+3,902 stars
from 250,391 · score 8.27
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
1–100 of 133 by Attention Score · Oct 5, 2026 – Nov 3, 2026 (UTC)
2.microsoft / PowerToys
Microsoft PowerToys is a collection of utilities that supercharge productivity and customization on Windows
+1,691 stars
from 138,814 · score 7.43
+944 stars
from 79,624 · score 6.85
4.openwrt / openwrt
This repository is a mirror of https://git.openwrt.org/openwrt/openwrt.git It is for reference only and is not active for check-ins. We will continue to accept Pull Requests here. They will be merged via staging trees then into openwrt.git.
+452 stars
from 28,597 · score 6.12
5.containers / bubblewrap
Low-level unprivileged sandboxing tool used by Flatpak and similar projects
- user-namespaces
- linux-containers
+447 stars
from 8,909 · score 6.10
6.reactos / reactos
A free Windows-compatible Operating System
- operating-system
- c
- kernel
- os
- osdev
- x86
- +7 more
+295 stars
from 18,132 · score 5.69
7.winsiderss / systeminformer
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com
- administrator
- windows
- system-monitor
- performance-monitoring
- performance-tuning
- performance
- +13 more
+269 stars
from 16,138 · score 5.60
8.valinet / ExplorerPatcher
This project aims to enhance the working environment on Windows
+253 stars
from 33,968 · score 5.54
9.systemd / systemd
The systemd System and Service Manager
+238 stars
from 16,756 · score 5.48
10.CroqueMr / libreelec-x86-DV
LibreELEC x86_64 with Dolby Vision support for Intel, AMD, and Nvidia
+234 stars
from 33 · score 5.46
11.immortalwrt / immortalwrt
An opensource OpenWrt variant for mainland China users.
+195 stars
from 11,664 · score 5.28
12.qemu / qemu
Official QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.
+180 stars
from 13,802 · score 5.20
13.mackron / miniaudio
Audio playback and capture library written in C, in a single source file.
+166 stars
from 7,315 · score 5.12
+145 stars
from 15,471 · score 4.98
15.flightlessmango / MangoHud
A Vulkan and OpenGL overlay for monitoring FPS, temperatures, CPU/GPU load and more.
+143 stars
from 9,080 · score 4.97
16.NVIDIA / open-gpu-kernel-modules
NVIDIA Linux open GPU kernel module source
+132 stars
from 17,417 · score 4.89
17.asmvik / yabai
A tiling window manager for macOS based on binary space partitioning
+129 stars
from 29,675 · score 4.87
+122 stars
from 17,360 · score 4.81
19.capstone-engine / capstone
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
- reverse-engineering
- disassembler
- security
- framework
- arm
- arm64
- +14 more
+115 stars
from 9,049 · score 4.75
20.microsoft / mimalloc
mimalloc is a compact general purpose allocator with excellent performance.
