1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+7,236 stars
from 65,995 · score 8.89
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
98 repositories by Attention Score · Oct 4, 2026 – Nov 2, 2026 (UTC)
2.mukul975 / Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
+1,790 stars
from 33,614 · score 7.49
3.mitmproxy / mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
+1,427 stars
from 45,115 · score 7.26
4.swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+946 stars
from 81,338 · score 6.85
5.ADWMC / helm-d
DeepSeek Harness 破甲一体化安全分析插件：Android · Web · Native · Protocol · Malware · AI-Security 全领域聚合（9 bundle + 1 preset）
+935 stars
from 17 · score 6.84
6.mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
+499 stars
from 15,176 · score 6.21
7.goauthentik / authentik
The authentication glue you need.
+409 stars
from 25,783 · score 6.02
8.fail2ban / fail2ban
Daemon to ban hosts that cause multiple authentication errors
+246 stars
from 18,683 · score 5.51
9.StevenBlack / hosts
🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
+238 stars
from 31,123 · score 5.48
10.prowler-cloud / prowler
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
+238 stars
from 14,912 · score 5.48
11.SigmaHQ / sigma
Main Sigma Rule Repository
+237 stars
from 11,148 · score 5.47
12.eosphoros-ai / DB-GPT
open-source agentic AI data assistant for the next generation of AI + Data products.
+189 stars
from 20,045 · score 5.25
13.DedSecInside / TorBot
Dark Web OSINT Tool
+183 stars
from 4,975 · score 5.21
14.frappe / frappe
Low code web framework for real world applications, in Python and Javascript
+182 stars
from 10,861 · score 5.21
15.bunkerity / bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
+181 stars
from 11,022 · score 5.20
16.qazbnm456 / awesome-web-security
🐶 A curated list of Web Security materials and resources.
+153 stars
from 13,830 · score 5.04
17.maurosoria / dirsearch
Web path scanner
+133 stars
from 14,900 · score 4.90
18.evilsocket / opensnitch
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
+129 stars
from 14,104 · score 4.87
19.netalertx / NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
+117 stars
from 7,231 · score 4.77
20.onionshare / onionshare
Securely and anonymously share files, host websites, and chat with friends using the Tor network
+105 stars
from 7,100 · score 4.66
21.secdev / scapy
Scapy: the Python-based interactive packet manipulation program & library.
+97 stars
from 12,571 · score 4.58
22.PyCQA / bandit
Bandit is a tool designed to find common security issues in Python code.
+85 stars
from 8,281 · score 4.45
23.cowrie / cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
+84 stars
from 6,568 · score 4.44
24.wifiphisher / wifiphisher
The Rogue Access Point Framework
+69 stars
from 14,863 · score 4.25
25.sensepost / objection
📱 objection - runtime mobile exploration
+67 stars
from 9,412 · score 4.22
26.trailofbits / algo
Set up a personal VPN in the cloud
+64 stars
from 30,386 · score 4.17
27.BlessedRebuS / Krawl
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
+55 stars
from 770 · score 4.03
28.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+43 stars
from 2,534 · score 3.78
29.nccgroup / ScoutSuite
Multi-Cloud Security Auditing Tool
+42 stars
from 7,827 · score 3.76
30.stamparm / maltrail
Malicious traffic detection system
+39 stars
from 8,610 · score 3.69
31.pic-standard / pic-standard
Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.
+38 stars
from 31 · score 3.66
32.CTFd / CTFd
CTFs as you need them
+37 stars
from 6,858 · score 3.64
33.ivre / ivre
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
+37 stars
from 4,156 · score 3.64
34.threat9 / routersploit
Exploitation Framework for Embedded Devices
+32 stars
from 13,248 · score 3.50
35.ReversecLabs / drozer
The Leading Security Assessment Framework for Android.
+22 stars
from 4,625 · score 3.14
36.google / timesketch
Collaborative forensic timeline analysis
+22 stars
from 3,426 · score 3.14
37.JPCERTCC / LogonTracer
Investigate malicious Windows logon by visualizing and analyzing Windows event log
+21 stars
from 3,278 · score 3.09
38.Legrandin / pycryptodome
A self-contained cryptographic library for Python
+20 stars
from 3,264 · score 3.04
39.jopohl / urhArchived
Universal Radio Hacker: Investigate Wireless Protocols Like A Boss
+19 stars
from 12,574 · score 3.00
40.jtesta / ssh-audit
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
+19 stars
from 4,312 · score 3.00
41.hslatman / awesome-industrial-control-system-security
A curated list of resources related to Industrial Control System (ICS) security.
+17 stars
from 2,029 · score 2.89
42.CERT-Polska / Artemis
A modular vulnerability scanner with automatic report generation capabilities.
+17 stars
from 1,235 · score 2.89
43.CrimsonForge-io / king-phisher
Phishing Campaign Toolkit
+14 stars
from 2,595 · score 2.71
44.fkie-cad / friTap
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
+14 stars
from 551 · score 2.71
45.cider-security-research / cicd-goat
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
+12 stars
from 2,315 · score 2.56
46.OWASP / www-project-agent-memory-guard
Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.
