1.FiloSottile / age
A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
- built-at-rc
- age-encryption
+1,161 stars
from 23,029 · score 7.06
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
39 repositories by Attention Score · Aug 6, 2026 – Nov 3, 2026 (UTC)
2.FiloSottile / mkcert
A simple zero-config tool to make locally trusted development certificates with any names you'd like.
- https
- tls
- certificates
- local-development
- localhost
- root-ca
- +6 more
+568 stars
from 59,258 · score 6.34
3.kgretzky / evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
+465 stars
from 15,359 · score 6.14
+232 stars
from 9,761 · score 5.45
+126 stars
from 2,966 · score 4.84
6.RhinoSecurityLabs / cloudgoat
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
+96 stars
from 3,676 · score 4.57
7.CERT-Polska / Artemis
A modular vulnerability scanner with automatic report generation capabilities.
- artemis
- pentesting
- security
- security-scanner
- security-tools
- vulnerability-detection
- +2 more
+68 stars
from 1,187 · score 4.23
8.authlib / authlib
The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.
- oauth
- oauth2
- oidc
- oauth2-server
- oauth2-provider
- openid-connect
- +7 more
+66 stars
from 5,382 · score 4.20
9.google / uuid
Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.
- go
- uuid
+56 stars
from 6,095 · score 4.04
+56 stars
from 3,931 · score 4.04
+50 stars
from 2,560 · score 3.93
12.Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
- azure
- defender-for-endpoint
- dfir
- kql
- sentinel
- threat-hunting
- +9 more
+40 stars
from 1,728 · score 3.71
13.microcosm-cc / bluemonday
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
+36 stars
from 3,695 · score 3.61
+33 stars
from 5,873 · score 3.53
15.NodePassProject / nodepass
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
- api-rest
- connection-pooling
- cybersecurity
- devops
- golang
- http2
- +14 more
+27 stars
from 267 · score 3.33
16.pallets / itsdangerous
Safely pass trusted data to untrusted environments and back.
- python
- security
- hmac
- serialization
- itsdangerous
- pallets
+20 stars
from 3,120 · score 3.04
17.harrison314 / BouncyHsm
Bouncy Hsm is a software simulator of HSM and smartcard simulator with HTML UI, REST API and PKCS#11 interface.
- blazor
- blazor-webassembly
- bouncycastle
- cryptography
- csharp
- hsm
- +2 more
+16 stars
from 189 · score 2.83
18.oauthlib / oauthlib
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
- python
- python3
- python-3
- authentication
- library
- oauth
- +10 more
+14 stars
from 2,972 · score 2.71
19.gorilla / csrf
Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒
- csrf-protection
- gorilla
- middleware
- golang
- security
- csrf
- +4 more
+12 stars
from 1,200 · score 2.56
+12 stars
from 888 · score 2.56
21.EmpireProject / EmpireArchived
Empire is a PowerShell and Python post-exploitation agent.
+10 stars
from 7,837 · score 2.40
22.lcobucci / jwt
A simple library to work with JSON Web Token and JSON Web Signature
- php
- jwt
- tokens
- hacktoberfest
+10 stars
from 7,470 · score 2.40
23.fportantier / habu
Hacking Toolkit
- network-analysis
- networking
- scapy
- python3
- security-tools
- hacking
- +9 more
+10 stars
from 982 · score 2.40
+7 stars
from 1,206 · score 2.08
25.lepture / captcha
A captcha library that generates audio and image CAPTCHAs.
+7 stars
from 1,091 · score 2.08
26.nccgroup / featherduster
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
- crypto
- cryptography
- encryption
- security
- python
- cryptanalysis
- +4 more
+6 stars
from 1,135 · score 1.95
27.vericle / intellyweave
AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.
+6 stars
from 72 · score 1.95
28.ssh-vault / ssh-vault
🌰 encrypt/decrypt using ssh keys
- encryption
- aes-256
- ssh
- ssh-keys
- ed25519
- keys
- +3 more
+4 stars
from 507 · score 1.61
+3 stars
from 1,931 · score 1.39
+2 stars
from 548 · score 1.10
31.mindflayer / python-mocket
a socket mock framework - for all kinds of socket animals, web-clients included
+2 stars
from 311 · score 1.10
32.elliotwutingfeng / go-fasttld
go-fasttld is a high performance effective top level domains (eTLD) extraction module.
- compressed-trie
- idn
- idna
- ipv4
- mozilla
- osint
- +13 more
+2 stars
from 39 · score 1.10
+1 stars
from 2,800 · score 0.69
34.alex / letsencrypt-aws
The repository host gives no description.
+1 stars
from 726 · score 0.69
35.mattifestation / CimSweep
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
+1 stars
from 656 · score 0.69
36.kevinburke / nacl
Pure Go implementation of the NaCL set of API's
- golang
- nacl
- security
- secretbox
- curve25519
+1 stars
from 550 · score 0.69
37.google / hiba
HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.
+1 stars
from 389 · score 0.69
38.tenzir / threatbusArchived
🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
- threat-intelligence
- threatintel
- threat-hunting
- ids
- zeek
- misp
- +7 more
+1 stars
from 270 · score 0.69
39.zitadel / passwap
Package passwap provides a unified implementation between different password hashing algorithms. It allows for easy swapping between algorithms, using the same API for all of them.
+1 stars
from 77 · score 0.69