+107 stars
from 13,419 · score 4.68
21.cilium / tetragon
eBPF-based Security Observability and Runtime Enforcement
+98 stars
from 5,052 · score 4.60
22.jart / cosmopolitan
build-once run-anywhere c library
- polyglot
- containers
- linux
- openbsd
- netbsd
- freebsd
- +6 more
+94 stars
from 21,337 · score 4.55
23.xemu-project / xemu
Original Xbox Emulator for Windows, macOS, and Linux (Active Development)
+93 stars
from 4,137 · score 4.54
24.Syllo / nvtop
GPU & Accelerator process monitoring for AMD, Apple, Huawei, Intel, NVIDIA and Qualcomm
- monitoring
- nvidia
- gpu
- ncurses
- intel
- linux
- +6 more
+91 stars
from 11,031 · score 4.52
25.screetsec / TheFatRat
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
- thefatrat
- bypass
- linux
- autorun
- bypass-av
- antivirus
- +14 more
+88 stars
from 11,489 · score 4.49
26.AFLplusplus / AFLplusplus
AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
- afl
- afl-fuzz
- afl-fuzzer
- fuzzing
- fuzzer
- fuzz-testing
- +9 more
+79 stars
from 6,777 · score 4.38
27.raspberrypi / linux
Kernel source tree for Raspberry Pi-provided kernel builds. Issues unrelated to the linux kernel should be posted on the community forum at https://forums.raspberrypi.com/
+75 stars
from 13,214 · score 4.33
+72 stars
from 12,467 · score 4.29
29.glfw / glfw
A multi-platform library for OpenGL, OpenGL ES, Vulkan, window and input
+71 stars
from 15,368 · score 4.28
30.fontforge / fontforge
Free (libre) font editor for Windows, Mac OS X and GNU+Linux
+62 stars
from 7,995 · score 4.14
+62 stars
from 2,171 · score 4.14
32.karlstav / cava
Cross-platform Audio Visualizer
+61 stars
from 6,448 · score 4.13
+60 stars
from 31,550 · score 4.11
34.gojue / ecapture
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
+55 stars
from 15,475 · score 4.03
35.pgbackrest / pgbackrest
Reliable PostgreSQL Backup & Restore
- postgresql
- parallel
- backup
- restore
- archiving
- multi-process
- +14 more
+54 stars
from 4,417 · score 4.01
36.microsoft / WSL2-Linux-Kernel
The source for the Linux kernel used in Windows Subsystem for Linux 2 (WSL2)
+52 stars
from 10,551 · score 3.97
+50 stars
from 7,688 · score 3.93
38.eunomia-bpf / agentsight
lightweight system-level observability for AI Agents
+50 stars
from 719 · score 3.93
39.wasm3 / wasm3
🚀 A fast WebAssembly interpreter and the most universal WASM runtime
- wasm
- webassembly
- embedded
- iot
- scripting
- edge-computing
- +7 more
+43 stars
from 8,033 · score 3.78
40.iovisor / bcc
BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more
+41 stars
from 22,686 · score 3.74
+41 stars
from 10,571 · score 3.74
42.krallin / tini
A tiny but valid `init` for containers
+40 stars
from 11,245 · score 3.71
43.tidesdb / tidesdb
High-performance write & space optimized transactional storage engine.
- storage-engine
- c-library
- database
- lsm-tree
- oltp
- ttl
- +11 more
+40 stars
from 570 · score 3.71
44.GrapheneOS / hardened_malloc
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
- malloc
- security
- memory-allocation
- malloc-library
- memory-allocator
- memory
- +4 more
+39 stars
from 2,013 · score 3.69
45.GPUOpen-LibrariesAndSDKs / VulkanMemoryAllocator
Easy to integrate Vulkan memory allocation library
+30 stars
from 3,514 · score 3.43
46.simd-everywhere / simde
Implementations of SIMD instruction sets for systems which don't natively support them.
+30 stars
from 3,114 · score 3.43
47.sleuthkit / sleuthkit
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
- sleuthkit
- tct
- ntfs
- forensics
- incident-response
+29 stars
from 3,154 · score 3.40
48.Tencent / xLua
xLua is a lua programming solution for C# ( Unity, .Net, Mono) , it supports android, ios, windows, linux, osx, etc.
+28 stars
from 10,193 · score 3.37
+28 stars
from 5,263 · score 3.37
50.gphoto / libgphoto2
The libgphoto2 camera access and control library.
