1.FiloSottile / age
A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
- built-at-rc
- age-encryption
+97 stars
from 24,115 · score 4.58
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
22 repositories by Attention Score · Oct 30, 2026 – Nov 5, 2026 (UTC)
2.kgretzky / evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
+30 stars
from 15,803 · score 3.43
3.FiloSottile / mkcert
A simple zero-config tool to make locally trusted development certificates with any names you'd like.
- https
- tls
- certificates
- local-development
- localhost
- root-ca
- +6 more
+28 stars
from 59,805 · score 3.37
+12 stars
from 9,986 · score 2.56
+12 stars
from 3,083 · score 2.56
6.RhinoSecurityLabs / cloudgoat
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
+11 stars
from 3,766 · score 2.48
7.CERT-Polska / Artemis
A modular vulnerability scanner with automatic report generation capabilities.
- artemis
- pentesting
- security
- security-scanner
- security-tools
- vulnerability-detection
- +2 more
+10 stars
from 1,248 · score 2.40
8.Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
- azure
- defender-for-endpoint
- dfir
- kql
- sentinel
- threat-hunting
- +9 more
+8 stars
from 1,763 · score 2.20
+5 stars
from 3,983 · score 1.79
10.EmpireProject / EmpireArchived
Empire is a PowerShell and Python post-exploitation agent.
+3 stars
from 7,847 · score 1.39
11.google / uuid
Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.
- go
- uuid
+3 stars
from 6,152 · score 1.39
12.authlib / authlib
The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.
- oauth
- oauth2
- oidc
- oauth2-server
- oauth2-provider
- openid-connect
- +7 more
+3 stars
from 5,444 · score 1.39
+3 stars
from 2,607 · score 1.39
14.microcosm-cc / bluemonday
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
+2 stars
from 3,729 · score 1.10
15.rod-chapman / SPARKNaCl
SPARK 2014 re-implementation of the TweetNaCl crypto library
+2 stars
from 139 · score 1.10
16.oauthlib / oauthlib
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
- python
- python3
- python-3
- authentication
- library
- oauth
- +10 more
+1 stars
from 2,985 · score 0.69
17.gorilla / csrf
Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒
- csrf-protection
- gorilla
- middleware
- golang
- security
- csrf
- +4 more
+1 stars
from 1,212 · score 0.69
18.nccgroup / featherduster
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
- crypto
- cryptography
- encryption
- security
- python
- cryptanalysis
- +4 more
+1 stars
from 1,140 · score 0.69
19.fportantier / habu
Hacking Toolkit
- network-analysis
- networking
- scapy
- python3
- security-tools
- hacking
- +9 more
+1 stars
from 992 · score 0.69
+1 stars
from 900 · score 0.69
21.tenzir / threatbusArchived
🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
- threat-intelligence
- threatintel
- threat-hunting
- ids
- zeek
- misp
- +7 more
+1 stars
from 270 · score 0.69
22.sharplispers / ironclad
A cryptographic toolkit written in Common Lisp
+1 stars
from 208 · score 0.69