3,314 · score 2.83
68.pathtofile / bad-bpf
A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29
+16 stars
from 695 · score 2.83
69.Gui774ume / ebpfkit
ebpfkit is a rootkit powered by eBPF
- ebpf
- security
- rootkit
- linux
- linux-kernel
- linux-kernel-hacking
- +2 more
+15 stars
from 851 · score 2.77
70.hishamhm / htopArchived
htop is an interactive text-mode process viewer for Unix systems. It aims to be a better 'top'.
+14 stars
from 5,878 · score 2.71
+11 stars
from 3,169 · score 2.48
72.libguestfs / libguestfs
library and tools for accessing and modifying virtual machine disk images.
+11 stars
from 740 · score 2.48
73.rhash / RHash
Great utility for computing hash sums
- hash-functions
- rhash
- magnet-link
- librhash
- sha3
- gost3411-2012
- +8 more
+11 stars
from 724 · score 2.48
74.spaskalev / buddy_alloc
A single header buddy memory allocator for C & C++
- allocator
- allocators
- memory-allocation
- memory-management
- memory-allocator
- buddy-allocator
- +3 more
+11 stars
from 243 · score 2.48
75.yodaos-project / yodaos
Yet another Linux distribution for voice-enabled IoT and embrace Web standards
+8 stars
from 1,219 · score 2.20
76.cxong / tinydir
Lightweight, portable and easy to integrate C directory and file reader
- c
- posix
- portable
- header-only
- filesystem
- directory
+8 stars
from 867 · score 2.20
77.mellowcandle / bitwise
Terminal based bit manipulator in ncurses
- curses
- c
- bitwise
- bitwise-operation
- linux
- terminal-app
+8 stars
from 716 · score 2.20
78.ngircd / ngircd
Free, portable and lightweight Internet Relay Chat server
+8 stars
from 574 · score 2.20
79.gen0sec / jailer
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
- bpf
- ebpf
- kernel
- linux
- linux-kernel
- mac
- +1 more
+6 stars
from 56 · score 1.95
80.EUA / wxHexEditor
wxHexEditor official GIT repo
+5 stars
from 616 · score 1.79
81.strazzere / android-lkms
Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
- loadable-kernel-modules
- android-lkms
- emulators
- kernel
- android
- reverse-engineering
+5 stars
from 221 · score 1.79
+4 stars
from 1,631 · score 1.61
+4 stars
from 1,200 · score 1.61
+4 stars
from 155 · score 1.61
85.hexchat / hexchatArchived
GTK+ IRC client
+3 stars
from 3,221 · score 1.39
86.fast-pack / streamvbyte
Fast integer compression in C using the StreamVByte codec
+3 stars
from 416 · score 1.39
87.microsoft / SysinternalsEBPF
The Linux port of the Sysinternals Sysmon tool.
+3 stars
from 285 · score 1.39
88.Cybereason-Public / owLSM
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
- ebpf
- security
- linux-kernel
- linux-security-module
- sigma-rule
+3 stars
from 279 · score 1.39
89.Gui774ume / ebpfkit-monitor
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
- linux
- security
- kernel
- rootkit
- linux-kernel
- ebpf
- +2 more
+3 stars
from 142 · score 1.39
90.jvm-profiling-tools / perf-map-agent
A java agent to generate method mappings to use with the linux `perf` tool
+2 stars
from 1,699 · score 1.10
91.AntonioND / giibiiadvance
A GB, GBC and GBA emulator with GB Camera support.
- c
- gameboy-emulator
- gameboy-color
- gameboy-advance
- gameboy
- gameboy-advance-emulator
- +3 more
+2 stars
from 207 · score 1.10
92.redcanaryco / redcanary-ebpf-sensor
Red Canary's eBPF Sensor
+2 stars
from 116 · score 1.10
93.netfoundry / zfw
An EBPF based IPv4/IPv6 firewall with integrations for OpenZiti Zero-Trust Framework edge-routers and tunnellers
+2 stars
from 83 · score 1.10
94.eylon-44 / Buzz-OS
A small x86 32-bit operating system.
- assembly
- basic-operating-system
- c
- kernel
- nasm-assembly
- operating-system
- +8 more
+2 stars
from 22 · score 1.10
95.getanteon / alaz
Alaz: Advanced eBPF Agent for Kubernetes Observability – Effortlessly monitor K8s service interactions and performance metrics in your K8s environment. Gain in-depth insights with service maps, metrics, and more, while staying alert to crucial system anomalies 🐝
- ddosify
- ebpf
- kubernetes
- metrics
- monitoring
- observability
- +6 more
+1 stars
from 709 · score 0.69
96.alegrey91 / harpoon
🔍 Function-level tracing tool for Seccomp profiling, with eBPF
- ebpf
- ebpf-programs
- golang
- seccomp
- security-audit
- security-tools
- +7 more
+1 stars
from 176 · score 0.69
97.duraki / virtualcar
A virtual car. Because you wouldn't download a car, would you?
- car
- ecu
- linux-kernel
- automobiles
- canbus
+1 stars
from 158 · score 0.69
98.seandewar / actually-doom.nvim
Play DOOM in Neovim v0.11+ on Linux & macOS
- doom
- game
- neovim
- neovim-plugin
- linux
- kitty-graphics
- +2 more
+1 stars
from 139 · score 0.69
99.gonutz / prototype
Simple 2D game prototyping framework targetting Windows, Mac, Linux, WASM.
+1 stars
from 108 · score 0.69
100.fzakaria / ebpf-mpls-encap-decap
Sample project demonstrating how to use eBPF to encap/decap packets with an MPLS label.
+1 stars
from 56 · score 0.69