+28 stars
from 1,383 · score 3.37
51.RIOT-OS / RIOT
RIOT - The friendly OS for IoT
+26 stars
from 5,806 · score 3.30
52.linux-can / can-utils
Linux-CAN / SocketCAN user space applications
+26 stars
from 2,926 · score 3.30
53.m0nad / Diamorphine
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
- kernel-module
- security-tools
- +14 more
+26 stars
from 2,462 · score 3.30
+24 stars
from 1,765 · score 3.22
55.microsoft / ebpf-for-windows
eBPF implementation that runs on top of Windows
+23 stars
from 3,564 · score 3.18
56.mjansson / rpmalloc
Public domain cross platform lock free thread caching 16-byte aligned memory allocator implemented in C
- concurrency
- thread
- memory
- allocator
+23 stars
from 2,510 · score 3.18
57.ColleagueRiley / RGFW
A lightweight single-header cross-platform library for general windowing
+23 stars
from 1,895 · score 3.18
58.akopytov / sysbench
Scriptable database and system performance benchmark
- benchmark
- mysql
- postgresql
- lua
- luajit
- console
- +6 more
+20 stars
from 6,794 · score 3.04
59.sist2app / sist2
Lightning-fast file system indexer and search tool
+20 stars
from 1,312 · score 3.04
60.OpenKinect / libfreenect
Drivers and libraries for the Xbox Kinect device on Windows, Linux, and OS X
+18 stars
from 3,838 · score 2.94
61.ashvardanian / StringZilla
Up to 100x faster strings for C, C++, CUDA, Python, Rust, Swift, JS, & Go, leveraging NEON, AVX2, AVX-512, SVE, GPGPU, & SWAR to accelerate search, hashing, sorting, edit distances, sketches, and memory ops 🦖
+18 stars
from 3,565 · score 2.94
62.mozillazg / ptcpdump
Process-aware, eBPF-based tcpdump
- ebpf
- ebpf-tc
- tcpdump
- tcpdump-like
- ebpf-go
- network-capture
- +9 more
+17 stars
from 1,282 · score 2.89
63.bdwgc / bdwgc
The Boehm-Demers-Weiser conservative C/C++ Garbage Collector (bdwgc, also known as bdw-gc, boehm-gc, libgc)
- garbage-collection
- memory-management
- memory-leak-detection
- c
- cpp
- c-plus-plus
- +8 more
+16 stars
from 3,540 · score 2.83
64.kolemannix / ffc.h
Single-header c99 accelerated float/double parsing. Port of the fast_float library.
+15 stars
from 209 · score 2.77
65.the-tcpdump-group / libpcap
the LIBpcap interface to various kernel packet capture mechanism
- pcap
- pcapng
- packet-capture
- sniffer
- libpcap
- bpf
- +2 more
+14 stars
from 3,171 · score 2.71
66.jtsylve / LiME
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
+14 stars
from 2,040 · score 2.71
67.lizrice / learning-ebpf
Learning eBPF, published by O'Reilly - out now! Here's where you'll find a VM config for the examples, and more
- ebpf
- ebpf-co-re
- linux-kernel
+14 stars
from 1,827 · score 2.71
68.mattconte / tlsf
Two-Level Segregated Fit memory allocator implementation.
+14 stars
from 1,625 · score 2.71
69.Mutasem-mk4 / procscope
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
- bpf
- ebpf
- forensics
- golang
- linux-security
- reverse-engineering
- +14 more
+13 stars
from 34 · score 2.64
70.cilium / pwru
Packet, where are you? -- eBPF-based Linux kernel networking debugger
+12 stars
from 3,835 · score 2.56
+12 stars
from 2,982 · score 2.56
72.libbpf / libbpf
Automated upstream mirror for libbpf stand-alone build.
