1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+25,437 stars
from 47,794 · score 10.14
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
1–100 of 114 by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.mukul975 / Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
+8,447 stars
from 26,957 · score 9.04
3.goauthentik / authentik
The authentication glue you need.
+3,700 stars
from 22,492 · score 8.22
4.mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
+2,899 stars
from 12,776 · score 7.97
5.swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+2,888 stars
from 79,396 · score 7.97
6.mitmproxy / mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
+2,166 stars
from 44,376 · score 7.68
7.fail2ban / fail2ban
Daemon to ban hosts that cause multiple authentication errors
+701 stars
from 18,228 · score 6.55
8.DedSecInside / TorBot
Dark Web OSINT Tool
+688 stars
from 4,470 · score 6.54
9.prowler-cloud / prowler
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
+669 stars
from 14,481 · score 6.51
10.eosphoros-ai / DB-GPT
open-source agentic AI data assistant for the next generation of AI + Data products.
+667 stars
from 19,567 · score 6.50
11.StevenBlack / hosts
🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
+663 stars
from 30,698 · score 6.50
12.SigmaHQ / sigma
Main Sigma Rule Repository
+573 stars
from 10,812 · score 6.35
13.frappe / frappe
Low code web framework for real world applications, in Python and Javascript
+559 stars
from 10,484 · score 6.33
14.maurosoria / dirsearch
Web path scanner
+529 stars
from 14,504 · score 6.27
15.netalertx / NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
+525 stars
from 6,823 · score 6.27
16.bunkerity / bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
+459 stars
from 10,744 · score 6.13
17.qazbnm456 / awesome-web-security
🐶 A curated list of Web Security materials and resources.
+381 stars
from 13,602 · score 5.95
18.evilsocket / opensnitch
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
+340 stars
from 13,893 · score 5.83
19.BlessedRebuS / Krawl
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
+273 stars
from 552 · score 5.61
20.secdev / scapy
Scapy: the Python-based interactive packet manipulation program & library.
+250 stars
from 12,418 · score 5.53
21.wifiphisher / wifiphisher
The Rogue Access Point Framework
+246 stars
from 14,686 · score 5.51
22.sensepost / objection
📱 objection - runtime mobile exploration
+217 stars
from 9,262 · score 5.38
23.PyCQA / bandit
Bandit is a tool designed to find common security issues in Python code.
+197 stars
from 8,169 · score 5.29
24.onionshare / onionshare
Securely and anonymously share files, host websites, and chat with friends using the Tor network
+192 stars
from 7,013 · score 5.26
25.cowrie / cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
+190 stars
from 6,462 · score 5.25
26.trailofbits / algo
Set up a personal VPN in the cloud
+185 stars
from 30,265 · score 5.23
27.CTFd / CTFd
CTFs as you need them
+140 stars
from 6,755 · score 4.95
28.threat9 / routersploit
Exploitation Framework for Embedded Devices
+120 stars
from 13,160 · score 4.80
29.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+115 stars
from 2,462 · score 4.75
30.stamparm / maltrail
Malicious traffic detection system
+113 stars
from 8,536 · score 4.74
31.JPCERTCC / LogonTracer
Investigate malicious Windows logon by visualizing and analyzing Windows event log
+107 stars
from 3,192 · score 4.68
32.ivre / ivre
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
+105 stars
from 4,088 · score 4.66
33.nccgroup / ScoutSuite
Multi-Cloud Security Auditing Tool
+104 stars
from 7,765 · score 4.65
34.jtesta / ssh-audit
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
+94 stars
from 4,237 · score 4.55
35.OWASP / www-project-agent-memory-guard
Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.
+86 stars
from 107 · score 4.47
36.ReversecLabs / drozer
The Leading Security Assessment Framework for Android.
+78 stars
from 4,569 · score 4.37
37.google / timesketch
Collaborative forensic timeline analysis
+68 stars
from 3,380 · score 4.23
38.jopohl / urhArchived
Universal Radio Hacker: Investigate Wireless Protocols Like A Boss
+65 stars
from 12,528 · score 4.19
39.CERT-Polska / Artemis
A modular vulnerability scanner with automatic report generation capabilities.
+64 stars
from 1,188 · score 4.17
40.hslatman / awesome-industrial-control-system-security
A curated list of resources related to Industrial Control System (ICS) security.
+53 stars
from 1,993 · score 3.99
41.CrimsonForge-io / king-phisher
Phishing Campaign Toolkit
+50 stars
from 2,559 · score 3.93
42.cider-security-research / cicd-goat
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
+50 stars
from 2,277 · score 3.93
43.Legrandin / pycryptodome
A self-contained cryptographic library for Python
+39 stars
from 3,245 · score 3.69
44.pic-standard / pic-standard
Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.
+39 stars
from 30 · score 3.69
45.Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
+38 stars
from 1,726 · score 3.66
46.mushorg / conpot
ICS/SCADA honeypot
+38 stars
from 1,501 · score 3.66
47.fkie-cad / friTap
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
+38 stars
from 527 · score 3.66
48.Hexastrike / PyrsistenceSniper
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
+31 stars
from 241 · score 3.47
49.jtpereyda / boofuzz
A fork and successor of the Sulley Fuzzing Framework
+29 stars
from 2,342 · score 3.40
50.in-toto / in-toto
in-toto is a framework to protect supply chain integrity.
+28 stars
from 1,024 · score 3.37
51.globaleaks / globaleaks-whistleblowing-software
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
+27 stars
from 1,499 · score 3.33
52.andresriancho / w3af
w3af: web application attack and audit framework, the open source web vulnerability scanner.
