1.vxcontrol / pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- ai-agents
- ai-security-tool
- autonomous-agents
- golang
- graphql
- multi-agent-system
- +12 more
+16,954 stars
from 16,235 · score 9.74
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
1–100 of 182 by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
2.pranshuparmar / witr
Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
+8,035 stars
from 14,880 · score 8.99
3.projectdiscovery / nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- cve-scanner
- subdomain-takeover
- nuclei-engine
- vulnerability-detection
- vulnerability-assessment
- vulnerability-scanner
- +5 more
+4,524 stars
from 28,047 · score 8.42
4.aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
- security
- security-tools
- docker
- containers
- vulnerability-scanners
- vulnerability-detection
- +9 more
+4,311 stars
from 34,633 · score 8.37
+4,173 stars
from 26,472 · score 8.34
6.trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
+3,015 stars
from 25,821 · score 8.01
+2,423 stars
from 10,108 · score 7.79
8.pocket-id / pocket-id
The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.
+2,307 stars
from 7,655 · score 7.74
9.crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
+2,270 stars
from 13,174 · score 7.73
10.sundowndev / phoneinfoga
Information gathering framework for phone numbers
- information-gathering
- phone-number
- osint
- open-source-intelligence
- reconnaissance
- footprint
- +4 more
+2,173 stars
from 16,214 · score 7.68
11.FiloSottile / age
A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
- built-at-rc
- age-encryption
+2,120 stars
from 22,070 · score 7.66
12.getsops / sops
Simple and flexible tool for managing secrets
+1,991 stars
from 21,611 · score 7.60
13.authelia / authelia
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
- totp
- ldap
- sso-authentication
- two-factor-authentication
- docker
- kubernetes
- +14 more
+1,988 stars
from 27,507 · score 7.60
14.zitadel / zitadel
ZITADEL - Identity infrastructure, simplified for you.
- saml
- authentication
- authorization
- login
- oidc
- sso
- +11 more
+1,926 stars
from 13,580 · score 7.56
15.google / osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
+1,380 stars
from 10,002 · score 7.23
16.goharbor / harbor
An open source trusted cloud native registry project that stores, signs, and scans content.
- cncf
- container
- registry
- helm
- cloud-native
- containers
- +6 more
+1,376 stars
from 28,288 · score 7.23
17.FiloSottile / mkcert
A simple zero-config tool to make locally trusted development certificates with any names you'd like.
- https
- tls
- certificates
- local-development
- localhost
- root-ca
- +6 more
+1,366 stars
from 58,460 · score 7.22
18.casdoor / casdoor
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
+1,321 stars
from 13,429 · score 7.19
19.projectdiscovery / subfinder
Fast passive subdomain enumeration tool.
+1,236 stars
from 13,475 · score 7.12
20.bettercap / bettercap
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
+1,202 stars
from 19,033 · score 7.09
21.BishopFox / sliver
Adversary Emulation Framework
- security-tools
- implant
- golang
- dns-server
- http
- c2
- +9 more
+1,177 stars
from 11,049 · score 7.07
22.shadow1ng / fscan
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
- fscan
- scanner
- scanning
- sec
- security-tools
- security
+1,163 stars
from 13,570 · score 7.06
+1,111 stars
from 15,871 · score 7.01
24.hashicorp / vault
A tool for secrets management, encryption as a service, and privileged access management
- vault
- go
- secrets
+1,082 stars
from 35,378 · score 6.99
25.anchore / grype
A vulnerability scanner for container images and filesystems
- containers
- security
- vulnerability
- docker
- golang
- go
- +9 more
+1,080 stars
from 12,090 · score 6.99
26.owasp-amass / amass
In-depth attack surface mapping and asset discovery
+1,059 stars
from 14,402 · score 6.97
27.moonD4rk / HackBrowserData
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
- chrome
- macos
- windows
- pentest-tool
- hacking
- edge
- +4 more
+999 stars
from 13,672 · score 6.91
28.openfga / openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
- authorization
- permissions
- security
- zanzibar
- openfga
- entitlements
- +11 more
+989 stars
from 5,096 · score 6.90
29.kgretzky / evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
+905 stars
from 14,919 · score 6.81
30.gravitational / teleport
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
- certificate
- golang
- +14 more
+902 stars
from 20,165 · score 6.81
31.open-policy-agent / opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
- opa
- policy
- declarative
- json
- compliance
- cloud-native
- +2 more
+790 stars
from 11,635 · score 6.67
+714 stars
from 13,554 · score 6.57
+669 stars
from 13,709 · score 6.51
34.ory / hydra
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
