1.vxcontrol / pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- ai-agents
- ai-security-tool
- autonomous-agents
- golang
- graphql
- multi-agent-system
- +12 more
+8,230 stars
from 25,097 · score 9.02
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
1–100 of 159 by Attention Score · Oct 6, 2026 – Nov 4, 2026 (UTC)
2.jiwoochris / artex-global
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
- ai-agent
- autonomous-agents
- blue-team
- cybersecurity
- detection-engineering
- i18n
- +8 more
+2,679 stars
from 23 · score 7.89
+999 stars
from 29,675 · score 6.91
4.cskwork / scopeweaver
ScopeWeaver: English and Korean localization of ARTEX, with preserved AGPL-3.0 attribution.
+894 stars
from 2 · score 6.80
5.projectdiscovery / nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- cve-scanner
- subdomain-takeover
- nuclei-engine
- vulnerability-detection
- vulnerability-assessment
- vulnerability-scanner
- +5 more
+875 stars
from 31,714 · score 6.78
6.aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
- security
- security-tools
- docker
- containers
- vulnerability-scanners
- vulnerability-detection
- +9 more
+780 stars
from 38,209 · score 6.66
7.pocket-id / pocket-id
The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.
+617 stars
from 9,385 · score 6.43
8.trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
+612 stars
from 28,253 · score 6.42
9.FiloSottile / age
A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
- built-at-rc
- age-encryption
+412 stars
from 23,794 · score 6.02
10.crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
+403 stars
from 15,057 · score 6.00
11.pranshuparmar / witr
Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
+384 stars
from 22,544 · score 5.95
12.sundowndev / phoneinfoga
Information gathering framework for phone numbers
- information-gathering
- phone-number
- osint
- open-source-intelligence
- reconnaissance
- footprint
- +4 more
+382 stars
from 18,021 · score 5.95
13.authelia / authelia
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
- totp
- ldap
- sso-authentication
- two-factor-authentication
- docker
- kubernetes
- +14 more
+370 stars
from 29,144 · score 5.92
14.getsops / sops
Simple and flexible tool for managing secrets
+335 stars
from 23,284 · score 5.82
15.zitadel / zitadel
ZITADEL - Identity infrastructure, simplified for you.
- saml
- authentication
- authorization
- login
- oidc
- sso
- +11 more
+320 stars
from 15,188 · score 5.77
16.BishopFox / sliver
Adversary Emulation Framework
- security-tools
- implant
- golang
- dns-server
- http
- c2
- +9 more
+284 stars
from 11,948 · score 5.65
17.google / osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
+270 stars
from 11,127 · score 5.60
18.casdoor / casdoor
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
+266 stars
from 14,491 · score 5.59
19.anchore / grype
A vulnerability scanner for container images and filesystems
- containers
- security
- vulnerability
- docker
- golang
- go
- +9 more
+203 stars
from 12,974 · score 5.32
20.goharbor / harbor
An open source trusted cloud native registry project that stores, signs, and scans content.
- cncf
- container
- registry
- helm
- cloud-native
- containers
- +6 more
+202 stars
from 29,469 · score 5.31
21.owasp-amass / amass
In-depth attack surface mapping and asset discovery
+200 stars
from 15,264 · score 5.30
22.projectdiscovery / subfinder
Fast passive subdomain enumeration tool.
+185 stars
from 14,534 · score 5.23
+180 stars
from 16,808 · score 5.20
24.openfga / openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
- authorization
- permissions
- security
- zanzibar
- openfga
- entitlements
- +11 more
+168 stars
from 5,920 · score 5.13
25.FiloSottile / mkcert
A simple zero-config tool to make locally trusted development certificates with any names you'd like.
- https
- tls
- certificates
- local-development
- localhost
- root-ca
- +6 more
+159 stars
from 59,666 · score 5.08
26.kgretzky / evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
+157 stars
from 15,674 · score 5.06
27.bettercap / bettercap
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
+152 stars
from 20,087 · score 5.03
28.shadow1ng / fscan
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
- fscan
- scanner
- scanning
- sec
- security-tools
- security
+145 stars
from 14,592 · score 4.98
29.hashicorp / vault
A tool for secrets management, encryption as a service, and privileged access management
- vault
- go
- secrets
+142 stars
from 36,324 · score 4.96
30.gravitational / teleport
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
- certificate
- golang
- +14 more
+118 stars
from 20,950 · score 4.78
31.Velocidex / velociraptor
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
- endpoint-protection
- endpoint-discovery
- +1 more
+118 stars
from 4,294 · score 4.78
32.open-policy-agent / opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
- opa
- policy
- declarative
- json
- compliance
- cloud-native
- +2 more
+109 stars
from 12,320 · score 4.70
33.moonD4rk / HackBrowserData
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
- chrome
- macos
- windows
- pentest-tool
- hacking
- edge
- +10 more
+107 stars
from 14,565 · score 4.68
+107 stars
from 14,277 · score 4.68
35.go-acme / lego
Let's Encrypt/ACME client and library written in Go
+101 stars
from 9,901 · score 4.62
+100 stars
from 14,173 · score 4.62
37.dexidp / dex
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
- oidc
- kubernetes
- idp
- identity-provider
- hacktoberfest
+88 stars
from 11,145 · score 4.49
38.stakater / Reloader
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
- kubernetes
- openshift
- configmap
- secrets
- pods
- deployments
- +5 more
+87 stars
from 10,460 · score 4.48
39.authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- zanzibar
- permissions
- database
- distributed-systems
- security
- security-tools
- +12 more
+83 stars
from 7,112 · score 4.43
40.kubescape / kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- kubernetes
- security
- nsa
- mitre-attack
- devops
- best-practice
- +1 more
+82 stars
from 11,762 · score 4.42
41.sbondCo / Watcharr
Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.
