1.vxcontrol / pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- ai-agents
- ai-security-tool
- autonomous-agents
- golang
- graphql
- multi-agent-system
- +12 more
+11,849 stars
from 21,340 · score 9.38
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
1–100 of 193 by Attention Score · Aug 6, 2026 – Nov 3, 2026 (UTC)
2.pranshuparmar / witr
Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
+3,966 stars
from 18,949 · score 8.29
3.projectdiscovery / nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- cve-scanner
- subdomain-takeover
- nuclei-engine
- vulnerability-detection
- vulnerability-assessment
- vulnerability-scanner
- +5 more
+2,364 stars
from 30,207 · score 7.77
+2,254 stars
from 28,391 · score 7.72
5.aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
- security
- security-tools
- docker
- containers
- vulnerability-scanners
- vulnerability-detection
- +9 more
+1,814 stars
from 37,130 · score 7.50
6.trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
+1,665 stars
from 27,171 · score 7.42
7.pocket-id / pocket-id
The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.
+1,309 stars
from 8,653 · score 7.18
8.FiloSottile / age
A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
- built-at-rc
- age-encryption
+1,161 stars
from 23,029 · score 7.06
9.sundowndev / phoneinfoga
Information gathering framework for phone numbers
- information-gathering
- phone-number
- osint
- open-source-intelligence
- reconnaissance
- footprint
- +4 more
+1,127 stars
from 17,260 · score 7.03
10.authelia / authelia
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
- totp
- ldap
- sso-authentication
- two-factor-authentication
- docker
- kubernetes
- +14 more
+1,106 stars
from 28,389 · score 7.01
11.crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
+1,059 stars
from 14,385 · score 6.97
12.getsops / sops
Simple and flexible tool for managing secrets
+962 stars
from 22,640 · score 6.87
13.zitadel / zitadel
ZITADEL - Identity infrastructure, simplified for you.
- saml
- authentication
- authorization
- login
- oidc
- sso
- +11 more
+926 stars
from 14,580 · score 6.83
14.casdoor / casdoor
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
+701 stars
from 14,049 · score 6.55
15.google / osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
+694 stars
from 10,688 · score 6.54
16.BishopFox / sliver
Adversary Emulation Framework
- security-tools
- implant
- golang
- dns-server
- http
- c2
- +9 more
+650 stars
from 11,576 · score 6.48
17.goharbor / harbor
An open source trusted cloud native registry project that stores, signs, and scans content.
- cncf
- container
- registry
- helm
- cloud-native
- containers
- +6 more
+640 stars
from 29,024 · score 6.46
18.projectdiscovery / subfinder
Fast passive subdomain enumeration tool.
+633 stars
from 14,078 · score 6.45
+612 stars
from 11,919 · score 6.42
20.owasp-amass / amass
In-depth attack surface mapping and asset discovery
+580 stars
from 14,881 · score 6.36
21.shadow1ng / fscan
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
- fscan
- scanner
- scanning
- sec
- security-tools
- security
+578 stars
from 14,155 · score 6.36
22.FiloSottile / mkcert
A simple zero-config tool to make locally trusted development certificates with any names you'd like.
- https
- tls
- certificates
- local-development
- localhost
- root-ca
- +6 more
+568 stars
from 59,258 · score 6.34
+567 stars
from 16,415 · score 6.34
24.bettercap / bettercap
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
+565 stars
from 19,670 · score 6.34
25.openfga / openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
- authorization
- permissions
- security
- zanzibar
- openfga
- entitlements
- +11 more
+553 stars
from 5,532 · score 6.32
26.anchore / grype
A vulnerability scanner for container images and filesystems
- containers
- security
- vulnerability
- docker
- golang
- go
- +9 more
+523 stars
from 12,647 · score 6.26
27.hashicorp / vault
A tool for secrets management, encryption as a service, and privileged access management
- vault
- go
- secrets
+481 stars
from 35,979 · score 6.18
28.kgretzky / evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
+465 stars
from 15,359 · score 6.14
29.open-policy-agent / opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
- opa
- policy
- declarative
- json
- compliance
- cloud-native
- +2 more
+377 stars
from 12,048 · score 5.93
+368 stars
from 13,900 · score 5.91
+353 stars
from 14,025 · score 5.87
32.gravitational / teleport
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
- certificate
- golang
- +14 more
+343 stars
from 20,724 · score 5.84
33.moonD4rk / HackBrowserData
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
- chrome
- macos
- windows
- pentest-tool
- hacking
- edge
- +4 more
+332 stars
from 14,339 · score 5.81
34.kubescape / kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- kubernetes
- security
- nsa
- mitre-attack
- devops
- best-practice
- +1 more
+301 stars
from 11,541 · score 5.71
35.Velocidex / velociraptor
