+699 stars
from 38,596 · score 6.55
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
36 repositories by Attention Score · Aug 6, 2026 – Nov 3, 2026 (UTC)
2.urbanadventurer / WhatWeb
Next generation web scanner
- security
- web
- scanner
- ruby
- penetration-testing
- kali-linux
- +14 more
+235 stars
from 6,743 · score 5.46
3.wpscanteam / wpscan
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
- wordpress
- wpscan
- security
- security-scanner
- hacking-tool
- scanner
- +2 more
+151 stars
from 9,678 · score 5.02
4.pglombardo / PasswordPusher
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
+110 stars
from 3,131 · score 4.71
5.onetimesecret / onetimesecret
Keep passwords and other sensitive information out of your chat logs and inboxes.
+97 stars
from 2,881 · score 4.58
6.heartcombo / devise
Flexible authentication solution for Rails with Warden.
- rails
- ruby
- authentication
- devise
+41 stars
from 24,315 · score 3.74
7.presidentbeef / brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
- ruby
- rails
- security
- static-analysis
- vulnerabilities
- brakeman
- +3 more
+39 stars
from 7,253 · score 3.69
+30 stars
from 1,915 · score 3.43
9.david942j / one_gadget
The best tool for finding one gadget RCE in libc.so.6
+29 stars
from 2,335 · score 3.40
10.doorkeeper-gem / doorkeeper
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
- doorkeeper
- oauth
- oauth2-provider
- oauth2-server
- ruby-on-rails
- grape
- +4 more
+22 stars
from 5,510 · score 3.14
11.noraj / haiti
:key: Hash type identifier (CLI & lib)
- security-tools
- hash
- identify
- digest
- hashing
- security
- +14 more
+17 stars
from 992 · score 2.89
12.omniauth / omniauth
OmniAuth is a flexible authentication system utilizing Rack middleware.
- omniauth
- authentication
- hacktoberfest
- ruby
+14 stars
from 8,090 · score 2.71
13.github / secure_headers
Manages application of security headers with many safe defaults
- secure-headers
- csp
- hsts
- referrer-policy
- rack
- middleware
- +4 more
+12 stars
from 3,220 · score 2.56
14.ankane / lockbox
Modern encryption for Ruby and Rails
- encryption
- activerecord
- activestorage
- carrierwave
- mongoid
- libsodium
+12 stars
from 1,599 · score 2.56
15.rubysec / bundler-audit
Patch-level verification for Bundler
- bundler-audit
- ruby-advisory-db
- ruby
- dependency-checker
- patch-management
- security
- +2 more
+10 stars
from 2,754 · score 2.40
16.ronin-rb / ronin
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
+9 stars
from 752 · score 2.30
17.markets / invisible_captcha
🍯 Unobtrusive and flexible spam protection for Rails apps
+8 stars
from 1,245 · score 2.20
18.jwt / ruby-jwt
A ruby implementation of the RFC 7519 OAuth JSON Web Token (JWT) standard.
- jwt
- ruby-jwt
- oauth-json-web
- ruby
- jwt-token
- jwk
+7 stars
from 3,681 · score 2.08
19.backup / backup
Easy full stack backup operations on UNIX-like systems.
- backup
- ruby
- database
- s3
- encryption
- slack
- +3 more
+6 stars
from 4,853 · score 1.95
20.stelligent / cfn_nag
Linting tool for CloudFormation templates
- continuous-testing
- unit-testing
- cloudformation
- aws
- devops
- iam-rules
- +14 more
+6 stars
from 1,306 · score 1.95
21.lynndylanhurley / devise_token_auth
Token based authentication for Rails JSON APIs. Designed to work with jToker and ng-token-auth.
- devise
- rails
- authentication
- api
- oauth
- omniauth
+5 stars
from 3,565 · score 1.79
+5 stars
from 2,512 · score 1.79
23.ruby-oauth / oauth2
🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)
- authentication
- authorization
- oauth2
- oauth2-client
- security
- oidc
- +1 more
+5 stars
from 2,176 · score 1.79
24.lazaronixon / authentication-zero
An authentication system generator for Rails applications.
- rails
- ruby
- authentication
- generator
- rails-authentication
- api
- +3 more
+5 stars
from 1,867 · score 1.79
25.ackama / rails-template
Application template for Rails projects; preloaded with best practices for TDD, security, deployment, and developer productivity.
- rails-template
- template
- rails
- ruby
- ackama
- tooling
+5 stars
from 380 · score 1.79
+4 stars
from 5,679 · score 1.61
27.palkan / action_policy
Authorization framework for Ruby/Rails applications
- rails
- authorization
- ruby
- hacktoberfest
+4 stars
from 1,560 · score 1.61
28.ambethia / recaptcha
ReCaptcha helpers for ruby apps
+3 stars
from 2,003 · score 1.39
29.brunofacca / zen-rails-security-checklist
Checklist of security precautions for Ruby on Rails applications.
- ruby
- ruby-on-rails
- rails
- security
- security-vulnerability
- checklist
+3 stars
from 1,811 · score 1.39
30.claudiob / yt
The reliable YouTube API Ruby client
+3 stars
from 755 · score 1.39
+2 stars
from 1,522 · score 1.10
32.RubyCrypto / rbnacl
Ruby FFI binding to the Networking and Cryptography (NaCl) library (a.k.a. libsodium)
- cryptography
- nacl
- libsodium
- ruby
- x25519
- ed25519
- +2 more
+2 stars
from 984 · score 1.10
33.omniauth / omniauth-github
GitHub strategy for OmniAuth
- omniauth
- omniauth-strategy
- authentication
- github
+2 stars
from 464 · score 1.10
34.thesp0nge / dawnscanner
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
- codereview
- cybersecurity
- ruby
- sinatra
- padrino
- vulnerabilities
- +4 more
+1 stars
from 747 · score 0.69
35.zaru / webpush
webpush, Encryption Utilities for Web Push protocol
- webpush
- service-worker
- notifications
- push-notifications
+1 stars
from 405 · score 0.69
36.kigster / sym
Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)
+1 stars
from 138 · score 0.69