1vxcontrol / pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
+526 stars
from 32,417 · score 6.27
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
25 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2jiwoochris / artex-global
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
+321 stars
from 2,163 · score 5.77
3gitleaks / gitleaks
Find secrets with Gitleaks 🔑
+250 stars
from 30,325 · score 5.53
4aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
+184 stars
from 38,714 · score 5.22
5trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
+116 stars
from 28,701 · score 4.76
6google / osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
+83 stars
from 11,267 · score 4.43
7in-toto / witness
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
+62 stars
from 553 · score 4.14
8BishopFox / sliver
Adversary Emulation Framework
+38 stars
from 12,176 · score 3.66
9future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
+23 stars
from 12,302 · score 3.18
10shadow1ng / fscan
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
+21 stars
from 14,709 · score 3.09
11Ullaakut / cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
+15 stars
from 5,271 · score 2.77
12authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
+14 stars
from 7,170 · score 2.71
13goshs-labs / goshs
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
+13 stars
from 995 · score 2.64
14olafhartong / sysmon-modular
A repository of sysmon configuration modules
+12 stars
from 3,171 · score 2.56
15securego / gosec
Go security checker
+9 stars
from 8,986 · score 2.30
16google / syzkaller
syzkaller is an unsupervised coverage-guided kernel fuzzer
+9 stars
from 6,377 · score 2.30
17rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+8 stars
from 2,556 · score 2.20
18Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
+7 stars
from 2,772 · score 2.08
19GreenmaskIO / greenmask
Database anonymization and test data management
+3 stars
from 1,795 · score 1.39
20gabrie30 / ghorg
Quickly clone or backup massive amounts of org/users repositories into one directory - Supports GitHub, GitLab, Bitbucket, and more 🐇🥚
+2 stars
from 2,161 · score 1.10
210x4D31 / galah
Galah: An LLM-powered web honeypot.
+1 stars
from 674 · score 0.69
22activecm / rita
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
+1 stars
from 666 · score 0.69
23insidersec / insider
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
+1 stars
from 553 · score 0.69
24teler-sh / teler-waf
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
+1 stars
from 406 · score 0.69
25avahidi / interpol
The "interpol" security string interpolation library and the "police" command line tool. Just moved here from https://bitbucket.org/vahidi/interpol
+1 stars
from 7 · score 0.69