1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+48,874 stars
from 24,357 · score 10.80
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
1–100 of 106 by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
2.mukul975 / Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
+29,518 stars
from 5,886 · score 10.29
3.swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+5,442 stars
from 76,842 · score 8.60
4.goauthentik / authentik
The authentication glue you need.
+5,078 stars
from 21,114 · score 8.53
5.mitmproxy / mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
+3,426 stars
from 43,116 · score 8.14
6.mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
+3,384 stars
from 12,291 · score 8.13
7.eosphoros-ai / DB-GPT
open-source agentic AI data assistant for the next generation of AI + Data products.
+1,702 stars
from 18,532 · score 7.44
8.prowler-cloud / prowler
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
+1,506 stars
from 13,644 · score 7.32
9.fail2ban / fail2ban
Daemon to ban hosts that cause multiple authentication errors
+1,364 stars
from 17,565 · score 7.22
10.StevenBlack / hosts
🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
+1,283 stars
from 30,078 · score 7.16
11.DedSecInside / TorBot
Dark Web OSINT Tool
+1,155 stars
from 4,003 · score 7.05
12.frappe / frappe
Low code web framework for real world applications, in Python and Javascript
+1,073 stars
from 9,970 · score 6.98
13.netalertx / NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
+1,047 stars
from 6,301 · score 6.95
14.SigmaHQ / sigma
Main Sigma Rule Repository
+1,031 stars
from 10,354 · score 6.94
15.maurosoria / dirsearch
Web path scanner
+903 stars
from 14,130 · score 6.81
16.bunkerity / bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
+835 stars
from 10,368 · score 6.73
17.evilsocket / opensnitch
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
+743 stars
from 13,490 · score 6.61
18.qazbnm456 / awesome-web-security
🐶 A curated list of Web Security materials and resources.
+735 stars
from 13,248 · score 6.60
19.sensepost / objection
📱 objection - runtime mobile exploration
+473 stars
from 9,006 · score 6.16
20.secdev / scapy
Scapy: the Python-based interactive packet manipulation program & library.
+459 stars
from 12,209 · score 6.13
21.wifiphisher / wifiphisher
The Rogue Access Point Framework
+453 stars
from 14,479 · score 6.12
22.PyCQA / bandit
Bandit is a tool designed to find common security issues in Python code.
+418 stars
from 7,948 · score 6.04
23.trailofbits / algo
Set up a personal VPN in the cloud
+392 stars
from 30,058 · score 5.97
24.cowrie / cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
+361 stars
from 6,291 · score 5.89
25.onionshare / onionshare
Securely and anonymously share files, host websites, and chat with friends using the Tor network
+319 stars
from 6,886 · score 5.77
26.BlessedRebuS / Krawl
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
+306 stars
from 519 · score 5.73
27.CTFd / CTFd
CTFs as you need them
+291 stars
from 6,604 · score 5.68
28.stamparm / maltrail
Malicious traffic detection system
+275 stars
from 8,374 · score 5.62
29.threat9 / routersploit
Exploitation Framework for Embedded Devices
+262 stars
from 13,018 · score 5.57
30.nccgroup / ScoutSuite
Multi-Cloud Security Auditing Tool
+258 stars
from 7,611 · score 5.56
31.jopohl / urhArchived
Universal Radio Hacker: Investigate Wireless Protocols Like A Boss
+255 stars
from 12,338 · score 5.55
32.ivre / ivre
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
+205 stars
from 3,988 · score 5.33
33.OWASP / www-project-agent-memory-guard
Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.
+192 stars
from 1 · score 5.26
34.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+191 stars
from 2,386 · score 5.26
35.Hexastrike / PyrsistenceSniper
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
+189 stars
from 83 · score 5.25
36.jtesta / ssh-audit
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
+178 stars
from 4,153 · score 5.19
37.ReversecLabs / drozer
The Leading Security Assessment Framework for Android.
+161 stars
from 4,486 · score 5.09
38.JPCERTCC / LogonTracer
Investigate malicious Windows logon by visualizing and analyzing Windows event log
+149 stars
from 3,150 · score 5.01
39.google / timesketch
Collaborative forensic timeline analysis
+145 stars
from 3,303 · score 4.98
40.cider-security-research / cicd-goat
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
+114 stars
from 2,213 · score 4.74
41.hslatman / awesome-industrial-control-system-security
A curated list of resources related to Industrial Control System (ICS) security.
+100 stars
from 1,946 · score 4.62
42.CERT-Polska / Artemis
A modular vulnerability scanner with automatic report generation capabilities.
+94 stars
from 1,158 · score 4.55
43.CrimsonForge-io / king-phisher
Phishing Campaign Toolkit
+87 stars
from 2,522 · score 4.48
44.Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
+80 stars
from 1,684 · score 4.39
45.andresriancho / w3af
w3af: web application attack and audit framework, the open source web vulnerability scanner.
+78 stars
from 4,834 · score 4.37
46.mushorg / conpot
ICS/SCADA honeypot
+77 stars
from 1,462 · score 4.36
47.fkie-cad / friTap
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
+72 stars
from 493 · score 4.29
48.Legrandin / pycryptodome
A self-contained cryptographic library for Python
+71 stars
from 3,213 · score 4.28
49.globaleaks / globaleaks-whistleblowing-software
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
+66 stars
from 1,460 · score 4.20
50.TypeError / secure
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
+65 stars
from 1,009 · score 4.19
51.in-toto / in-toto
in-toto is a framework to protect supply chain integrity.
