1.WerWolv / ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
- hex-editor
- reverse-engineering
- ips
- dear-imgui
- disassembler
- analyzer
- +14 more
+1,516 stars
from 54,234 · score 7.32
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
37 repositories by Attention Score · Aug 7, 2026 – Nov 4, 2026 (UTC)
2.laramies / theHarvester
E-mails, subdomains and names Harvester - OSINT
+1,333 stars
from 16,893 · score 7.20
3.ayoubfaouzi / al-khaser
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
- anti-analysis
- anti-debugging
- anti-sandbox
- anti-vm
- anti-emulation
- code-injection
- +5 more
+121 stars
from 7,054 · score 4.80
4.aboul3la / Sublist3r
Fast subdomains enumeration tool for penetration testers
+107 stars
from 10,977 · score 4.68
5.nccgroup / ScoutSuite
Multi-Cloud Security Auditing Tool
+105 stars
from 7,766 · score 4.66
+88 stars
from 4,851 · score 4.49
+69 stars
from 6,534 · score 4.25
8.ossec / ossec-hids
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- hids
- security
- pci-dss
- nist800-53
- ossec
- compliance
- +5 more
+50 stars
from 5,020 · score 3.93
+49 stars
from 2,761 · score 3.91
10.uxmal / reko
Reko is a binary decompiler.
- decompiler
- dotnet
- decompiler-engine
- decompile
- reverse-engineering
- x86
- +7 more
+49 stars
from 2,586 · score 3.91
11.mushorg / conpot
ICS/SCADA honeypot
+37 stars
from 1,502 · score 3.64
12.lanjelot / patator
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
- pentest
- brute-force
+36 stars
from 3,906 · score 3.61
13.jtsylve / LiME
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
+35 stars
from 2,020 · score 3.58
14.volatilityfoundation / volatilityArchived
An advanced memory forensics framework
- python
- malware
- volatility-framework
- memory
- ram
+23 stars
from 8,032 · score 3.18
+21 stars
from 1,910 · score 3.09
16.unipacker / unipacker
Automatic and platform-independent unpacker for Windows binaries based on emulation
- reverse-engineering
- unpacker
- pefile
- windows
- python
- security
- +5 more
+21 stars
from 763 · score 3.09
17.kost / dvcs-ripper
Rip web accessible (distributed) version control systems: SVN/GIT/HG...
+17 stars
from 1,775 · score 2.89
+17 stars
from 861 · score 2.89
19.mentebinaria / readpe
The PE file analysis toolkit
- binary-analysis
- reverse-engineering
- pe-file
- portable-executable
- malware-analysis
- malware-research
+13 stars
from 779 · score 2.64
20.e-ago / bitcracker
BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
- bitlocker
- password-cracker
- cuda
- cryptography
- gpgpu
- windows
- +10 more
+12 stars
from 964 · score 2.56
21.DinoTools / dionaea
Home of the dionaea honeypot
+12 stars
from 807 · score 2.56
22.pedramamini / ThreatIngestor
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
- osint
- dfir
- +12 more
+10 stars
from 921 · score 2.40
23.buffer / thug
Python low-interaction honeyclient
- honeyclient
- client-honeypot
- python
- security-tools
- shellcode
- virustotal
- +1 more
+9 stars
from 1,037 · score 2.30
24.BR903 / ELFkickers
A collection of programs that access and manipulate ELF files.
+7 stars
from 619 · score 2.08
+6 stars
from 479 · score 1.95
26.strazzere / android-lkms
Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
- loadable-kernel-modules
- android-lkms
- emulators
- kernel
- android
- reverse-engineering
+5 stars
from 221 · score 1.79
+3 stars
from 2,005 · score 1.39
28.Cisco-Talos / pyreboxArchived
Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
+3 stars
from 1,681 · score 1.39
29.Cybereason-Public / owLSM
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
- ebpf
- security
- linux-kernel
- linux-security-module
- sigma-rule
+3 stars
from 279 · score 1.39
30.baumschubser / hotpants
HOTP/TOTP one time passwords on java phones (J2ME)
- hotp
- j2me
- j2me-platform
- one-time-pad
- otp
- otp-generator
- +4 more
+3 stars
from 78 · score 1.39
+2 stars
from 395 · score 1.10
32.Samsung / cotopaxi
Set of tools for security testing of Internet of Things devices using specific network IoT protocols
+2 stars
from 361 · score 1.10
33.iSECPartners / Introspy-Android
Security profiling for blackbox Android
+1 stars
from 490 · score 0.69
34.dwyl / elixir-auth-google
👤Minimalist Google OAuth Authentication for Elixir Apps. Tested, Documented & Maintained. Setup in 5 mins. 🚀
- elixir
- google-api
- auth
- authentication
- oauth
- +1 more
+1 stars
from 290 · score 0.69
+1 stars
from 96 · score 0.69
36.zuBux / drydock
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
+1 stars
from 65 · score 0.69
37.cyclone-github / hashgen
hashgen - the blazingly fast hash generator
- cyclone
- generator
- hash
- md5
- ntlm
- bcrypt
- +14 more
+1 stars
from 41 · score 0.69