+1,477 stars
from 37,829 · score 7.30
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
33 repositories by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
2.urbanadventurer / WhatWeb
Next generation web scanner
- security
- web
- scanner
- ruby
- penetration-testing
- kali-linux
- +14 more
+450 stars
from 6,531 · score 6.11
3.wpscanteam / wpscan
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
- wordpress
- wpscan
- security
- security-scanner
- hacking-tool
- scanner
- +2 more
+347 stars
from 9,485 · score 5.85
4.pglombardo / PasswordPusher
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
+270 stars
from 2,972 · score 5.60
5.onetimesecret / onetimesecret
Keep passwords and other sensitive information out of your chat logs and inboxes.
+206 stars
from 2,776 · score 5.33
6.heartcombo / devise
Flexible authentication solution for Rails with Warden.
- rails
- ruby
- authentication
- devise
+94 stars
from 24,259 · score 4.55
7.presidentbeef / brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
- ruby
- rails
- security
- static-analysis
- vulnerabilities
- brakeman
- +3 more
+86 stars
from 7,207 · score 4.47
8.doorkeeper-gem / doorkeeper
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
- doorkeeper
- oauth
- oauth2-provider
- oauth2-server
- ruby-on-rails
- grape
- +4 more
+65 stars
from 5,469 · score 4.19
9.omniauth / omniauth
OmniAuth is a flexible authentication system utilizing Rack middleware.
- omniauth
- authentication
- hacktoberfest
- ruby
+59 stars
from 8,045 · score 4.09
+54 stars
from 1,892 · score 4.01
11.david942j / one_gadget
The best tool for finding one gadget RCE in libc.so.6
+52 stars
from 2,312 · score 3.97
12.noraj / haiti
:key: Hash type identifier (CLI & lib)
- security-tools
- hash
- identify
- digest
- hashing
- security
- +14 more
+48 stars
from 962 · score 3.89
+28 stars
from 5,655 · score 3.37
14.ankane / lockbox
Modern encryption for Ruby and Rails
- encryption
- activerecord
- activestorage
- carrierwave
- mongoid
- libsodium
+25 stars
from 1,586 · score 3.26
15.github / secure_headers
Manages application of security headers with many safe defaults
- secure-headers
- csp
- hsts
- referrer-policy
- rack
- middleware
- +4 more
+24 stars
from 3,208 · score 3.22
16.rubysec / bundler-audit
Patch-level verification for Bundler
- bundler-audit
- ruby-advisory-db
- ruby
- dependency-checker
- patch-management
- security
- +2 more
+24 stars
from 2,740 · score 3.22
17.ruby-oauth / oauth2
🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)
- authentication
- authorization
- oauth2
- oauth2-client
- security
- oidc
- +1 more
+20 stars
from 2,161 · score 3.04
18.ronin-rb / ronin
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
+19 stars
from 742 · score 3.00
+17 stars
from 2,499 · score 2.89
20.palkan / action_policy
Authorization framework for Ruby/Rails applications
- rails
- authorization
- ruby
- hacktoberfest
+17 stars
from 1,547 · score 2.89
21.markets / invisible_captcha
🍯 Unobtrusive and flexible spam protection for Rails apps
+17 stars
from 1,236 · score 2.89
22.lazaronixon / authentication-zero
An authentication system generator for Rails applications.
- rails
- ruby
- authentication
- generator
- rails-authentication
- api
- +3 more
+13 stars
from 1,859 · score 2.64
23.stelligent / cfn_nag
Linting tool for CloudFormation templates
- continuous-testing
- unit-testing
- cloudformation
- aws
- devops
- iam-rules
- +14 more
+13 stars
from 1,299 · score 2.64
24.backup / backup
Easy full stack backup operations on UNIX-like systems.
- backup
- ruby
- database
- s3
- encryption
- slack
- +3 more
+10 stars
from 4,849 · score 2.40
25.lynndylanhurley / devise_token_auth
Token based authentication for Rails JSON APIs. Designed to work with jToker and ng-token-auth.
- devise
- rails
- authentication
- api
- oauth
- omniauth
+10 stars
from 3,560 · score 2.40
+10 stars
from 1,514 · score 2.40
27.ackama / rails-template
Application template for Rails projects; preloaded with best practices for TDD, security, deployment, and developer productivity.
- rails-template
- template
- rails
- ruby
- ackama
- tooling
+10 stars
from 375 · score 2.40
+9 stars
from 1,451 · score 2.30
29.thoughtbot / clearance
Rails authentication with email & password.
- clearance
- ruby
- thoughtbot
- rails
- rails-authentication
- rubygem
+4 stars
from 3,727 · score 1.61
30.RubyCrypto / rbnacl
Ruby FFI binding to the Networking and Cryptography (NaCl) library (a.k.a. libsodium)
- cryptography
- nacl
- libsodium
- ruby
- x25519
- ed25519
- +2 more
+2 stars
from 984 · score 1.10
31.zaru / webpush
webpush, Encryption Utilities for Web Push protocol
- webpush
- service-worker
- notifications
- push-notifications
+2 stars
from 404 · score 1.10
32.thesp0nge / dawnscanner
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
- codereview
- cybersecurity
- ruby
- sinatra
- padrino
- vulnerabilities
- +4 more
+1 stars
from 747 · score 0.69
33.enjaku4 / rabarber
Simple role-based authorization library for Ruby on Rails
- authorization
- gem
- multitenancy
- rails
- rbac
- roles
- +3 more
+1 stars
from 188 · score 0.69