+59 stars
from 993 · score 4.09
52.dolevf / graphql-cop
Security Auditor Utility for GraphQL APIs
+59 stars
from 638 · score 4.09
53.cliffe / SecGen
Create randomly insecure VMs
+58 stars
from 2,742 · score 4.08
54.jtpereyda / boofuzz
A fork and successor of the Sulley Fuzzing Framework
+58 stars
from 2,313 · score 4.08
55.milesmcc / shynet
Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.
+50 stars
from 3,107 · score 3.93
56.flipkart-incubator / Astra
Automated Security Testing For REST API's
+50 stars
from 2,624 · score 3.93
57.pic-standard / pic-standard
Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.
+49 stars
from 20 · score 3.91
58.pallets / itsdangerous
Safely pass trusted data to untrusted environments and back.
+48 stars
from 3,093 · score 3.89
59.capitalone / DataProfiler
What's in your data? Extract schema, statistics and entities from datasets
+47 stars
from 1,547 · score 3.87
60.dvershinin / gixy
NGINX configuration static analyzer
+47 stars
from 1,143 · score 3.87
61.moloch-- / RootTheBox
A Game of Hackers (CTF Scoreboard & Game Manager)
+43 stars
from 1,097 · score 3.78
62.EnableSecurity / sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
+41 stars
from 1,069 · score 3.74
63.EmilStenstrom / justhtml
A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.
+36 stars
from 1,125 · score 3.61
64.unipacker / unipacker
Automatic and platform-independent unpacker for Windows binaries based on emulation
+35 stars
from 749 · score 3.58
65.Nekmo / dirhunt
Find web directories without bruteforce
+33 stars
from 1,975 · score 3.53
66.bee-san / Name-That-Hash
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
+33 stars
from 1,640 · score 3.53
67.MegaManSec / Gixy-Next
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
+33 stars
from 161 · score 3.53
68.salesforce / policy_sentry
IAM Least Privilege Policy Generator
+32 stars
from 2,144 · score 3.50
69.codingo / VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+30 stars
from 1,284 · score 3.43
70.DinoTools / dionaea
Home of the dionaea honeypot
+29 stars
from 790 · score 3.40
71.idaholab / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+29 stars
from 465 · score 3.40
72.GoSecure / pyrdp
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
+27 stars
from 1,761 · score 3.33
73.alichtman / stronghold
Easily configure macOS security settings from the terminal.
+26 stars
from 1,170 · score 3.30
74.panther-labs / panther-analysis
Built-in Panther detection rules and policies
+25 stars
from 447 · score 3.26
75.seemoo-lab / internalblue
Bluetooth experimentation framework for Broadcom and Cypress chips.
+22 stars
from 770 · score 3.14
+19 stars
from 1,766 · score 3.00
77.timescale / pgspot
Spot vulnerabilities in postgres SQL scripts
+18 stars
from 132 · score 2.94
78.tor2web / Tor2web
Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers
+17 stars
from 743 · score 2.89
79.StamusNetworks / scirius
Scirius is a web application for Suricata ruleset management and threat hunting.
+17 stars
from 669 · score 2.89
80.hannob / snallygaster
Tool to scan for secret files on HTTP servers
+14 stars
from 2,100 · score 2.71
81.uber-common / metta
An information security preparedness tool to do adversarial simulation.
+14 stars
from 1,134 · score 2.71
82.nccgroup / featherduster
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
+13 stars
from 1,128 · score 2.64
83.OWASP / Python-Honeypot
OWASP Honeypot, Automated Deception Framework.
+13 stars
from 470 · score 2.64
84.airbnb / streamalert
StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.
+12 stars
from 2,881 · score 2.56
85.TryCatchHCF / DumpsterFire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
+11 stars
from 1,032 · score 2.48
86.snovvcrash / usbripArchived
Tracking history of USB events on GNU/Linux
+10 stars
from 1,175 · score 2.40
87.Myr-Aya / GouvernAI-claude-code-plugin
Runtime guardrails for Claude Code. Auto-approve what's safe, gate what's risky, block what's dangerous. Dual enforcement, full audit trail. MIT.
+10 stars
from 14 · score 2.40
88.Netflix / security_monkeyArchived
Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.
+9 stars
from 4,358 · score 2.30
89.johnnykv / heralding
Credentials catching honeypot
+9 stars
from 389 · score 2.30
90.airbnb / binaryalert
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
+8 stars
from 1,447 · score 2.20
91.mushorg / snare
Super Next generation Advanced Reactive honEypot
+8 stars
from 479 · score 2.20
92.GoogleCloudPlatform / security-analyticsArchived
Community Security Analytics provides a set of community-driven audit & threat queries for Google Cloud
+8 stars
from 362 · score 2.20
93.pralab / secml_malware
Create adversarial attacks against machine learning Windows malware detectors
+8 stars
from 245 · score 2.20
94.dogoncouch / LogESP
Open Source SIEM (Security Information and Event Management system).
+8 stars
from 218 · score 2.20
95.karimhabush / cyberowl
Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.
+6 stars
from 257 · score 1.95
96.typedb-osi / typedb-cti
Open Source Threat Intelligence Platform
+5 stars
from 165 · score 1.79
97.Netflix / bless
Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function
+4 stars
from 2,753 · score 1.61
98.nccgroup / Scout2Archived
Security auditing tool for AWS environments
+4 stars
from 1,712 · score 1.61
99.Tencent / HaboMalHunter
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
+4 stars
from 747 · score 1.61
+4 stars
from 229 · score 1.61