+12 stars
from 181 · score 2.56
47.jtpereyda / boofuzz
A fork and successor of the Sulley Fuzzing Framework
+11 stars
from 2,360 · score 2.48
48.globaleaks / globaleaks-whistleblowing-software
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
+11 stars
from 1,515 · score 2.48
49.cliffe / SecGen
Create randomly insecure VMs
+10 stars
from 2,790 · score 2.40
50.flipkart-incubator / Astra
Automated Security Testing For REST API's
+9 stars
from 2,665 · score 2.30
51.mushorg / conpot
ICS/SCADA honeypot
+9 stars
from 1,530 · score 2.30
52.idaholab / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+9 stars
from 485 · score 2.30
53.Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
+8 stars
from 1,756 · score 2.20
54.dvershinin / gixy
NGINX configuration static analyzer
+6 stars
from 1,184 · score 1.95
55.andresriancho / w3af
w3af: web application attack and audit framework, the open source web vulnerability scanner.
+5 stars
from 4,907 · score 1.79
56.pallets / itsdangerous
Safely pass trusted data to untrusted environments and back.
+5 stars
from 3,136 · score 1.79
57.salesforce / policy_sentry
IAM Least Privilege Policy Generator
+5 stars
from 2,171 · score 1.79
58.capitalone / DataProfiler
What's in your data? Extract schema, statistics and entities from datasets
+5 stars
from 1,589 · score 1.79
59.moloch-- / RootTheBox
A Game of Hackers (CTF Scoreboard & Game Manager)
+5 stars
from 1,135 · score 1.79
60.milesmcc / shynet
Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.
+4 stars
from 3,153 · score 1.61
61.GoSecure / pyrdp
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
+4 stars
from 1,784 · score 1.61
62.bee-san / Name-That-Hash
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
+4 stars
from 1,669 · score 1.61
63.EmilStenstrom / justhtml
A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.
+4 stars
from 1,157 · score 1.61
64.dolevf / graphql-cop
Security Auditor Utility for GraphQL APIs
+4 stars
from 693 · score 1.61
65.panther-labs / panther-analysis
Built-in Panther detection rules and policies
+4 stars
from 468 · score 1.61
66.Hexastrike / PyrsistenceSniper
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
+4 stars
from 268 · score 1.61
67.uber-common / metta
An information security preparedness tool to do adversarial simulation.
+3 stars
from 1,145 · score 1.39
68.EnableSecurity / sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
+3 stars
from 1,107 · score 1.39
69.TypeError / secure
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
+3 stars
from 1,071 · score 1.39
70.DinoTools / dionaea
Home of the dionaea honeypot
+3 stars
from 816 · score 1.39
71.unipacker / unipacker
Automatic and platform-independent unpacker for Windows binaries based on emulation
+3 stars
from 781 · score 1.39
72.mushorg / snare
Super Next generation Advanced Reactive honEypot
+3 stars
from 484 · score 1.39
73.aaronphifer / triagewall
Local-LLM alert triage for self-hosted SOCs.
+3 stars
from 11 · score 1.39
74.airbnb / streamalert
StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.
+2 stars
from 2,891 · score 1.10
75.Nekmo / dirhunt
Find web directories without bruteforce
+2 stars
from 2,006 · score 1.10
76.codingo / VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+2 stars
from 1,312 · score 1.10
77.nccgroup / featherduster
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
+2 stars
from 1,139 · score 1.10
78.in-toto / in-toto
in-toto is a framework to protect supply chain integrity.
+2 stars
from 1,050 · score 1.10
79.tor2web / Tor2web
Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers
+2 stars
from 758 · score 1.10
80.0x4D31 / honeyLambda
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
+2 stars
from 525 · score 1.10
81.johnnykv / heralding
Credentials catching honeypot
+2 stars
from 396 · score 1.10
82.dogoncouch / LogESP
Open Source SIEM (Security Information and Event Management system).
+2 stars
from 224 · score 1.10
83.cpeoples / ansible-security-scanner
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
+2 stars
from 10 · score 1.10
84.hannob / snallygaster
Tool to scan for secret files on HTTP servers
+1 stars
from 2,113 · score 0.69
85.alichtman / stronghold
Easily configure macOS security settings from the terminal.
+1 stars
from 1,195 · score 0.69
86.snovvcrash / usbripArchived
Tracking history of USB events on GNU/Linux
+1 stars
from 1,184 · score 0.69
87.TryCatchHCF / DumpsterFire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
+1 stars
from 1,042 · score 0.69
88.seemoo-lab / internalblue
Bluetooth experimentation framework for Broadcom and Cypress chips.
+1 stars
from 791 · score 0.69
89.StamusNetworks / scirius
Scirius is a web application for Suricata ruleset management and threat hunting.
+1 stars
from 685 · score 0.69
90.sec-bit / awesome-buggy-erc20-tokens
A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected
+1 stars
from 632 · score 0.69
91.pralab / secml_malware
Create adversarial attacks against machine learning Windows malware detectors
+1 stars
from 252 · score 0.69
+1 stars
from 232 · score 0.69
93.MegaManSec / Gixy-Next
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
+1 stars
from 193 · score 0.69
94.dogoncouch / logdissect
CLI utility and Python module for analyzing log files and other data.
+1 stars
from 161 · score 0.69
95.timescale / pgspot
Spot vulnerabilities in postgres SQL scripts
+1 stars
from 149 · score 0.69
96.apiiro / combobulator
Dependency Combobulator
+1 stars
from 96 · score 0.69
97.zuBux / drydock
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
+1 stars
from 65 · score 0.69
98.Myr-Aya / GouvernAI-claude-code-plugin
Runtime guardrails for Claude Code. Auto-approve what's safe, gate what's risky, block what's dangerous. Dual enforcement, full audit trail. MIT.
+1 stars
from 23 · score 0.69