1.affaan-m / ECC
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
+5,949 stars
from 288,843 · score 8.69
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
66 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.qybaihe / bla
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
- adversarial-ai
- claude-code
- cursor
- electron-security
- llm-security
- mcp
- +4 more
+2,617 stars
from 29 · score 7.87
3.Minglink / dsh-infinite-gen-5
DeepSeek v4.1 flash 逆向工具（无限五代） 求 Star 收藏 ⭐欢迎大家提交项目的改进
+307 stars
from 3,473 · score 5.73
4.Anubis-Security-Tool / anubis
🛡️ Anubis-Security-Tool — terminal, SSH/SFTP and remote-session client for Windows, macOS and Linux.
- anubis
- developer-tools
- electron
- ftp
- linux
- macos
- +14 more
+192 stars
from 20 · score 5.26
5.OWASP / CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
- owasp
- code
- security
- cheatsheets
- best-practices
- appsec
- +1 more
+97 stars
from 33,739 · score 4.58
6.alam00000 / bentopdf
The Privacy First PDF Toolkit
- jpgtopdf
- pdf-converter
- pdf-generation
- pdf-viewer
- hacktoberfest
- +14 more
+83 stars
from 16,143 · score 4.43
7.gchq / CyberChef
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
- data-analysis
- data-manipulation
- encryption
- encoding
- compression
- parsing
- +1 more
+78 stars
from 36,206 · score 4.37
8.ntfargo / Relapse-Exploit
Exploit chain for PS5 7.00 - 13.60
+76 stars
from 2,558 · score 4.34
9.victaphu / glass-home-samsung-tv
A minimal home screen for Samsung Tizen TVs: rotating nature photos, a glass dock of your apps, and a photo website served by the TV.
+72 stars
from 136 · score 4.29
10.gildas-lormeau / SingleFile
Web Extension for saving a faithful copy of a complete web page in a single HTML file
- browser
- archive
- auto-save
- chrome
- firefox
- offline-reading
- +12 more
+71 stars
from 22,727 · score 4.28
11.biolend83 / tubehaus
A private YouTube client: self-hosted web version (one docker compose) and native apps for Android, Windows, macOS, Linux and iPad/iPhone. No Google account, no tracking. Not affiliated with YouTube or Google.
- invidious
- privacy
- self-hosted
- whisper-cpp
- youtube
- docker
- +14 more
+71 stars
from 140 · score 4.28
12.Piebald-AI / claude-code-system-prompts
All parts of Claude Code's system prompt, 27 builtin tool descriptions, sub agent prompts (Plan/Explore/Task), utility prompts (CLAUDE.md, compact, statusline, magic docs, WebFetch, Bash cmd, security review, agent creation). Updated for each Claude Code version.
- claude-code
- claude-code-system-prompts
- system-prompts
+65 stars
from 12,997 · score 4.19
13.jason5ng32 / MyIP
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
+63 stars
from 12,218 · score 4.16
14.openai / php2shell-checker
No description provided by the repository host.
+63 stars
from 1,396 · score 4.16
15.WhiskeySockets / Baileys
Socket-based TS/JavaScript API for WhatsApp Web
- bun
- deno
- nodejs
- reverse-engineering
- typescript
- websockets
- +2 more
+53 stars
from 11,453 · score 3.99
16.calesthio / Crucix
Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes.
+51 stars
from 12,139 · score 3.95
17.qeeqbox / social-analyzer
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
- osint
- social-media
- analyzer
- username
- profile
- reconnaissance
- +13 more
+49 stars
from 24,375 · score 3.91
18.projectdiscovery / nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- nuclei-templates
- nuclei
- bugbounty
- security
- nuclei-checks
- exploits
- +4 more
+48 stars
from 13,219 · score 3.89
19.horsicq / Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.
- debugger
- detect
- unpacker
- disassembler
- reverse-engineering
- elf
- +14 more
+41 stars
from 11,802 · score 3.74
20.alextnetto / res
Agent skill to reverse engineer a SaaS product through the browser into a knowledge base for rebuilding it: screens, rules, data model, design tokens and production barriers, without touching production data.