+12 stars
from 2,766 · score 2.56
+12 stars
from 2,165 · score 2.56
74.OSGeo / grass
GRASS - free and open-source geospatial processing engine
- grass-gis
- geospatial
- geospatial-analysis
- raster
- vector
- timeseries-analysis
- +14 more
+12 stars
from 1,173 · score 2.56
75.pathtofile / bad-bpf
A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29
+12 stars
from 699 · score 2.56
+11 stars
from 7,526 · score 2.48
77.panda-re / panda
Platform for Architecture-Neutral Dynamic Analysis
- reverse-engineering
- dynamic-analysis
- qemu
- pandare
- pypanda
+11 stars
from 2,783 · score 2.48
78.h3xduck / TripleCross
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
+11 stars
from 1,981 · score 2.48
79.RRZE-HPC / likwid
Performance monitoring and benchmarking suite
- likwid
- hardware-performance-counters
- threading
- x86
- c
- lua
- +13 more
+10 stars
from 1,948 · score 2.40
80.ashvardanian / NumKong
SIMD-accelerated distances, dot products, matrix ops, geospatial & geometric kernels for 16 numeric types — from 6-bit floats to 64-bit complex — across x86, Arm, RISC-V, and WASM, with bindings for Python, Rust, C, C++, Swift, JS, and Go 📐
+10 stars
from 1,895 · score 2.40
81.apple / darwin-xnuArchived
Legacy mirror of Darwin Kernel. Replaced by https://github.com/apple-oss-distributions/xnu
+9 stars
from 11,262 · score 2.30
82.hengyoush / kyanos
Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
- command-line-tool
- ebpf
- network
- bpf
- capture
- sniffer
- +4 more
+9 stars
from 5,069 · score 2.30
83.kondrak / vkQuake2
id Software's Quake 2 v3.21 with mission packs and Vulkan support (Windows, Linux, macOS, FreeBSD, Raspberry Pi 4)
- vulkan
- vulkan-api
- quake
- quake2
- gpu
- 3d-graphics
- +10 more
+9 stars
from 1,013 · score 2.30
84.dvorka / hstr
Bash and Zsh shell history TUI suggest box - easily view, navigate, search and manage your command history.
+8 stars
from 4,457 · score 2.20
85.jakogut / tinyvm
TinyVM is a small, fast, lightweight virtual machine written in pure ANSI C.
+8 stars
from 3,322 · score 2.20
86.hishamhm / htopArchived
htop is an interactive text-mode process viewer for Unix systems. It aims to be a better 'top'.
+7 stars
from 5,884 · score 2.08
87.boazsegev / facil.io
Your high performance web application C framework
- websocket-server
- http-protocol
- http-parser
- c
- concurrency
- framework
- +7 more
+7 stars
from 2,406 · score 2.08
88.liballeg / allegro5
The official Allegro 5 git repository. Pull requests welcome!
+7 stars
from 2,122 · score 2.08
89.zlib-ng / minizip-ng
Fork of the popular zip manipulation library found in the zlib distribution.
- minizip
- zip
- zlib
- lzma
- bzip2
- winzip-aes
- +9 more
+7 stars
from 1,502 · score 2.08
+7 stars
from 992 · score 2.08
91.uroni / urbackup_backend
UrBackup - Client/Server Open Source Network Backup for Windows, MacOS and Linux
+7 stars
from 934 · score 2.08
92.DustinWatts / FreeTouchDeck
For interfacing with Windows/macOS/Linux using an ESP32, a touchscreen and BLE.
+7 stars
from 710 · score 2.08
93.Cogmasters / concord
A Discord API wrapper library made in C
+6 stars
from 654 · score 1.95
94.liquidaty / zsv
zsv+lib: tabular data swiss-army knife CLI + world's fastest (simd) CSV parser
+6 stars
from 409 · score 1.95
95.eunomia-bpf / ActPlane
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
- ebpf
- harness
- ifc
- policy-engine
+6 stars
from 103 · score 1.95
96.ring-lang / ring
A simple, lightweight, flexible, embeddable, portable and multi-paradigm dynamic programming language for developing applications, tools, and domain-specific languages
- programming-language
- compiler
- virtual-machine
- ring
- language
- ring-programming-language
- +14 more
+5 stars
from 1,465 · score 1.79
97.gen0sec / jailer
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
- bpf
- ebpf
- kernel
- linux
- linux-kernel
- mac
- +1 more
+5 stars
from 57 · score 1.79
98.Xfennec / progress
Linux tool to show progress for cp, mv, dd, ... (formerly known as cv)
+4 stars
from 8,850 · score 1.61
99.a0rtega / pafishArchived
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
- malware
- reverse-engineering
- virtual-machine
- malware-families
- analysis-environments
- sandbox
- +3 more
+4 stars
from 3,941 · score 1.61
+4 stars
from 1,578 · score 1.61