- hydra
- oauth2
- openid-connect
- docker
- server
- security
- +14 more
+589 stars
from 17,057 · score 6.38
35.stakater / Reloader
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
- kubernetes
- openshift
- configmap
- secrets
- pods
- deployments
- +5 more
+576 stars
from 9,969 · score 6.36
36.authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- zanzibar
- permissions
- database
- distributed-systems
- security
- security-tools
- +12 more
+532 stars
from 6,660 · score 6.28
37.kubescape / kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- kubernetes
- security
- nsa
- mitre-attack
- devops
- best-practice
- +1 more
+520 stars
from 11,322 · score 6.26
38.go-acme / lego
Let's Encrypt/ACME client and library written in Go
+507 stars
from 9,492 · score 6.23
39.Velocidex / velociraptor
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
- endpoint-protection
- endpoint-discovery
- +1 more
+496 stars
from 3,913 · score 6.21
40.dexidp / dex
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
- oidc
- kubernetes
- idp
- identity-provider
- hacktoberfest
+492 stars
from 10,737 · score 6.20
41.apache / casbin
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
- casbin
- access-control
- authorization
- rbac
- abac
- acl
- +12 more
+490 stars
from 19,985 · score 6.20
42.jhaals / yopass
Secure sharing of secrets, passwords and files
- password-share
- encryption-decryption
- file-upload
- onetimelink
- onetimesecret
- secret-sharing
+475 stars
from 2,743 · score 6.17
43.cert-manager / cert-manager
Automatically provision and manage TLS certificates in Kubernetes
- kubernetes
- letsencrypt
- tls
- certificate
- crd
- hacktoberfest
+414 stars
from 13,732 · score 6.03
44.ory / kratos
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
- identity
- identity-management
- user-management
- users
- user
- login
- +5 more
+413 stars
from 13,536 · score 6.03
45.Ullaakut / cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
- penetration-testing
- security
- hacking
- infosec
- rtsp
- cctv
- +5 more
+311 stars
from 4,976 · score 5.74
46.coipond / coi
Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops threats automatically.
- claude
- claude-code
- ai-tools
- anthropic
- coding-assistant
- containers
- +14 more
+301 stars
from 472 · score 5.71
47.bitnami / sealed-secrets
A Kubernetes controller and tool for one-way encrypted Secrets
- kubernetes
- kubernetes-secrets
- devops-workflow
- encrypt-secrets
- gitops
+291 stars
from 9,038 · score 5.68
+268 stars
from 2,335 · score 5.59
49.beelzebub-labs / beelzebub
A secure low code deception runtime framework, leveraging AI for System Virtualization.
- cybersecurity
- security
- honeypot
- framework
- go
- research-project
- +14 more
+267 stars
from 1,963 · score 5.59
50.golang-jwt / jwt
Go implementation of JSON Web Tokens (JWT).
+261 stars
from 8,999 · score 5.57
51.sbondCo / Watcharr
Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.
+249 stars
from 1,333 · score 5.52
52.future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
+247 stars
from 12,077 · score 5.51
53.goshs-labs / goshs
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
- devtools
- file-transfer
- +14 more
+244 stars
from 763 · score 5.50
54.turbot / steampipe
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
- steampipe
- postgresql
- postgresql-fdw
- cloud
- security
- aws
- +14 more
+222 stars
from 7,772 · score 5.41
55.aquasecurity / tracee
Linux Runtime Security and Forensics using eBPF
+202 stars
from 4,461 · score 5.31
56.umputun / remark42
comment engine
- commenting
- comment-system
- self-hosted
- commenting-engines
- comments-widget
- remark42
- +1 more
+196 stars
from 5,449 · score 5.28
57.olafhartong / sysmon-modular
A repository of sysmon configuration modules
- sysmon
- dfir
- threat-hunting
- mitre-attack
- modular
- security-tools
+176 stars
from 3,007 · score 5.18
58.NodePassProject / nodepass
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
- api-rest
- connection-pooling
- cybersecurity
- devops
- golang
- http2
- +14 more
+169 stars
from 125 · score 5.14
59.txthinking / brook
A cross-platform programmable network tool
+157 stars
from 15,034 · score 5.06
60.quay / clair
Vulnerability Static Analysis for Containers
- containers
- static-analysis
- go
- kubernetes
- docker
- oci
- +3 more
+149 stars
from 10,936 · score 5.01
61.google / uuid
Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.
- go
- uuid
+143 stars
from 6,008 · score 4.97
62.deepfence / SecretScanner
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
- vulnerability-scanners
- k8s
- +10 more
+133 stars
from 3,264 · score 4.90
63.Permify / permify
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
- access-control
- authorization
- rbac
- rebac
- zanzibar
- acl
- +13 more
+131 stars
from 5,837 · score 4.88
64.markbates / goth
Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.
