1.drduh / YubiKey-Guide
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
+653 stars
from 12,409 · score 6.48
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
25 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.momenbasel / htb-writeups
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
- active-directory
- cheatsheet
- ctf
- cybersecurity
- ethical-hacking
- hackthebox
- +14 more
+117 stars
from 186 · score 4.77
3.keeweb / keeweb
Free cross-platform password manager compatible with KeePass
- keeweb
- keepass
- security
- password-manager
- password
- electron
- +1 more
+91 stars
from 12,940 · score 4.52
4.sbousseaden / EVTX-ATTACK-SAMPLES
Windows Events Attack Samples
- threat-hunting
- evtx
- windows-security
- mitre-attack
- detection-engineering
- dataset
- +2 more
+48 stars
from 2,596 · score 3.89
5.schemaspy / schemaspy
Database documentation built easy
- schemaspy
- java
- documentation
- database
- database-schemas
- database-diagrams
- +6 more
+45 stars
from 3,690 · score 3.83
6.shadawck / awesome-anti-forensic
Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.
- awesome-list
- awesome
- anti-forensic
- anti-forensics
- cybersecurity
- forensic-analysis
- +2 more
+37 stars
from 1,022 · score 3.64
7.sundaysec / Android-Exploits
A collection of android Exploits and Hacks
+33 stars
from 1,001 · score 3.53
8.jstrosch / malware-samples
Malware samples, analysis exercises and other interesting resources.
- malware-samples
- trickbot
- pcaps
- lokibot
- emotet
- maldoc-templates
- +3 more
+31 stars
from 1,662 · score 3.47
9.OWASP / NodeGoat
The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
+29 stars
from 2,056 · score 3.40
10.Revadike / InternalSteamWebAPI
Documenting the unofficial and internal Steam Web API
- documentation
- docs
- wiki
- api-documentation
- api
- steam
- +9 more
+18 stars
from 636 · score 2.94
11.jedisct1 / libsodium.js
libsodium compiled to Webassembly and pure JavaScript, with convenient wrappers.
- libsodium
- javascript
- cryptography
- crypto
- webassembly
+14 stars
from 1,149 · score 2.71
12.l4rm4nd / VoucherVault
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
- coupons
- vouchers
- conventional-commits
- apprise
- asset-manager
- coupon-management-system
- +14 more
+14 stars
from 500 · score 2.71
13.cerberauth / awesome-openid-connect
OpenID Connect, the authentication protocol and identity layer on top of OAuth 2.0 used in many SSO and adopted in many social logins (Apple, Facebook, Google, ...etc). Find this curated list of providers, services, libraries, and resources to adopt it and know more about existing specs.
- awesome-list
- oauth
- oauth2
- openid-connect
- identity
- oidc
- +9 more
+13 stars
from 121 · score 2.64
14.anpa1200 / adversarygraph
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.
- cybersecurity
- docker
- fastapi
- llm
- mitre-attack
- react
- +14 more
+9 stars
from 26 · score 2.30
15.janko / rodauth-rails
Rails integration for Rodauth authentication framework
- rodauth
- authentication
- rails
- multifactor-authentication
- account-management
- jwt
- +1 more
+4 stars
from 756 · score 1.61
16.MHumm / DelphiEncryptionCompendium
Cryptographic library for Embarcadero Delphi and potentially for FPC as well
- delphi
- key-deviation-algorithms
- cryptographic-checksums
- kdf1
- cryptography
- hash
- +3 more
+4 stars
from 284 · score 1.61
17.kjur / jsrsasign
CAUTION: END OF SUPPORT ON 14 AUG 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.
- asn1
- x509
- certificate
- crl
- ocsp
- timestamp
- +11 more
+3 stars
from 3,366 · score 1.39
18.Metnew / uxss-db
🔪Browser logic vulnerabilities :skull_and_crossbones:
- security
- browser
- xss
- vulnerability
- cve
- javascript
+3 stars
from 702 · score 1.39
19.cloudsecurelab / security-acronyms
Curated list of Cyber Security acronyms & abbreviations
+3 stars
from 46 · score 1.39
20.FileShot / FileShotZKE
Client-side AES-256-GCM zero-knowledge encryption library. Browser-native Web Crypto API, no dependencies. Powers FileShot.io.
- aes-256
- aes-256-gcm
- browser-encryption
- client-side-encryption
- encryption
- file-sharing
- +5 more
+3 stars
from 30 · score 1.39
21.boostsecurityio / lotp
Supply Chain Security Research - Living Off The Pipeline tools
- lotp
- supply-chain-security
- living-off-the-pipeline
+2 stars
from 160 · score 1.10
22.apuromafo / RCE_Lab
Crackmes Keygenmes Serialmes y más
- assembly
- crackme
- keygenme
- ollydbg
- reverse-engineering
+2 stars
from 44 · score 1.10
+1 stars
from 249 · score 0.69
+1 stars
from 224 · score 0.69
25.keithjjones / visualize_logs
A Python library and command line tools to provide interactive log visualization.
- cybersecurity
- investigation
- malware-analysis
- malware-research
+1 stars
from 145 · score 0.69