+74 stars
from 1,513 · score 4.32
42.ory / hydra
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
- hydra
- oauth2
- openid-connect
- docker
- server
- security
- +14 more
+70 stars
from 17,577 · score 4.26
43.in-toto / witness
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
- supply-chain
+69 stars
from 547 · score 4.25
44.jhaals / yopass
Secure sharing of secrets, passwords and files
- password-share
- encryption-decryption
- file-upload
- onetimelink
- onetimesecret
- secret-sharing
+63 stars
from 3,159 · score 4.16
45.apache / casbin
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
- casbin
- access-control
- authorization
- rbac
- abac
- acl
- +12 more
+60 stars
from 20,416 · score 4.11
46.ory / kratos
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
- identity
- identity-management
- user-management
- users
- user
- login
- +5 more
+56 stars
from 13,892 · score 4.04
47.Ullaakut / cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
- penetration-testing
- security
- hacking
- infosec
- rtsp
- cctv
- +5 more
+53 stars
from 5,236 · score 3.99
48.future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
+50 stars
from 12,275 · score 3.93
49.cert-manager / cert-manager
Automatically provision and manage TLS certificates in Kubernetes
- kubernetes
- letsencrypt
- tls
- certificate
- crd
- hacktoberfest
+48 stars
from 14,099 · score 3.89
50.beelzebub-labs / beelzebub
A secure low code deception runtime framework, leveraging AI for System Virtualization.
- cybersecurity
- security
- honeypot
- framework
- go
- research-project
- +14 more
+43 stars
from 2,187 · score 3.78
51.golang-jwt / jwt
Go implementation of JSON Web Tokens (JWT).
+39 stars
from 9,223 · score 3.69
52.olafhartong / sysmon-modular
A repository of sysmon configuration modules
- sysmon
- dfir
- threat-hunting
- mitre-attack
- modular
- security-tools
+37 stars
from 3,148 · score 3.64
53.bitnami / sealed-secrets
A Kubernetes controller and tool for one-way encrypted Secrets
- kubernetes
- kubernetes-secrets
- devops-workflow
- encrypt-secrets
- gitops
+35 stars
from 9,295 · score 3.58
+35 stars
from 2,568 · score 3.58
55.umputun / remark42
comment engine
- commenting
- comment-system
- self-hosted
- commenting-engines
- comments-widget
- remark42
- +1 more
+34 stars
from 5,613 · score 3.56
+33 stars
from 12,498 · score 3.53
57.aquasecurity / tracee
Linux Runtime Security and Forensics using eBPF
+33 stars
from 4,630 · score 3.53
58.jaksi / sshesame
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
+33 stars
from 1,740 · score 3.53
59.turbot / steampipe
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
- steampipe
- postgresql
- postgresql-fdw
- cloud
- security
- aws
- +14 more
+29 stars
from 7,966 · score 3.40
60.coinpaprika / coinpaprika-api-go-client
Official CoinPaprika API Go client — coin prices, tickers, OHLCV, exchanges, and global market stats.
- api-client
- bitcoin
- blockchain
- coinpaprika
- crypto
- cryptocurrency
- +4 more
+26 stars
from 31 · score 3.30
61.goshs-labs / goshs
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
- devtools
- file-transfer
- +14 more
+24 stars
from 983 · score 3.22
62.quay / clair
Vulnerability Static Analysis for Containers
- containers
- static-analysis
- go
- kubernetes
- docker
- oci
- +3 more
+20 stars
from 11,066 · score 3.04
63.zitadel / oidc
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
+19 stars
from 1,901 · score 3.00
+18 stars
from 2,485 · score 2.94
65.markbates / goth
Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.
+17 stars
from 6,605 · score 2.89
66.caddyserver / certmagic
Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal
- https
- acme
- letsencrypt
- golang
- go
- automatic-https
- +2 more
+17 stars
from 5,599 · score 2.89
+17 stars
from 2,619 · score 2.89
68.SSLMate / certspotter
Lightweight Certificate Transparency Log Monitor
- certificate-transparency
- pki
- x509
- security
- webpki
+17 stars
from 1,180 · score 2.89
69.yunginnanet / HellPot
HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.