+40 stars
from 208 · score 3.71
21.lockfale / OSINT-Framework
OSINT Framework
- osint-framework
- osint-resources
- osint
- intelligence-gathering
- reconnaissance
- footprinting
+37 stars
from 12,340 · score 3.64
22.HackTricks-wiki / hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
- hacktricks
- pentesting
- hacking
- peass
+32 stars
from 12,634 · score 3.50
23.yokoffing / Betterfox
Firefox user.js for optimal privacy and security. Your favorite browser, but better.
+18 stars
from 10,944 · score 2.94
24.arkenfox / user.js
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
+17 stars
from 12,931 · score 2.89
25.alephdata / aleph
Search and browse documents and data; find the people and companies you look for.
- python
- data-search
- graph-database
- journalism
- osint
- investigative-journalism
+17 stars
from 2,480 · score 2.89
26.cure53 / DOMPurify
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
+14 stars
from 17,485 · score 2.71
27.apsdehal / awesome-ctf
A curated list of CTF frameworks, libraries, resources and softwares
+11 stars
from 11,950 · score 2.48
28.amark / gun
An open source cybersecurity protocol for syncing decentralized graph data.
- machine-learning
- artificial-intelligence
- big-data
- blockchain
- p2p
- decentralized
- +14 more
+8 stars
from 19,151 · score 2.20
29.forwardemail / forwardemail.net
Privacy-focused encrypted email for everyone. All-in-one alternative to Gmail + Mailchimp + Sendgrid.
- forwarding
- forwarder
- free
- custom
- domain
- +11 more
+8 stars
from 1,691 · score 2.20
30.RetireJS / retire.js
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
- vulnerabilities
- scanner
- firefox-extension
- grunt-plugins
- javascript
- vulnerable-libraries
- +8 more
+7 stars
from 4,190 · score 2.08
31.m0bilesecurity / RMS-Runtime-Mobile-Security
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
- mobile-security
- android-security
- frida
- reverse-engineering
- ios-security
+7 stars
from 3,131 · score 2.08
32.dessant / buster
Captcha solver extension for humans, available for Chrome, Edge and Firefox
- browser-extension
- chrome-extension
- firefox-extension
- captcha
- recaptcha
- captcha-solving
- +1 more
+5 stars
from 9,352 · score 1.79
33.digitalbazaar / forge
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
- crypto
- cryptography
- x509
- message-digest
- aes
- asn1
- +14 more
+5 stars
from 5,345 · score 1.79
34.panva / node-oidc-provider
OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js
- openid
- oidc
- openid-provider
- openid-connect
- connect
- server
- +4 more
+5 stars
from 3,839 · score 1.79
35.aquasecurity / cloudsploit
Cloud Security Posture Management (CSPM)
- aws
- security
- security-audit
- cloud
- azure
- cspm
- +5 more
+5 stars
from 3,781 · score 1.79
36.Shuffle / Shuffle
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
- automation
- cybersecurity
- openapi
- shuffle
- security
- workflow-editor
- +9 more
+5 stars
from 2,462 · score 1.79
37.auth0 / node-jsonwebtoken
JsonWebToken implementation for node.js http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html
+4 stars
from 18,178 · score 1.61
38.KuroLabs / stegcloak
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
- cryptography
- steganography
- compression
- functional-programming
- ramdajs
- hacking-tool
- +10 more
+4 stars
from 3,928 · score 1.61
39.padloc / padloc
A modern, open source password manager for individuals and teams.
- javascript
- lit-element
- lit-html
- password-generator
- password-manager
- progressive-web-app
- +5 more
+4 stars
from 2,937 · score 1.61
40.DFIRKuiper / Kuiper
Digital Forensics Investigation Platform
+4 stars
from 909 · score 1.61
41.electerious / Ackee
Self-hosted, Node.js based analytics tool for those who care about privacy.
+3 stars
from 4,720 · score 1.39
42.animir / node-rate-limiter-flexible
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
+3 stars
from 3,596 · score 1.39
+3 stars
from 1,321 · score 1.39
44.momenbasel / keyFinder
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
- api-security
- browser-extension
- +14 more
+3 stars
from 727 · score 1.39
45.R74nCom / sandboxels
In-browser falling-sand simulation game with over 500 elements and thousands of reactions.
