Ranked by Attention Score: stars gained over the last 30 complete days
20 repositories by Attention Score · Oct 4, 2026 – Nov 2, 2026 (UTC)
🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
Free cross-platform password manager compatible with KeePass
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.
The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
Windows Events Attack Samples
Malware samples, analysis exercises and other interesting resources.
Documenting the unofficial and internal Steam Web API
Database documentation built easy
libsodium compiled to Webassembly and pure JavaScript, with convenient wrappers.
A collection of android Exploits and Hacks
OpenID Connect, the authentication protocol and identity layer on top of OAuth 2.0 used in many SSO and adopted in many social logins (Apple, Facebook, Google, ...etc). Find this curated list of providers, services, libraries, and resources to adopt it and know more about existing specs.
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
Rails integration for Rodauth authentication framework
🔪Browser logic vulnerabilities :skull_and_crossbones:
Cryptographic library for Embarcadero Delphi and potentially for FPC as well
Crackmes Keygenmes Serialmes y más
Client-side AES-256-GCM zero-knowledge encryption library. Browser-native Web Crypto API, no dependencies. Powers FileShot.io.