1.hagezi / dns-blocklists
DNS-Blocklists: For a better internet - keep the internet clean!
- dns
- ads
- blacklist
- blocklist
- coins
- domains
- +14 more
+6,057 stars
from 22,096 · score 8.71
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
1–100 of 159 by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
2.megadose / holehe
holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
+4,796 stars
from 10,719 · score 8.48
3.Datalux / Osintgram
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
- osint
- osint-python
- python3
- instagram-api
- penetration-testing
- +7 more
+2,806 stars
from 12,596 · score 7.94
4.sundowndev / phoneinfoga
Information gathering framework for phone numbers
- information-gathering
- phone-number
- osint
- open-source-intelligence
- reconnaissance
- footprint
- +4 more
+2,173 stars
from 16,214 · score 7.68
5.acmesh-official / acme.sh
A pure Unix shell script ACME client for SSL / TLS certificate automation
+1,666 stars
from 46,254 · score 7.42
6.cryptomator / cryptomator
Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.
- cryptomator
- java
- cloud-storage
- cryptography
- crypto
- security
- +2 more
+1,522 stars
from 14,920 · score 7.33
7.rizinorg / cutter
Free and Open Source Reverse Engineering Platform powered by rizin
+1,511 stars
from 18,637 · score 7.32
8.htr-tech / zphisher
An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !
- phishing
- phisher
- phishing-attacks
- htr-tech
- phishing-pages
- zphisher
+1,418 stars
from 15,714 · score 7.26
9.dnSpyEx / dnSpy
Unofficial revival of the well known .NET debugger and assembly editor, dnSpy
+1,329 stars
from 10,091 · score 7.19
10.MobSF / Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
- mobile-security
- windows-mobile-security
- +13 more
+1,302 stars
from 20,819 · score 7.17
11.BishopFox / sliver
Adversary Emulation Framework
- security-tools
- implant
- golang
- dns-server
- http
- c2
- +9 more
+1,177 stars
from 11,049 · score 7.07
12.CISOfy / lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
- shell
- linux
- pci-dss
- compliance
- security-audit
- security-hardening
- +14 more
+1,100 stars
from 15,523 · score 7.00
13.digininja / DVWA
Damn Vulnerable Web Application (DVWA)
+1,021 stars
from 12,941 · score 6.93
14.Mebus / cupp
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
- password-strength
- weak-passwords
+762 stars
from 5,856 · score 6.64
15.tutao / tutanota
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
- javascript
- mithril
- encryption
- tutanota
- security
- +1 more
+663 stars
from 7,447 · score 6.50
16.AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity
- exploit
- hacking
- +14 more
+644 stars
from 5,780 · score 6.47
17.telekom-security / tpotce
🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
+633 stars
from 9,062 · score 6.45
18.s0md3v / Photon
Incredibly fast crawler designed for OSINT.
+555 stars
from 12,763 · score 6.32
19.lanmaster53 / recon-ng
Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
+530 stars
from 5,506 · score 6.27
20.screetsec / TheFatRat
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
- thefatrat
- bypass
- linux
- autorun
- bypass-av
- antivirus
- +14 more
+497 stars
from 11,080 · score 6.21
21.sensepost / objection
📱 objection - runtime mobile exploration
+475 stars
from 9,006 · score 6.17
22.wifiphisher / wifiphisher
The Rogue Access Point Framework
- wifiphisher
- wifi
- rogue
- access-point
- python
- security
- +4 more
+451 stars
from 14,486 · score 6.11
23.s0md3v / XSStrike
Most advanced XSS scanner.
- xss
- xss-scanner
- xss-exploit
- xss-bruteforce
- xss-python
- xss-detection
- +2 more
+402 stars
from 14,837 · score 6.00
+389 stars
from 9,592 · score 5.97
25.x64dbg / ScyllaHide
Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide
+312 stars
from 4,063 · score 5.75
26.extremecoders-re / pyinstxtractor
PyInstaller Extractor
- python
- pyinstaller
- decompile
- reverse-engineering
- pyinstaller-extractor
- python-decompiler
- +2 more
+290 stars
from 4,228 · score 5.67
27.beelzebub-labs / beelzebub
A secure low code deception runtime framework, leveraging AI for System Virtualization.
- cybersecurity
- security
- honeypot
- framework
- go
- research-project
- +14 more
+267 stars
from 1,963 · score 5.59
28.Konloch / bytecode-viewer
A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
- java-decompiler
- apk
- java
- procyon
- cfr
- fernflower
- +14 more
+264 stars
from 15,441 · score 5.58
29.sbondCo / Watcharr
Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.