- browser-game
- cellular-automata
- cellular-automaton
- chemistry
- chemistry-lab
- falling-sand
- +14 more
+3 stars
from 474 · score 1.39
46.sahat / hackathon-starter
A boilerplate for Node.js web applications
+2 stars
from 35,257 · score 1.10
47.jaredhanson / passport
Simple, unobtrusive authentication for Node.js.
+2 stars
from 23,520 · score 1.10
48.motdotla / dotenv
Loads environment variables from .env for nodejs projects.
- dotenv
- environment-variables
- javascript
- node
- nodejs
- secrets
- +5 more
+2 stars
from 20,554 · score 1.10
49.ZYSzys / awesome-captcha
:key: Curated list of awesome captcha libraries and crack tools.
+2 stars
from 1,438 · score 1.10
50.WebDecoy / FCaptcha
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
- fingerprinting
- go
- +14 more
+2 stars
from 227 · score 1.10
51.digitalocean / nginxconfig.io
⚙️ NGINX config generator on steroids 💉
+1 stars
from 28,258 · score 0.69
52.sandstorm-io / sandstorm
Sandstorm is a self-hostable web productivity suite. It's implemented as a security-hardened web app package manager.
- capnproto
- decentralized
- sandstorm
- seccomp
- self-hosted
- self-hosting
+1 stars
from 7,078 · score 0.69
53.evilcos / xssor2
XSS'OR - Hack with JavaScript.
- probe
- pentest-tool
- xss
- csrf
- encoding
- hacking-tool
- +2 more
+1 stars
from 2,217 · score 0.69
54.dpnishant / appmonArchived
Documentation:
+1 stars
from 1,633 · score 0.69
55.nccgroup / house
A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
+1 stars
from 1,468 · score 0.69
56.xFFFFF / Gekko-Strategies
Strategies to Gekko trading bot with backtests results and some useful tools.
- gekko
- strategies
- gekko-strategies
- gekko-backtest
- backtest-database
- cryptocurrency
- +14 more
+1 stars
from 1,441 · score 0.69
57.PrismarineJS / node-minecraft-protocol
Parse and serialize minecraft packets, plus authentication and encryption.
+1 stars
from 1,423 · score 0.69
58.cyb3rfox / Aurora-Incident-Response
Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders
- incident-response
- incident-management
- incident-response-tooling
+1 stars
from 1,085 · score 0.69
59.pompelmi / pompelmi
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
- clamscan
- file-scanner
- virus-scan
- docker-compose
- upload-file
- virus
- +8 more
+1 stars
from 680 · score 0.69
60.josstei / maestro-orchestrate
Multi-agent orchestration platform for Gemini CLI, Claude Code, Codex, and Qwen Code — 39 specialists, parallel subagents, persistent sessions, and built-in code review, debugging, security, SEO, accessibility, and compliance tools
+1 stars
from 484 · score 0.69
+1 stars
from 309 · score 0.69
62.ArgoZhang / SliderCaptcha
Slider captcha support mobile
+1 stars
from 304 · score 0.69
63.depado / goploader
Easy file sharing with server-side encryption, curl/httpie/wget compliant
- sharing
- self-hosted
- cryptography
- terminal
- curl
+1 stars
from 301 · score 0.69
64.SAP / cloud-active-defense
Add a layer of active defense to your cloud applications.
- cybersecurity
- deception
- decoy
- honeytoken
- infosec
- security
+1 stars
from 110 · score 0.69
65.zakariagharzouli / sparda
AI writes. SPARDA proves. A deterministic, offline gate that catches when an AI edit removes a guard, exposes a route, or breaks an invariant — no API key, right in the agent edit loop.
- ai-agents
- ai-code-review
- authorization
- bola
- claude-code
- guardrails
- +4 more
+1 stars
from 8 · score 0.69
66.arhappy777 / llm_pentesting
AI red teaming reports, CTF write-ups and a prompt injection reference for LLM apps and agents
- agent-security
- ai-pentesting
- ai-red-teaming
- ai-security
- guardrails
- llm-guardrails
- +7 more
+1 stars
from 0 · score 0.69