1.sherlock-project / sherlock
Hunt down social media accounts by username across social networks
+2,376 stars
from 93,011 · score 7.77
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
18 repositories by Attention Score · Oct 4, 2026 – Nov 2, 2026 (UTC)
2.mukul975 / Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
+1,790 stars
from 33,614 · score 7.49
3.smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
+1,522 stars
from 22,699 · score 7.33
4.soxoj / maigret
🕵️♂️ Collect a dossier on a person by username from 6K websites
+1,474 stars
from 38,132 · score 7.30
5.maurosoria / dirsearch
Web path scanner
+133 stars
from 14,900 · score 4.90
6.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+43 stars
from 2,534 · score 3.78
7.threat9 / routersploit
Exploitation Framework for Embedded Devices
+32 stars
from 13,248 · score 3.50
8.GerbenJavado / LinkFinder
A python script that finds endpoints in JavaScript files
+19 stars
from 4,449 · score 3.00
9.cider-security-research / cicd-goat
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
+12 stars
from 2,315 · score 2.56
10.PlumHound / PlumHound
Bloodhound Reporting for Blue and Purple Teams
+12 stars
from 1,322 · score 2.56
11.idaholab / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+9 stars
from 485 · score 2.30
12.Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
+8 stars
from 1,756 · score 2.20
13.yeti-platform / yeti
Your Everyday Threat Intelligence
+5 stars
from 2,033 · score 1.79
14.bee-san / Name-That-Hash
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
+4 stars
from 1,669 · score 1.61
15.uber-common / metta
An information security preparedness tool to do adversarial simulation.
+3 stars
from 1,145 · score 1.39
16.tomchop / malcom
Malcom - Malware Communications Analyzer
+1 stars
from 1,173 · score 0.69
17.TryCatchHCF / DumpsterFire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
+1 stars
from 1,042 · score 0.69
18.pralab / secml_malware
Create adversarial attacks against machine learning Windows malware detectors
+1 stars
from 252 · score 0.69