1.mitschud / DirtyFrag
Ephemeral root via the CVE-2026-43284 page-cache exploit
+929 stars
from 29 · score 6.84
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
32 repositories by Attention Score · Oct 6, 2026 – Nov 4, 2026 (UTC)
2.WerWolv / ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
- hex-editor
- reverse-engineering
- ips
- dear-imgui
- disassembler
- analyzer
- +14 more
+810 stars
from 54,940 · score 6.70
3.laramies / theHarvester
E-mails, subdomains and names Harvester - OSINT
+386 stars
from 17,840 · score 5.96
4.nccgroup / ScoutSuite
Multi-Cloud Security Auditing Tool
+43 stars
from 7,828 · score 3.78
5.aboul3la / Sublist3r
Fast subdomains enumeration tool for penetration testers
+38 stars
from 11,046 · score 3.66
6.ayoubfaouzi / al-khaser
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
- anti-analysis
- anti-debugging
- anti-sandbox
- anti-vm
- anti-emulation
- code-injection
- +5 more
+38 stars
from 7,137 · score 3.66
+31 stars
from 4,908 · score 3.47
8.uxmal / reko
Reko is a binary decompiler.
- decompiler
- dotnet
- decompiler-engine
- decompile
- reverse-engineering
- x86
- +7 more
+27 stars
from 2,608 · score 3.33
+19 stars
from 2,791 · score 3.00
+18 stars
from 6,585 · score 2.94
11.jtsylve / LiME
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
+15 stars
from 2,040 · score 2.77
12.ossec / ossec-hids
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- hids
- security
- pci-dss
- nist800-53
- ossec
- compliance
- +5 more
+13 stars
from 5,057 · score 2.64
13.lanjelot / patator
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
- pentest
- brute-force
+12 stars
from 3,930 · score 2.56
14.mushorg / conpot
ICS/SCADA honeypot
+9 stars
from 1,530 · score 2.30
+7 stars
from 1,924 · score 2.08
+7 stars
from 871 · score 2.08
17.kost / dvcs-ripper
Rip web accessible (distributed) version control systems: SVN/GIT/HG...
+6 stars
from 1,786 · score 1.95
18.volatilityfoundation / volatilityArchived
An advanced memory forensics framework
- python
- malware
- volatility-framework
- memory
- ram
+3 stars
from 8,052 · score 1.39
19.DinoTools / dionaea
Home of the dionaea honeypot
+3 stars
from 816 · score 1.39
20.mentebinaria / readpe
The PE file analysis toolkit
- binary-analysis
- reverse-engineering
- pe-file
- portable-executable
- malware-analysis
- malware-research
+3 stars
from 789 · score 1.39
21.unipacker / unipacker
Automatic and platform-independent unpacker for Windows binaries based on emulation
- reverse-engineering
- unpacker
- pefile
- windows
- python
- security
- +5 more
+3 stars
from 781 · score 1.39
+3 stars
from 482 · score 1.39
+2 stars
from 2,006 · score 1.10
24.pedramamini / ThreatIngestor
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
- osint
- dfir
- +12 more
+1 stars
from 930 · score 0.69
25.BR903 / ELFkickers
A collection of programs that access and manipulate ELF files.
+1 stars
from 625 · score 0.69
26.iSECPartners / Introspy-Android
Security profiling for blackbox Android
+1 stars
from 490 · score 0.69
+1 stars
from 396 · score 0.69
28.Samsung / cotopaxi
Set of tools for security testing of Internet of Things devices using specific network IoT protocols
+1 stars
from 362 · score 0.69
29.dwyl / elixir-auth-google
👤Minimalist Google OAuth Authentication for Elixir Apps. Tested, Documented & Maintained. Setup in 5 mins. 🚀
- elixir
- google-api
- auth
- authentication
- oauth
- +1 more
+1 stars
from 290 · score 0.69
30.Cybereason-Public / owLSM
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
- ebpf
- security
- linux-kernel
- linux-security-module
- sigma-rule
+1 stars
from 281 · score 0.69
31.urule99 / jsunpack-n
Automatically exported from code.google.com/p/jsunpack-n
+1 stars
from 169 · score 0.69
32.zuBux / drydock
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
+1 stars
from 65 · score 0.69