1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+25,437 stars
from 47,794 · score 10.14
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
31 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.mukul975 / Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
+8,447 stars
from 26,957 · score 9.04
3.sherlock-project / sherlock
Hunt down social media accounts by username across social networks
+7,658 stars
from 87,729 · score 8.94
4.HunxByts / GhostTrack
Useful tool to track location or mobile number
+5,793 stars
from 14,543 · score 8.66
5.smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
+4,287 stars
from 19,934 · score 8.36
6.soxoj / maigret
🕵️♂️ Collect a dossier on a person by username from 6K websites
+3,741 stars
from 35,865 · score 8.23
7.SWE-agent / SWE-agent
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
+806 stars
from 19,900 · score 6.69
8.bunkerity / bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
+459 stars
from 10,744 · score 6.13
9.AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
+386 stars
from 6,035 · score 5.96
10.apache / caldera
Automated Adversary Emulation Platform
+341 stars
from 7,142 · score 5.83
11.BlessedRebuS / Krawl
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
+273 stars
from 552 · score 5.61
12.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+115 stars
from 2,462 · score 4.75
13.splunk / security_content
Splunk Security Content
+61 stars
from 1,663 · score 4.13
14.Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
+38 stars
from 1,726 · score 3.66
15.Hexastrike / PyrsistenceSniper
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
+31 stars
from 241 · score 3.47
16.emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
+26 stars
from 1,356 · score 3.30
17.idaholab / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+20 stars
from 474 · score 3.04
18.certtools / intelmq
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
+13 stars
from 1,129 · score 2.64
19.panther-labs / panther-analysis
Built-in Panther detection rules and policies
+13 stars
from 459 · score 2.64
20.nfstream / nfstream
NFStream: a Flexible Network Data Analysis Framework.
+11 stars
from 1,212 · score 2.48
21.ThreatRecall / zettelforge
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
+8 stars
from 58 · score 2.20
22.StamusNetworks / scirius
Scirius is a web application for Suricata ruleset management and threat hunting.
+6 stars
from 680 · score 1.95
23.hookprobe / hookprobe
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
+6 stars
from 42 · score 1.95
24.OWASP / Python-Honeypot
OWASP Honeypot, Automated Deception Framework.
+5 stars
from 478 · score 1.79
25.omar2535 / GraphQLer
🔍A cutting edge context aware GraphQL API fuzzing tool!
+5 stars
from 169 · score 1.79
26.gsmith257-cyber / GraphCrawlerArchived
GraphQL automated security testing toolkit
+2 stars
from 333 · score 1.10
27.typedb-osi / typedb-cti
Open Source Threat Intelligence Platform
+2 stars
from 168 · score 1.10
28.0xBallpoint / trapster-community
Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features
+2 stars
from 165 · score 1.10
29.padok-team / cognito-scanner
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
+1 stars
from 112 · score 0.69
30.Zigrin-Security / CakeFuzzer
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
+1 stars
from 104 · score 0.69
31.SababaSec / ctf-writeups
Capture The Flag competition challenge write-ups
+1 stars
from 23 · score 0.69