1.WerWolv / ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
- hex-editor
- reverse-engineering
- ips
- dear-imgui
- disassembler
- analyzer
- +14 more
+2,584 stars
from 53,166 · score 7.86
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
41 repositories by Attention Score · May 9, 2026 – Nov 4, 2026 (UTC)
2.laramies / theHarvester
E-mails, subdomains and names Harvester - OSINT
+2,199 stars
from 16,027 · score 7.70
3.ayoubfaouzi / al-khaser
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
- anti-analysis
- anti-debugging
- anti-sandbox
- anti-vm
- anti-emulation
- code-injection
- +5 more
+281 stars
from 6,894 · score 5.64
4.nccgroup / ScoutSuite
Multi-Cloud Security Auditing Tool
+256 stars
from 7,615 · score 5.55
5.aboul3la / Sublist3r
Fast subdomains enumeration tool for penetration testers
+255 stars
from 10,829 · score 5.55
+182 stars
from 4,757 · score 5.21
+155 stars
from 6,448 · score 5.05
+110 stars
from 2,700 · score 4.71
9.ossec / ossec-hids
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- hids
- security
- pci-dss
- nist800-53
- ossec
- compliance
- +5 more
+102 stars
from 4,968 · score 4.63
10.volatilityfoundation / volatilityArchived
An advanced memory forensics framework
- python
- malware
- volatility-framework
- memory
- ram
+94 stars
from 7,961 · score 4.55
11.uxmal / reko
Reko is a binary decompiler.
- decompiler
- dotnet
- decompiler-engine
- decompile
- reverse-engineering
- x86
- +7 more
+89 stars
from 2,546 · score 4.50
12.lanjelot / patator
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
- pentest
- brute-force
+87 stars
from 3,855 · score 4.48
13.jtsylve / LiME
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
+84 stars
from 1,971 · score 4.44
14.mushorg / conpot
ICS/SCADA honeypot
+76 stars
from 1,463 · score 4.34
+39 stars
from 839 · score 3.69
16.unipacker / unipacker
Automatic and platform-independent unpacker for Windows binaries based on emulation
- reverse-engineering
- unpacker
- pefile
- windows
- python
- security
- +5 more
+35 stars
from 749 · score 3.58
+34 stars
from 1,897 · score 3.56
18.DinoTools / dionaea
Home of the dionaea honeypot
+29 stars
from 790 · score 3.40
19.e-ago / bitcracker
BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
- bitlocker
- password-cracker
- cuda
- cryptography
- gpgpu
- windows
- +10 more
+27 stars
from 949 · score 3.33
20.kost / dvcs-ripper
Rip web accessible (distributed) version control systems: SVN/GIT/HG...
+26 stars
from 1,766 · score 3.30
21.pedramamini / ThreatIngestor
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
- osint
- dfir
- +12 more
+26 stars
from 905 · score 3.30
22.mentebinaria / readpe
The PE file analysis toolkit
- binary-analysis
- reverse-engineering
- pe-file
- portable-executable
- malware-analysis
- malware-research
+22 stars
from 770 · score 3.14
23.Cybereason-Public / owLSM
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
- ebpf
- security
- linux-kernel
- linux-security-module
- sigma-rule
+22 stars
from 260 · score 3.14
24.buffer / thug
Python low-interaction honeyclient
- honeyclient
- client-honeypot
- python
- security-tools
- shellcode
- virustotal
- +1 more
+19 stars
from 1,027 · score 3.00
+13 stars
from 1,995 · score 2.64
26.Cisco-Talos / pyreboxArchived
Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
+11 stars
from 1,673 · score 2.48
27.pedramamini / iocextract
Defanged Indicator of Compromise (IOC) Extractor.
- ioc
- indicators-of-compromise
- library
- ioc-extractor
- defang
- threat-intelligence
- +8 more
+7 stars
from 575 · score 2.08
+7 stars
from 478 · score 2.08
+7 stars
from 390 · score 2.08
30.baumschubser / hotpants
HOTP/TOTP one time passwords on java phones (J2ME)
- hotp
- j2me
- j2me-platform
- one-time-pad
- otp
- otp-generator
- +4 more
+7 stars
from 74 · score 2.08
31.iSECPartners / Introspy-Android
Security profiling for blackbox Android
+6 stars
from 485 · score 1.95
+4 stars
from 191 · score 1.61
33.rafael-santiago / pig
A Linux packet crafting tool.
- packet-crafting
- networking
- hacking-tool
- intrusion-prevention
- forensics
- network-analysis
- +6 more
+3 stars
from 474 · score 1.39
34.Samsung / cotopaxi
Set of tools for security testing of Internet of Things devices using specific network IoT protocols
+3 stars
from 360 · score 1.39
35.dwyl / elixir-auth-google
👤Minimalist Google OAuth Authentication for Elixir Apps. Tested, Documented & Maintained. Setup in 5 mins. 🚀
- elixir
- google-api
- auth
- authentication
- oauth
- +1 more
+3 stars
from 288 · score 1.39
36.cyclone-github / hashgen
hashgen - the blazingly fast hash generator
- cyclone
- generator
- hash
- md5
- ntlm
- bcrypt
- +14 more
+2 stars
from 40 · score 1.10
37.mrheinen / lophiidArchived
A hybrid AI honeypot for monitoring large scale web attacks
- grpc-go
- honeypot
- security
- threat-intelligence
- intrusion-detection
- threat-detection
- +5 more
+2 stars
from 27 · score 1.10
+1 stars
from 471 · score 0.69
39.hyc / fcrackzipArchived
A braindead program for cracking encrypted ZIP archives. Forked from http://oldhome.schmorp.de/marc/fcrackzip.html
+1 stars
from 466 · score 0.69
40.504ensicsLabs / DAMMArchived
Differential Analysis of Malware in Memory
+1 stars
from 213 · score 0.69
+1 stars
from 96 · score 0.69