1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+1,348 stars
from 71,883 · score 7.21
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
75 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.mukul975 / Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
+392 stars
from 35,012 · score 5.97
3.ADWMC / helm-d
DeepSeek Harness 破甲一体化安全分析插件：Android · Web · Native · Protocol · Malware · AI-Security 全领域聚合（9 bundle + 1 preset）
+311 stars
from 641 · score 5.74
4.morluto / awesome-reverse-engineering
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
+268 stars
from 1,233 · score 5.59
5.swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+220 stars
from 82,064 · score 5.40
6.mitmproxy / mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
+198 stars
from 46,344 · score 5.29
7.irraz / vulnerator-ai
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
+184 stars
from 24 · score 5.22
8.mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
+139 stars
from 15,536 · score 4.94
9.goauthentik / authentik
The authentication glue you need.
+95 stars
from 26,097 · score 4.56
10.bunkerity / bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
+88 stars
from 11,115 · score 4.49
11.fail2ban / fail2ban
Daemon to ban hosts that cause multiple authentication errors
+57 stars
from 18,872 · score 4.06
12.prowler-cloud / prowler
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
+57 stars
from 15,093 · score 4.06
13.StevenBlack / hosts
🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
+47 stars
from 31,314 · score 3.87
14.frappe / frappe
Low code web framework for real world applications, in Python and Javascript
+46 stars
from 10,997 · score 3.85
15.eosphoros-ai / DB-GPT
open-source agentic AI data assistant for the next generation of AI + Data products.
+43 stars
from 20,191 · score 3.78
16.DedSecInside / TorBot
Dark Web OSINT Tool
+43 stars
from 5,115 · score 3.78
17.SigmaHQ / sigma
Main Sigma Rule Repository
+42 stars
from 11,343 · score 3.76
18.BlueRingsLabs / no-shortcuts
Free Course : Data, Machine Learning, Deep Learning and AI Engineering, the long way round: the math, the code, the systems and the security. 173 lessons, 166 runnable labs, no shortcuts. Free under CC BY-NC 4.0.
+34 stars
from 132 · score 3.56
19.aarsaputra / php2shell
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
+34 stars
from 87 · score 3.56
20.qazbnm456 / awesome-web-security
🐶 A curated list of Web Security materials and resources.
+26 stars
from 13,957 · score 3.30
21.cowrie / cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
+26 stars
from 6,626 · score 3.30
22.maurosoria / dirsearch
Web path scanner
+25 stars
from 15,008 · score 3.26
23.netalertx / NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
+23 stars
from 7,325 · score 3.18
24.BlessedRebuS / Krawl
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
+23 stars
from 802 · score 3.18
25.evilsocket / opensnitch
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
+22 stars
from 14,211 · score 3.14
26.sensepost / objection
📱 objection - runtime mobile exploration
+19 stars
from 9,460 · score 3.00
27.PyCQA / bandit
Bandit is a tool designed to find common security issues in Python code.
+19 stars
from 8,347 · score 3.00
28.secdev / scapy
Scapy: the Python-based interactive packet manipulation program & library.
+17 stars
from 12,651 · score 2.89
29.onionshare / onionshare
Securely and anonymously share files, host websites, and chat with friends using the Tor network
+16 stars
from 7,189 · score 2.83
30.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+14 stars
from 2,563 · score 2.71
31.nccgroup / ScoutSuite
Multi-Cloud Security Auditing Tool
+11 stars
from 7,858 · score 2.48
32.wifiphisher / wifiphisher
The Rogue Access Point Framework
+10 stars
from 14,922 · score 2.40
33.stamparm / maltrail
Malicious traffic detection system
+10 stars
from 8,639 · score 2.40
34.trailofbits / algo
Set up a personal VPN in the cloud
+6 stars
from 30,444 · score 1.95
35.threat9 / routersploit
Exploitation Framework for Embedded Devices
+6 stars
from 13,274 · score 1.95
36.ReversecLabs / drozer
The Leading Security Assessment Framework for Android.
+6 stars
from 4,641 · score 1.95
37.ivre / ivre
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
+6 stars
from 4,187 · score 1.95
38.google / timesketch
Collaborative forensic timeline analysis
+6 stars
from 3,442 · score 1.95
39.CERT-Polska / Artemis
A modular vulnerability scanner with automatic report generation capabilities.
