1.mitschud / DirtyFrag
Ephemeral root via the CVE-2026-43284 page-cache exploit
+210 stars
from 748 · score 5.35
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
21 repositories by Attention Score · Oct 29, 2026 – Nov 4, 2026 (UTC)
2.WerWolv / ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
- hex-editor
- reverse-engineering
- ips
- dear-imgui
- disassembler
- analyzer
- +14 more
+121 stars
from 55,629 · score 4.80
3.laramies / theHarvester
E-mails, subdomains and names Harvester - OSINT
+81 stars
from 18,145 · score 4.41
4.aboul3la / Sublist3r
Fast subdomains enumeration tool for penetration testers
+11 stars
from 11,073 · score 2.48
+10 stars
from 6,593 · score 2.40
6.nccgroup / ScoutSuite
Multi-Cloud Security Auditing Tool
+9 stars
from 7,862 · score 2.30
+9 stars
from 4,930 · score 2.30
8.uxmal / reko
Reko is a binary decompiler.
- decompiler
- dotnet
- decompiler-engine
- decompile
- reverse-engineering
- x86
- +7 more
+7 stars
from 2,628 · score 2.08
9.ayoubfaouzi / al-khaser
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
- anti-analysis
- anti-debugging
- anti-sandbox
- anti-vm
- anti-emulation
- code-injection
- +5 more
+6 stars
from 7,169 · score 1.95
10.ossec / ossec-hids
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- hids
- security
- pci-dss
- nist800-53
- ossec
- compliance
- +5 more
+4 stars
from 5,066 · score 1.61
11.lanjelot / patator
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
- pentest
- brute-force
+3 stars
from 3,939 · score 1.39
12.volatilityfoundation / volatilityArchived
An advanced memory forensics framework
- python
- malware
- volatility-framework
- memory
- ram
+2 stars
from 8,053 · score 1.10
+2 stars
from 2,808 · score 1.10
14.jtsylve / LiME
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
+2 stars
from 2,053 · score 1.10
15.kost / dvcs-ripper
Rip web accessible (distributed) version control systems: SVN/GIT/HG...
+2 stars
from 1,790 · score 1.10
+1 stars
from 2,007 · score 0.69
17.mushorg / conpot
ICS/SCADA honeypot
+1 stars
from 1,538 · score 0.69
18.pedramamini / iocextract
Defanged Indicator of Compromise (IOC) Extractor.
- ioc
- indicators-of-compromise
- library
- ioc-extractor
- defang
- threat-intelligence
- +8 more
+1 stars
from 581 · score 0.69
19.iSECPartners / Introspy-Android
Security profiling for blackbox Android
+1 stars
from 490 · score 0.69
20.dwyl / elixir-auth-google
👤Minimalist Google OAuth Authentication for Elixir Apps. Tested, Documented & Maintained. Setup in 5 mins. 🚀
- elixir
- google-api
- auth
- authentication
- oauth
- +1 more
+1 stars
from 290 · score 0.69
21.Cybereason-Public / owLSM
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
- ebpf
- security
- linux-kernel
- linux-security-module
- sigma-rule
+1 stars
from 281 · score 0.69