1.smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
+6,734 stars
from 17,487 · score 8.82
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
24 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
2.prowler-cloud / prowler
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
+1,506 stars
from 13,644 · score 7.32
3.fail2ban / fail2ban
Daemon to ban hosts that cause multiple authentication errors
+1,364 stars
from 17,565 · score 7.22
4.DedSecInside / TorBot
Dark Web OSINT Tool
+1,155 stars
from 4,003 · score 7.05
5.secdev / scapy
Scapy: the Python-based interactive packet manipulation program & library.
+459 stars
from 12,209 · score 6.13
6.PyCQA / bandit
Bandit is a tool designed to find common security issues in Python code.
+418 stars
from 7,948 · score 6.04
7.Hexastrike / PyrsistenceSniper
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
+189 stars
from 83 · score 5.25
8.guardicore / monkey
Infection Monkey - An open-source adversary emulation platform
+157 stars
from 6,962 · score 5.06
9.codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
+127 stars
from 3,243 · score 4.85
10.CERT-Polska / Artemis
A modular vulnerability scanner with automatic report generation capabilities.
+94 stars
from 1,158 · score 4.55
11.agentrhq / authsome
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
+87 stars
from 16 · score 4.48
12.thehappydinoa / awesome-censys-queries
A collection of fascinating and bizarre Censys Search Queries
+43 stars
from 1,207 · score 3.78
13.EnableSecurity / sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
+41 stars
from 1,069 · score 3.74
14.Nekmo / dirhunt
Find web directories without bruteforce
+33 stars
from 1,975 · score 3.53
15.codingo / VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+30 stars
from 1,284 · score 3.43
16.pedramamini / ThreatIngestor
Extract and aggregate threat intelligence.
+27 stars
from 905 · score 3.33
17.buffer / thug
Python low-interaction honeyclient
+19 stars
from 1,027 · score 3.00
18.fportantier / habu
Hacking Toolkit
+19 stars
from 973 · score 3.00
19.rfunix / Pompem
Find exploit tool
+16 stars
from 1,027 · score 2.83
20.TryCatchHCF / DumpsterFire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
+11 stars
from 1,032 · score 2.48
21.johnnykv / heralding
Credentials catching honeypot
+9 stars
from 389 · score 2.30
22.dogoncouch / LogESP
Open Source SIEM (Security Information and Event Management system).
+8 stars
from 218 · score 2.20
23.FeeiCN / GSILArchived
GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）
+3 stars
from 2,138 · score 1.39
24.1ultimat3 / PcapViz
Visualize network topologies and collect graph statistics based on pcap files
+3 stars
from 357 · score 1.39