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
- endpoint-protection
- endpoint-discovery
- +1 more
+275 stars
from 4,134 · score 5.62
36.stakater / Reloader
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
- kubernetes
- openshift
- configmap
- secrets
- pods
- deployments
- +5 more
+272 stars
from 10,273 · score 5.61
37.authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- zanzibar
- permissions
- database
- distributed-systems
- security
- security-tools
- +12 more
+272 stars
from 6,920 · score 5.61
38.dexidp / dex
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
- oidc
- kubernetes
- idp
- identity-provider
- hacktoberfest
+248 stars
from 10,981 · score 5.52
39.go-acme / lego
Let's Encrypt/ACME client and library written in Go
+236 stars
from 9,763 · score 5.47
40.ory / hydra
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
- hydra
- oauth2
- openid-connect
- docker
- server
- security
- +14 more
+218 stars
from 17,428 · score 5.39
41.apache / casbin
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
- casbin
- access-control
- authorization
- rbac
- abac
- acl
- +12 more
+212 stars
from 20,263 · score 5.36
42.jhaals / yopass
Secure sharing of secrets, passwords and files
- password-share
- encryption-decryption
- file-upload
- onetimelink
- onetimesecret
- secret-sharing
+190 stars
from 3,028 · score 5.25
43.ory / kratos
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
- identity
- identity-management
- user-management
- users
- user
- login
- +5 more
+178 stars
from 13,771 · score 5.19
44.cert-manager / cert-manager
Automatically provision and manage TLS certificates in Kubernetes
- kubernetes
- letsencrypt
- tls
- certificate
- crd
- hacktoberfest
+172 stars
from 13,974 · score 5.15
45.Ullaakut / cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
- penetration-testing
- security
- hacking
- infosec
- rtsp
- cctv
- +5 more
+164 stars
from 5,123 · score 5.11
46.coipond / coi
Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops threats automatically.
- claude
- claude-code
- ai-tools
- anthropic
- coding-assistant
- containers
- +14 more
+164 stars
from 609 · score 5.11
47.sbondCo / Watcharr
Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.
+145 stars
from 1,437 · score 4.98
+131 stars
from 2,472 · score 4.88
49.future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
+117 stars
from 12,207 · score 4.77
50.beelzebub-labs / beelzebub
A secure low code deception runtime framework, leveraging AI for System Virtualization.
- cybersecurity
- security
- honeypot
- framework
- go
- research-project
- +14 more
+117 stars
from 2,113 · score 4.77
51.bitnami / sealed-secrets
A Kubernetes controller and tool for one-way encrypted Secrets
- kubernetes
- kubernetes-secrets
- devops-workflow
- encrypt-secrets
- gitops
+116 stars
from 9,213 · score 4.76
52.golang-jwt / jwt
Go implementation of JSON Web Tokens (JWT).
+104 stars
from 9,156 · score 4.65
53.turbot / steampipe
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
- steampipe
- postgresql
- postgresql-fdw
- cloud
- security
- aws
- +14 more
+104 stars
from 7,890 · score 4.65
54.aquasecurity / tracee
Linux Runtime Security and Forensics using eBPF
+101 stars
from 4,562 · score 4.62
55.umputun / remark42
comment engine
- commenting
- comment-system
- self-hosted
- commenting-engines
- comments-widget
- remark42
- +1 more
+97 stars
from 5,548 · score 4.58
56.olafhartong / sysmon-modular
A repository of sysmon configuration modules
- sysmon
- dfir
- threat-hunting
- mitre-attack
- modular
- security-tools
+86 stars
from 3,097 · score 4.47
57.flohoss / gocron
A task scheduler built with Go and Vue.js that allows users to specify recurring jobs via a simple YAML configuration file. The scheduler reads job definitions, executes commands at specified times using cron expressions, and passes in environment variables for each job.
+81 stars
from 545 · score 4.41
58.txthinking / brook
A cross-platform programmable network tool
+76 stars
from 15,115 · score 4.34
59.in-toto / witness
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
- supply-chain
+75 stars
from 539 · score 4.33
60.goshs-labs / goshs
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
- devtools
- file-transfer
- +14 more
+69 stars
from 938 · score 4.25
61.quay / clair
Vulnerability Static Analysis for Containers
- containers
- static-analysis
- go
- kubernetes
- docker
- oci
- +3 more
+67 stars
from 11,018 · score 4.22
62.zitadel / oidc
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
+66 stars
from 1,854 · score 4.20
63.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+60 stars
from 2,505 · score 4.11
+57 stars
from 2,446 · score 4.06
65.activecm / rita
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
- cyber-security
- network-traffic-analysis
- +10 more
+57 stars
from 610 · score 4.06
66.markbates / goth
Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.
+56 stars
from 6,564 · score 4.04
67.google / uuid
Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.