+127 stars
from 6,493 · score 4.85
65.activecm / rita
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
- cyber-security
- network-traffic-analysis
- +10 more
+120 stars
from 547 · score 4.80
+116 stars
from 2,387 · score 4.76
67.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+115 stars
from 2,450 · score 4.75
68.zitadel / oidc
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
+113 stars
from 1,807 · score 4.74
69.ory / keto
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
- authorization
- fine-grained-permissions
- +8 more
+108 stars
from 5,309 · score 4.69
70.safedep / vet
Protect against malicious open source packages 🤖
+103 stars
from 1,021 · score 4.64
71.sigstore / rekor
Software Supply Chain Transparency Log
- supply-chain
- provenance
- security
- transparency-log
+100 stars
from 1,129 · score 4.62
72.in-toto / witness
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
- supply-chain
+93 stars
from 521 · score 4.54
73.caddyserver / certmagic
Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal
- https
- acme
- letsencrypt
- golang
- go
- automatic-https
- +2 more
+92 stars
from 5,524 · score 4.53
74.flohoss / gocron
A task scheduler built with Go and Vue.js that allows users to specify recurring jobs via a simple YAML configuration file. The scheduler reads job definitions, executes commands at specified times using cron expressions, and passes in environment variables for each job.
+92 stars
from 534 · score 4.53
+90 stars
from 2,544 · score 4.51
76.securitybunker / databunker
Secure Vault for Customer PII/PHI/PCI/KYC Records
+85 stars
from 1,410 · score 4.45
+84 stars
from 5,822 · score 4.44
78.lestrrat-go / jwx
Complete implementation of JWx (Javascript Object Signing and Encryption/JOSE) technologies for Go. #golang #jwt #jws #jwk #jwe
- jwt
- jwe
- jws
- jwk
- go
- golang
- +1 more
+84 stars
from 2,360 · score 4.44
79.microcosm-cc / bluemonday
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
+83 stars
from 3,648 · score 4.43
80.99designs / aws-vault
A vault for securely storing and accessing AWS credentials in development environments
+79 stars
from 8,922 · score 4.38
81.pgrwl / pgrwl
Cloud-native continuous backup for PostgreSQL - WAL/base-backup streaming, compression, encryption, retention, and monitoring in a single binary.
- backup
- cloud-native
- golang
- postgresql
- postgres
- recovery
- +14 more
+77 stars
from 107 · score 4.36
82.pii-shield / pii-shield
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
- json
- kubernetes
- +7 more
+76 stars
from 102 · score 4.34
83.traggo / server
self-hosted tag-based time tracking
- golang
- selfhosted
- freesoftware
- privacy
- self-hosted
- timetracking
- +2 more
+74 stars
from 1,566 · score 4.32
84.jesseduffield / horcrux
Split your file into encrypted fragments so that you don't need to remember a passcode
+72 stars
from 5,038 · score 4.29
85.yunginnanet / HellPot
HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.
+70 stars
from 1,099 · score 4.26
86.Luzifer / ots
One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser
- one-time-secret
- golang
- encryption
- aes256
+63 stars
from 747 · score 4.16
87.SSLMate / certspotter
Lightweight Certificate Transparency Log Monitor
- certificate-transparency
- pki
- x509
- security
- webpki
+62 stars
from 1,135 · score 4.14
88.michenriksen / gitrobArchived
Reconnaissance tool for GitHub organizations
+59 stars
from 6,137 · score 4.09
89.jaksi / sshesame
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
+55 stars
from 1,718 · score 4.03
90.michenriksen / aquatoneArchived
A Tool for Domain Flyovers
+53 stars
from 5,901 · score 3.99
91.stacklok / brood-box
CLI tool for running coding agents inside hardware-isolated microVMs
- ai-agents
- claude-code
- codex
- developer-tools
- microvm
- sandbox
- +1 more
+51 stars
from 28 · score 3.95
+47 stars
from 4,154 · score 3.87
93.go-jose / go-jose
An implementation of JOSE standards (JWE, JWS, JWT) in Go
+47 stars
from 498 · score 3.87
94.awnumar / memguard
Software sandbox for storage of sensitive information in memory.
- security
- golang
- go
- cryptography
- memory
- crypto
+45 stars
from 2,720 · score 3.83
95.evilsocket / xrayArchived
XRay is a tool for recon, mapping and OSINT gathering from public networks.
+45 stars
from 2,291 · score 3.83
96.fran-olivares / usulnet
Open-source Docker infrastructure platform. One web UI — containers, security, DNS, VPN, monitoring, backups, reverse proxy, terminal, and multi-node orchestration. Replace a dozen tools with one.
- agplv3
- docker
- docker-container
- docker-deployment
- docker-management
- docker-management-tool
- +14 more
+45 stars
from 88 · score 3.83
+44 stars
from 1,404 · score 3.81
98.SecureAuthCorp / oauth2c
User-friendly OAuth2 CLI
+44 stars
from 909 · score 3.81
99.bad-antics / nullkia
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
- android-hacking
- baseband
- bootloader-unlock
- checkm8
- firmware-hacking
- ios-jailbreak
- +14 more
+43 stars
from 21 · score 3.78
100.lukechilds / reverse-shell
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
- microservice
- security
+42 stars
from 2,030 · score 3.76