1usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+1,348 stars
from 71,883 · score 7.21
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
26 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2sherlock-project / sherlock
Hunt down social media accounts by username across social networks
+474 stars
from 94,913 · score 6.16
3smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
+411 stars
from 23,810 · score 6.02
4mukul975 / Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
+392 stars
from 35,012 · score 5.97
5HunxByts / GhostTrack
Useful tool to track location or mobile number
+372 stars
from 19,964 · score 5.92
6morluto / awesome-reverse-engineering
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
+268 stars
from 1,233 · score 5.59
7soxoj / maigret
🕵️♂️ Collect a dossier on a person by username from 6K websites
+245 stars
from 39,361 · score 5.51
8hevnsnt / CVEngine
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
+211 stars
from 349 · score 5.36
9aixisstudio / Snitch
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
+116 stars
from 572 · score 4.76
10ChiefGyk3D / Clouds-Against-Humanity
Learn cloud security by building it! An open-source homelab teaching Zero Trust, DevSecOps, IaC, and cloud architecture from the ground up.
+89 stars
from 528 · score 4.50
11bunkerity / bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
+88 stars
from 11,115 · score 4.49
12SWE-agent / SWE-agent
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
+70 stars
from 20,636 · score 4.26
13BlessedRebuS / Krawl
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
+23 stars
from 802 · score 3.18
14thomasunise / argus
Open-source agentic security operations platform:
+22 stars
from 96 · score 3.14
15apache / caldera
Automated Adversary Emulation Platform
+19 stars
from 7,464 · score 3.00
16cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+14 stars
from 2,563 · score 2.71
17AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
+12 stars
from 6,409 · score 2.56
18splunk / security_content
Splunk Security Content
+5 stars
from 1,719 · score 1.79
19idaholab / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+4 stars
from 490 · score 1.61
20gsmith257-cyber / GraphCrawlerArchived
GraphQL automated security testing toolkit
+2 stars
from 333 · score 1.10
21Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
+1 stars
from 1,763 · score 0.69
22emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
+1 stars
from 1,381 · score 0.69
23StamusNetworks / scirius
Scirius is a web application for Suricata ruleset management and threat hunting.
+1 stars
from 685 · score 0.69
24omar2535 / GraphQLer
🔍A cutting edge context aware GraphQL API fuzzing tool!
+1 stars
from 173 · score 0.69
250xBallpoint / trapster-community
Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features
+1 stars
from 166 · score 0.69
26hookprobe / hookprobe
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
+1 stars
from 47 · score 0.69