- go
- uuid
+56 stars
from 6,095 · score 4.04
68.Permify / permify
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
- access-control
- authorization
- rbac
- rebac
- zanzibar
- acl
- +13 more
+55 stars
from 5,913 · score 4.03
69.ory / keto
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
- authorization
- fine-grained-permissions
- +8 more
+45 stars
from 5,372 · score 3.83
70.sigstore / rekor
Software Supply Chain Transparency Log
- supply-chain
- provenance
- security
- transparency-log
+44 stars
from 1,185 · score 3.81
71.lestrrat-go / jwx
Complete implementation of JWx (Javascript Object Signing and Encryption/JOSE) technologies for Go. #golang #jwt #jws #jwk #jwe
- jwt
- jwe
- jws
- jwk
- go
- golang
- +1 more
+43 stars
from 2,401 · score 3.78
72.jaksi / sshesame
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
+42 stars
from 1,731 · score 3.76
73.caddyserver / certmagic
Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal
- https
- acme
- letsencrypt
- golang
- go
- automatic-https
- +2 more
+40 stars
from 5,576 · score 3.71
74.99designs / aws-vault
A vault for securely storing and accessing AWS credentials in development environments
+39 stars
from 8,962 · score 3.69
75.yunginnanet / HellPot
HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.
+39 stars
from 1,130 · score 3.69
76.SSLMate / certspotter
Lightweight Certificate Transparency Log Monitor
- certificate-transparency
- pki
- x509
- security
- webpki
+38 stars
from 1,159 · score 3.66
77.Luzifer / ots
One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser
- one-time-secret
- golang
- encryption
- aes256
+38 stars
from 772 · score 3.66
78.microcosm-cc / bluemonday
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
+36 stars
from 3,695 · score 3.61
+34 stars
from 2,600 · score 3.56
80.traggo / server
self-hosted tag-based time tracking
- golang
- selfhosted
- freesoftware
- privacy
- self-hosted
- timetracking
- +2 more
+34 stars
from 1,606 · score 3.56
+33 stars
from 5,873 · score 3.53
82.jesseduffield / horcrux
Split your file into encrypted fragments so that you don't need to remember a passcode
+33 stars
from 5,077 · score 3.53
83.safedep / vet
Protect against malicious open source packages 🤖
+31 stars
from 1,093 · score 3.47
84.bad-antics / nullkia
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
- android-hacking
- baseband
- bootloader-unlock
- checkm8
- firmware-hacking
- ios-jailbreak
- +14 more
+31 stars
from 33 · score 3.47
85.coinpaprika / coinpaprika-api-go-client
Official CoinPaprika API Go client — coin prices, tickers, OHLCV, exchanges, and global market stats.
- api-client
- bitcoin
- blockchain
- coinpaprika
- crypto
- cryptocurrency
- +4 more
+30 stars
from 27 · score 3.43
86.lukechilds / reverse-shell
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
- microservice
- security
+29 stars
from 2,043 · score 3.40
87.NodePassProject / nodepass
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
- api-rest
- connection-pooling
- cybersecurity
- devops
- golang
- http2
- +14 more
+27 stars
from 267 · score 3.33
88.deepfence / SecretScanner
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
- vulnerability-scanners
- k8s
- +10 more
+25 stars
from 3,372 · score 3.26
89.SecureAuthCorp / oauth2c
User-friendly OAuth2 CLI
+24 stars
from 929 · score 3.22
90.syst3mctl / godoclive
GoDoc Live statically analyzes your Go HTTP services — extracts route definitions, request/response contracts, and authentication patterns — then generates beautiful, interactive API documentation.
- docs
- documentation
- documentation-generator
- golang
- golang-package
+24 stars
from 84 · score 3.22
91.stacklok / brood-box
CLI tool for running coding agents inside hardware-isolated microVMs
- ai-agents
- claude-code
- codex
- developer-tools
- microvm
- sandbox
- +1 more
+24 stars
from 55 · score 3.22
+23 stars
from 1,425 · score 3.18
93.securitybunker / databunker
Secure Vault for Customer PII/PHI/PCI/KYC Records
+22 stars
from 1,473 · score 3.14
94.0x4D31 / galah
Galah: An LLM-powered web honeypot.
- golang
- honeypot
- llm
- openai
- openai-api
- security
- +1 more
+20 stars
from 655 · score 3.04
95.go-jose / go-jose
An implementation of JOSE standards (JWE, JWS, JWT) in Go
+20 stars
from 525 · score 3.04
96.awnumar / memguard
Software sandbox for storage of sensitive information in memory.
- security
- golang
- go
- cryptography
- memory
- crypto
+19 stars
from 2,746 · score 3.00
+18 stars
from 4,183 · score 2.94
98.evilsocket / xrayArchived
XRay is a tool for recon, mapping and OSINT gathering from public networks.
+18 stars
from 2,318 · score 2.94
99.oxyno-zeta / s3-proxy
S3 Reverse Proxy with GET, PUT and DELETE methods and authentication (OpenID Connect and Basic Auth)
- s3
- openid-connect
- basic-authentication
- s3-proxy
- s3-bucket
- serve-static
- +2 more
+18 stars
from 477 · score 2.94
100.pii-shield / pii-shield
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
- json
- kubernetes
- +7 more
+17 stars
from 161 · score 2.89