1.drduh / YubiKey-Guide
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
+181 stars
from 12,881 · score 5.20
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
15 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.ZeroDayEvil / ai-security-tool
🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.
- cve-scanner
- mcp-server
- mcp-tools
- osv
- rdp
- sbom
- +13 more
+143 stars
from 1,141 · score 4.97
3.QERSSD / HowToAvoidScams
人间防骗指南：373 篇骗局拆解，覆盖刷单、杀猪盘、AI 换脸、养老诈骗等 16 类；附真实案例报道、生活自查清单、PDF/EPUB/Anki 下载，还有 12 局防骗小游戏
- anti-fraud
- anti-scam
- chinese
- scam-awareness
- security
- self-improvement
+18 stars
from 99 · score 2.94
4.momenbasel / htb-writeups
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
- active-directory
- cheatsheet
- ctf
- cybersecurity
- ethical-hacking
- hackthebox
- +14 more
+11 stars
from 292 · score 2.48
5.keeweb / keeweb
Free cross-platform password manager compatible with KeePass
- keeweb
- keepass
- security
- password-manager
- password
- electron
- +1 more
+6 stars
from 13,025 · score 1.95
6.sbousseaden / EVTX-ATTACK-SAMPLES
Windows Events Attack Samples
- threat-hunting
- evtx
- windows-security
- mitre-attack
- detection-engineering
- dataset
- +2 more
+3 stars
from 2,641 · score 1.39
7.OWASP / NodeGoat
The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
+2 stars
from 2,083 · score 1.10
8.janko / rodauth-rails
Rails integration for Rodauth authentication framework
- rodauth
- authentication
- rails
- multifactor-authentication
- account-management
- jwt
- +1 more
+2 stars
from 758 · score 1.10
9.anpa1200 / adversarygraph
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.
- cybersecurity
- docker
- fastapi
- llm
- mitre-attack
- react
- +14 more
+2 stars
from 33 · score 1.10
10.FileShot / FileShotZKE
Client-side AES-256-GCM zero-knowledge encryption library. Browser-native Web Crypto API, no dependencies. Powers FileShot.io.
- aes-256
- aes-256-gcm
- browser-encryption
- client-side-encryption
- encryption
- file-sharing
- +5 more
+2 stars
from 31 · score 1.10
11.schemaspy / schemaspy
Database documentation built easy
- schemaspy
- java
- documentation
- database
- database-schemas
- database-diagrams
- +6 more
+1 stars
from 3,734 · score 0.69
12.jedisct1 / libsodium.js
libsodium compiled to Webassembly and pure JavaScript, with convenient wrappers.
- libsodium
- javascript
- cryptography
- crypto
- webassembly
+1 stars
from 1,162 · score 0.69
13.shadawck / awesome-anti-forensic
Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.
- awesome-list
- awesome
- anti-forensic
- anti-forensics
- cybersecurity
- forensic-analysis
- +2 more
+1 stars
from 1,058 · score 0.69
14.l4rm4nd / VoucherVault
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
- coupons
- vouchers
- conventional-commits
- apprise
- asset-manager
- coupon-management-system
- +14 more
+1 stars
from 513 · score 0.69
15.cerberauth / awesome-openid-connect
OpenID Connect, the authentication protocol and identity layer on top of OAuth 2.0 used in many SSO and adopted in many social logins (Apple, Facebook, Google, ...etc). Find this curated list of providers, services, libraries, and resources to adopt it and know more about existing specs.
- awesome-list
- oauth
- oauth2
- openid-connect
- identity
- oidc
- +9 more
+1 stars
from 133 · score 0.69