1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+7,236 stars
from 65,995 · score 8.89
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
28 repositories by Attention Score · Oct 4, 2026 – Nov 2, 2026 (UTC)
2.HunxByts / GhostTrack
Useful tool to track location or mobile number
+3,547 stars
from 16,789 · score 8.17
3.sherlock-project / sherlock
Hunt down social media accounts by username across social networks
+2,376 stars
from 93,011 · score 7.77
4.mukul975 / Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
+1,790 stars
from 33,614 · score 7.49
5.smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
+1,522 stars
from 22,699 · score 7.33
6.soxoj / maigret
🕵️♂️ Collect a dossier on a person by username from 6K websites
+1,474 stars
from 38,132 · score 7.30
7.aixisstudio / Snitch
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
+678 stars
from 10 · score 6.52
8.SWE-agent / SWE-agent
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
+257 stars
from 20,449 · score 5.55
9.apache / caldera
Automated Adversary Emulation Platform
+184 stars
from 7,299 · score 5.22
10.bunkerity / bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
+181 stars
from 11,022 · score 5.20
11.AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
+107 stars
from 6,314 · score 4.68
12.BlessedRebuS / Krawl
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
+55 stars
from 770 · score 4.03
13.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+43 stars
from 2,534 · score 3.78
14.splunk / security_content
Splunk Security Content
+21 stars
from 1,703 · score 3.09
15.emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
+12 stars
from 1,370 · score 2.56
16.idaholab / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+9 stars
from 485 · score 2.30
17.Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
+8 stars
from 1,756 · score 2.20
18.certtools / intelmq
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
+4 stars
from 1,138 · score 1.61
19.panther-labs / panther-analysis
Built-in Panther detection rules and policies
+4 stars
from 468 · score 1.61
20.Hexastrike / PyrsistenceSniper
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
+4 stars
from 268 · score 1.61
21.omar2535 / GraphQLer
🔍A cutting edge context aware GraphQL API fuzzing tool!
+3 stars
from 171 · score 1.39
22.hookprobe / hookprobe
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
+3 stars
from 45 · score 1.39
23.nfstream / nfstream
NFStream: a Flexible Network Data Analysis Framework.
+2 stars
from 1,221 · score 1.10
24.0xBallpoint / trapster-community
Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features
+2 stars
from 165 · score 1.10
25.ThreatRecall / zettelforge
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
+2 stars
from 64 · score 1.10
26.StamusNetworks / scirius
Scirius is a web application for Suricata ruleset management and threat hunting.
+1 stars
from 685 · score 0.69
27.gsmith257-cyber / GraphCrawlerArchived
GraphQL automated security testing toolkit
+1 stars
from 334 · score 0.69
28.padok-team / cognito-scanner
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
+1 stars
from 112 · score 0.69