+17 stars
from 1,152 · score 2.89
70.google / uuid
Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.
- go
- uuid
+16 stars
from 6,138 · score 2.83
71.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+16 stars
from 2,550 · score 2.83
72.lestrrat-go / jwx
Complete implementation of JWx (Javascript Object Signing and Encryption/JOSE) technologies for Go. #golang #jwt #jws #jwk #jwe
- jwt
- jwe
- jws
- jwk
- go
- golang
- +1 more
+16 stars
from 2,428 · score 2.83
73.sigstore / rekor
Software Supply Chain Transparency Log
- supply-chain
- provenance
- security
- transparency-log
+16 stars
from 1,214 · score 2.83
74.activecm / rita
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
- cyber-security
- network-traffic-analysis
- +10 more
+16 stars
from 651 · score 2.83
75.safedep / vet
Protect against malicious open source packages 🤖
+15 stars
from 1,109 · score 2.77
76.ory / keto
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
- authorization
- fine-grained-permissions
- +8 more
+14 stars
from 5,404 · score 2.71
77.lukechilds / reverse-shell
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
- microservice
- security
+13 stars
from 2,059 · score 2.64
78.Luzifer / ots
One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser
- one-time-secret
- golang
- encryption
- aes256
+13 stars
from 797 · score 2.64
79.deckrun / dockadvisor
Lightweight Dockerfile linter that helps you write better Dockerfiles. Get instant feedback with quality scores, security checks, and 60+ best practice rules.
+13 stars
from 213 · score 2.64
80.Permify / permify
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
- access-control
- authorization
- rbac
- rebac
- zanzibar
- acl
- +13 more
+12 stars
from 5,955 · score 2.56
81.txthinking / brook
A cross-platform programmable network tool
+11 stars
from 15,180 · score 2.48
82.NodePassProject / nodepass
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
- api-rest
- connection-pooling
- cybersecurity
- devops
- golang
- http2
- +14 more
+11 stars
from 283 · score 2.48
83.jesseduffield / horcrux
Split your file into encrypted fragments so that you don't need to remember a passcode
+9 stars
from 5,101 · score 2.30
84.traggo / server
self-hosted tag-based time tracking
- golang
- selfhosted
- freesoftware
- privacy
- self-hosted
- timetracking
- +2 more
+9 stars
from 1,633 · score 2.30
85.go-jose / go-jose
An implementation of JOSE standards (JWE, JWS, JWT) in Go
+9 stars
from 536 · score 2.30
+8 stars
from 5,898 · score 2.20
87.microcosm-cc / bluemonday
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
+8 stars
from 3,723 · score 2.20
88.awnumar / memguard
Software sandbox for storage of sensitive information in memory.
- security
- golang
- go
- cryptography
- memory
- crypto
+8 stars
from 2,757 · score 2.20
89.bad-antics / nullkia
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
- android-hacking
- baseband
- bootloader-unlock
- checkm8
- firmware-hacking
- ios-jailbreak
- +14 more
+8 stars
from 56 · score 2.20
90.99designs / aws-vault
A vault for securely storing and accessing AWS credentials in development environments
+7 stars
from 8,993 · score 2.08
91.evilsocket / xrayArchived
XRay is a tool for recon, mapping and OSINT gathering from public networks.
+7 stars
from 2,329 · score 2.08
92.securitybunker / databunker
Secure Vault for Customer PII/PHI/PCI/KYC Records
+7 stars
from 1,488 · score 2.08
+6 stars
from 4,195 · score 1.95
94.deepfence / SecretScanner
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
- vulnerability-scanners
- k8s
- +10 more
+6 stars
from 3,391 · score 1.95
+6 stars
from 1,442 · score 1.95
96.ajitpratap0 / GoSQLX
Pure-Go SQL parser, formatter, linter and security scanner for 8 dialects. Zero-copy, race-free, with an LSP and MCP server.
+6 stars
from 118 · score 1.95
97.0x4D31 / galah
Galah: An LLM-powered web honeypot.
- golang
- honeypot
- llm
- openai
- openai-api
- security
- +1 more
+5 stars
from 670 · score 1.79
98.cossacklabs / acra
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
- encryption-server
- encryption
- crypto
- cryptography
- security
- intrusion-detection
- +7 more
+4 stars
from 1,491 · score 1.61
99.algolia / sup3rS3cretMes5age
Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend
+4 stars
from 567 · score 1.61
100.ddddddO / packemon
TranslatedPacket monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux
- packet-generator
- packet-analyzer
- network
- networking
- ebpf
- penetration-testing
- +14 more
+4 stars
from 307 · score 1.61