+6 stars
from 1,246 · score 1.95
40.JPCERTCC / LogonTracer
Investigate malicious Windows logon by visualizing and analyzing Windows event log
+5 stars
from 3,294 · score 1.79
41.jtpereyda / boofuzz
A fork and successor of the Sulley Fuzzing Framework
+5 stars
from 2,366 · score 1.79
42.fkie-cad / friTap
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
+4 stars
from 561 · score 1.61
43.idaholab / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+4 stars
from 490 · score 1.61
44.zero-lab-ai / skills
Portable, evidence-bound security skills for authorized defensive assessment, red teaming, penetration testing, detection engineering, and engagement operations.
+4 stars
from 282 · score 1.61
45.JoasASantos / php2shell-scanner
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
+4 stars
from 107 · score 1.61
46.CTFd / CTFd
CTFs as you need them
+3 stars
from 6,892 · score 1.39
47.flipkart-incubator / Astra
Automated Security Testing For REST API's
+3 stars
from 2,671 · score 1.39
48.OWASP / www-project-agent-memory-guard
Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.
+3 stars
from 190 · score 1.39
49.jopohl / urhArchived
Universal Radio Hacker: Investigate Wireless Protocols Like A Boss
+2 stars
from 12,591 · score 1.10
50.Legrandin / pycryptodome
A self-contained cryptographic library for Python
+2 stars
from 3,282 · score 1.10
51.cliffe / SecGen
Create randomly insecure VMs
+2 stars
from 2,798 · score 1.10
52.cider-security-research / cicd-goat
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
+2 stars
from 2,325 · score 1.10
53.hslatman / awesome-industrial-control-system-security
A curated list of resources related to Industrial Control System (ICS) security.
+2 stars
from 2,044 · score 1.10
54.globaleaks / globaleaks-whistleblowing-software
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
+2 stars
from 1,524 · score 1.10
55.dolevf / graphql-cop
Security Auditor Utility for GraphQL APIs
+2 stars
from 695 · score 1.10
56.dogoncouch / LogESP
Open Source SIEM (Security Information and Event Management system).
+2 stars
from 224 · score 1.10
57.aaronphifer / triagewall
Local-LLM alert triage for self-hosted SOCs.
+2 stars
from 12 · score 1.10
58.jtesta / ssh-audit
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
+1 stars
from 4,330 · score 0.69
59.milesmcc / shynet
Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.
+1 stars
from 3,156 · score 0.69
60.CrimsonForge-io / king-phisher
Phishing Campaign Toolkit
+1 stars
from 2,608 · score 0.69
61.Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
+1 stars
from 1,763 · score 0.69
62.codingo / VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+1 stars
from 1,313 · score 0.69
63.dvershinin / gixy
NGINX configuration static analyzer
+1 stars
from 1,189 · score 0.69
64.snovvcrash / usbripArchived
Tracking history of USB events on GNU/Linux
+1 stars
from 1,184 · score 0.69
65.nccgroup / featherduster
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
+1 stars
from 1,140 · score 0.69
66.TypeError / secure
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
+1 stars
from 1,073 · score 0.69
67.in-toto / in-toto
in-toto is a framework to protect supply chain integrity.
+1 stars
from 1,051 · score 0.69
68.StamusNetworks / scirius
Scirius is a web application for Suricata ruleset management and threat hunting.
+1 stars
from 685 · score 0.69
69.sec-bit / awesome-buggy-erc20-tokens
A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected
+1 stars
from 632 · score 0.69
70.mushorg / snare
Super Next generation Advanced Reactive honEypot
+1 stars
from 486 · score 0.69
71.MegaManSec / Gixy-Next
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
+1 stars
from 193 · score 0.69
72.dogoncouch / logdissect
CLI utility and Python module for analyzing log files and other data.
+1 stars
from 161 · score 0.69
73.apiiro / combobulator
Dependency Combobulator
+1 stars
from 96 · score 0.69
74.pic-standard / pic-standard
Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.
+1 stars
from 68 · score 0.69
75.cpeoples / ansible-security-scanner
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
+1 stars
from 11 · score 0.69