+26 stars
from 4,886 · score 3.30
53.flipkart-incubator / Astra
Automated Security Testing For REST API's
+26 stars
from 2,648 · score 3.30
54.capitalone / DataProfiler
What's in your data? Extract schema, statistics and entities from datasets
+26 stars
from 1,568 · score 3.30
55.TypeError / secure
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
+26 stars
from 1,048 · score 3.30
56.cliffe / SecGen
Create randomly insecure VMs
+24 stars
from 2,776 · score 3.22
57.unipacker / unipacker
Automatic and platform-independent unpacker for Windows binaries based on emulation
+23 stars
from 761 · score 3.18
58.milesmcc / shynet
Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.
+21 stars
from 3,136 · score 3.09
59.pallets / itsdangerous
Safely pass trusted data to untrusted environments and back.
+21 stars
from 3,120 · score 3.09
60.moloch-- / RootTheBox
A Game of Hackers (CTF Scoreboard & Game Manager)
+20 stars
from 1,120 · score 3.04
61.idaholab / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+20 stars
from 474 · score 3.04
62.EnableSecurity / sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
+19 stars
from 1,091 · score 3.00
63.bee-san / Name-That-Hash
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
+18 stars
from 1,655 · score 2.94
64.GoSecure / pyrdp
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
+17 stars
from 1,771 · score 2.89
65.dolevf / graphql-cop
Security Auditor Utility for GraphQL APIs
+16 stars
from 681 · score 2.83
66.salesforce / policy_sentry
IAM Least Privilege Policy Generator
+15 stars
from 2,161 · score 2.77
67.EmilStenstrom / justhtml
A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.
+15 stars
from 1,146 · score 2.77
68.dvershinin / gixy
NGINX configuration static analyzer
+14 stars
from 1,176 · score 2.71
69.DinoTools / dionaea
Home of the dionaea honeypot
+14 stars
from 805 · score 2.71
70.panther-labs / panther-analysis
Built-in Panther detection rules and policies
+13 stars
from 459 · score 2.64
71.Nekmo / dirhunt
Find web directories without bruteforce
+12 stars
from 1,996 · score 2.56
72.codingo / VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+11 stars
from 1,303 · score 2.48
73.seemoo-lab / internalblue
Bluetooth experimentation framework for Broadcom and Cypress chips.
+10 stars
from 782 · score 2.40
74.MegaManSec / Gixy-Next
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
+10 stars
from 184 · score 2.40
75.hannob / snallygaster
Tool to scan for secret files on HTTP servers
+9 stars
from 2,105 · score 2.30
76.tor2web / Tor2web
Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers
+9 stars
from 751 · score 2.30
77.alichtman / stronghold
Easily configure macOS security settings from the terminal.
+7 stars
from 1,189 · score 2.08
78.TryCatchHCF / DumpsterFire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
+7 stars
from 1,036 · score 2.08
79.pralab / secml_malware
Create adversarial attacks against machine learning Windows malware detectors
+7 stars
from 246 · score 2.08
80.airbnb / streamalert
StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.
+6 stars
from 2,887 · score 1.95
81.uber-common / metta
An information security preparedness tool to do adversarial simulation.
+6 stars
from 1,142 · score 1.95
82.nccgroup / featherduster
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
+6 stars
from 1,135 · score 1.95
83.StamusNetworks / scirius
Scirius is a web application for Suricata ruleset management and threat hunting.
+6 stars
from 680 · score 1.95
84.mushorg / snare
Super Next generation Advanced Reactive honEypot
+6 stars
from 481 · score 1.95
85.sec-bit / awesome-buggy-erc20-tokens
A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected
+5 stars
from 628 · score 1.79
86.OWASP / Python-Honeypot
OWASP Honeypot, Automated Deception Framework.
+5 stars
from 478 · score 1.79
87.johnnykv / heralding
Credentials catching honeypot
+5 stars
from 393 · score 1.79
88.snovvcrash / usbripArchived
Tracking history of USB events on GNU/Linux
+4 stars
from 1,181 · score 1.61
89.dogoncouch / LogESP
Open Source SIEM (Security Information and Event Management system).
+4 stars
from 222 · score 1.61
90.Myr-Aya / GouvernAI-claude-code-plugin
Runtime guardrails for Claude Code. Auto-approve what's safe, gate what's risky, block what's dangerous. Dual enforcement, full audit trail. MIT.
+4 stars
from 20 · score 1.61
+3 stars
from 1,782 · score 1.39
92.nccgroup / Scout2Archived
Security auditing tool for AWS environments
+3 stars
from 1,713 · score 1.39
93.hahwul / a2svArchived
Auto Scanning to SSL Vulnerability
+3 stars
from 633 · score 1.39
94.timescale / pgspot
Spot vulnerabilities in postgres SQL scripts
+3 stars
from 147 · score 1.39
95.aaronphifer / triagewall
Local-LLM alert triage for self-hosted SOCs.
+3 stars
from 11 · score 1.39
96.cpeoples / ansible-security-scanner
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
+3 stars
from 9 · score 1.39
97.hexsecs / canarchy
Stream-first CAN & J1939 toolkit for security research and AI agents — typed JSONL events, CLI, TUI, fuzzing, MCP server.
+3 stars
from 1 · score 1.39
98.Netflix / security_monkeyArchived
Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.
+2 stars
from 4,365 · score 1.10
99.Netflix / bless
Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function
+2 stars
from 2,755 · score 1.10
100.0x4D31 / honeyLambda
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
+2 stars
from 525 · score 1.10