+249 stars
from 1,333 · score 5.52
30.future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
+247 stars
from 12,077 · score 5.51
+239 stars
from 14,988 · score 5.48
32.ivre / ivre
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
- bro
- scans
- nmap
- network
- network-discovery
- scan-ports
- +14 more
+205 stars
from 3,989 · score 5.33
33.authpass / authpass
AuthPass - Password Manager based on Flutter for all platforms. Keepass 2.x (KDBX 3 and KDBX 4) compatible.
- flutter
- password-manager
- password-store
- android
- macos-application
- flutter-apps
- +14 more
+198 stars
from 2,611 · score 5.29
34.wolfSSL / wolfssl
The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.
- ssl
- tls
- cryptography
- security
- openssl
- tls13
- +14 more
+187 stars
from 2,797 · score 5.24
35.WithSecureOpenSource / chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
- attack
- rust
- security
- threat-hunting
- blueteam
- chainsaw
- +7 more
+185 stars
from 3,520 · score 5.23
+175 stars
from 10,449 · score 5.17
37.guardicore / monkey
Infection Monkey - An open-source adversary emulation platform
- penetration-testing
- security-tools
- security-automation
- infection-monkey
- adversary-emulation
+160 stars
from 6,962 · score 5.08
38.ElevenPaths / FOCA
Tool to find metadata and hidden information in the documents.
+158 stars
from 3,504 · score 5.07
39.txthinking / brook
A cross-platform programmable network tool
+157 stars
from 15,034 · score 5.06
40.m0bilesecurity / RMS-Runtime-Mobile-Security
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
- mobile-security
- android-security
- frida
- reverse-engineering
- ios-security
+155 stars
from 2,984 · score 5.05
41.dyc3 / steamguard-cli
A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.
+143 stars
from 939 · score 4.97
42.linuxserver / docker-swag
Nginx webserver and reverse proxy with php support and a built-in Certbot (Let's Encrypt) client. It also contains fail2ban for intrusion prevention.
- hacktoberfest
+133 stars
from 3,621 · score 4.90
43.codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
- security-audit
- security-tools
- +14 more
+128 stars
from 3,243 · score 4.86
44.activecm / rita
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
- cyber-security
- network-traffic-analysis
- +10 more
+120 stars
from 547 · score 4.80
45.jassics / cybersecurity-roadmap
Skills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelines
- security-tools
- security-automation
- aws-security
- cloud-security
- network-security
- devsecops
- +10 more
+117 stars
from 393 · score 4.77
46.cynicsketch / nix-mineral
Conveniently and reasonably harden NixOS.
+104 stars
from 472 · score 4.65
+101 stars
from 1,354 · score 4.62
48.nilsteampassnet / TeamPass
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
- php
- access-control
- audit
- browser-extension
- compliance
- credentials
- +14 more
+100 stars
from 1,780 · score 4.62
+100 stars
from 1,187 · score 4.62
50.sbousseaden / EVTX-ATTACK-SAMPLES
Windows Events Attack Samples
- threat-hunting
- evtx
- windows-security
- mitre-attack
- detection-engineering
- dataset
- +2 more
+98 stars
from 2,544 · score 4.60
51.vsys-host / shkeeper.io
SHKeeper is a self-hosted and open-source cryptocurrency gateway payment processor. It's integrate with popular CMS, any e-commerce, your own code or product
- accept-crypto
- accept-crypto-payments
- crypto
- crypto-gateway
- crypto-payment
- crypto-payment-api
- +14 more
+92 stars
from 546 · score 4.53
52.Greenwolf / social_mapper
A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)
+91 stars
from 4,000 · score 4.52
53.hashtopolis / server
Hashtopolis - distributed password cracking with Hashcat
- cracking
- distributed
- hashcat
- pentesting
- passwords
- hashtopussy
- +8 more
+90 stars
from 1,737 · score 4.51
54.epinna / tplmap
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
+89 stars
from 4,126 · score 4.50
55.objective-see / BlockBlock
BlockBlock provides continual protection by monitoring persistence locations.
+88 stars
from 787 · score 4.49
56.odedshimon / BruteShark
Network Analysis Tool
- hacking
- pcap-files
- pcap
- cyber
- network-analysis
- hashcat
- +11 more
+86 stars
from 3,328 · score 4.47
57.a0rtega / pafishArchived
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
- malware
- reverse-engineering
- virtual-machine
- malware-families
- analysis-environments
- sandbox
- +3 more
+78 stars
from 3,867 · score 4.37
58.ev-flow / quark-engine
The repository host gives no description.
- defcon
- android
- blackhat
- blackbox
- malware-analysis
- malware-detection
+77 stars
from 1,661 · score 4.36
+74 stars
from 4,255 · score 4.32
60.aquasecurity / cloudsploit
Cloud Security Posture Management (CSPM)
- aws
- security
- security-audit
- cloud
- azure
- cspm
- +5 more
+74 stars
from 3,715 · score 4.32
61.traggo / server
self-hosted tag-based time tracking
- golang
- selfhosted
- freesoftware
- privacy
- self-hosted
- timetracking
- +2 more
+74 stars
from 1,566 · score 4.32
62.fkie-cad / friTap
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
- frida
- ssl
- security
- hooking
- network-analysis
- network-forensics
- +11 more
+72 stars
from 493 · score 4.29
63.OneKeePass / desktop
A secure password manager for macOS,Linux and Windows platforms
+72 stars
from 446 · score 4.29
+70 stars
from 7,360 · score 4.26
+70 stars
from 3,731 · score 4.26
66.CaringCaribou / caringcaribou
A friendly car security exploration tool for the CAN bus
+66 stars
from 902 · score 4.20
67.vw2x / Mira
Mobile runtime detection workbench for AI (iOS and Android)
- frida
- reverse-engineering
- android-security-tools
- frida-gadget
- ios-security-tool
- mcp-client
- +3 more
+65 stars
from 42 · score 4.19
68.GeiserX / VPN-Bypass
macOS menu-bar app for fine-grained VPN routing: bypass the VPN for chosen domains/services, force others through it, or (Custom mode) route each domain/subnet out a specific egress — direct, a specific VPN, an HTTP/SOCKS5 proxy, or a Tailscale peer. Includes a vpnb CLI.
- macos
- menu-bar-app
- networking
- split-tunneling
- vpn
- cisco
- +14 more
+64 stars
from 70 · score 4.17
+62 stars
from 2,082 · score 4.14
70.cliffe / SecGen
Create randomly insecure VMs
- security
- security-vulnerability
- virtualization
- randomization
- provisioning
- labs
- +2 more
+59 stars
from 2,742 · score 4.09
71.nil0x42 / phpsploit
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
- hacktool
- blackhat
- +12 more
+57 stars
from 2,448 · score 4.06
72.SpiderLabs / ResponderArchived
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
+50 stars
from 4,840 · score 3.93
+50 stars
from 3,496 · score 3.93
74.PlumHound / PlumHound
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
- bloodhound
- bloodhoundad
- +14 more
+50 stars
from 1,284 · score 3.93
75.sans-blue-team / DeepBlueCLI
The repository host gives no description.
+49 stars
from 2,393 · score 3.91
76.h3xduck / TripleCross
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
+47 stars
from 1,945 · score 3.87
77.r3nt0n / bopscrk
Generate smart and powerful wordlists
- wordlist
- password
- hacking-tool
- password-cracking
- wordlist-generator
- cracking
- +13 more
+47 stars
from 1,076 · score 3.87
78.D4Vinci / elpscrk
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
- elliot
- cupp
- passwords
- hacking-tool
- bruteforce
- brute-force
- +6 more
+47 stars
from 921 · score 3.87
79.evilsocket / xrayArchived
XRay is a tool for recon, mapping and OSINT gathering from public networks.
+45 stars
from 2,291 · score 3.83
80.OneKeePass / mobile
A secure password manager for iOS and Android platforms
+43 stars
from 201 · score 3.78
81.x0rz / phishing_catcher
Phishing catcher using Certstream
- phishing
- threat-intelligence
- certificate-transparency
- osint
- threatintel
+38 stars
from 1,794 · score 3.66
82.l4rm4nd / VoucherVault
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
- coupons
- vouchers
- conventional-commits
- apprise
- asset-manager
- coupon-management-system
- +14 more
+38 stars
from 476 · score 3.66
+37 stars
from 1,117 · score 3.64
84.ahmedkhlief / APT-Hunter
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
- threat-hunting
- purpleteam
- python3
- windows-eventlog
- apt-attacks
- incident-response
- +2 more
+35 stars
from 1,397 · score 3.58
85.RoganDawes / P4wnP1
P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
+34 stars
from 4,352 · score 3.56
86.0xInfection / XSRFProbe
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
- csrf-scanner
- crafted-tokens
- +5 more
+34 stars
from 1,273 · score 3.56
87.bee-san / Name-That-Hash
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
+33 stars
from 1,640 · score 3.53
+32 stars
from 3,903 · score 3.50
+29 stars
from 1,438 · score 3.40
90.ohmybahgosh / RockYou2021.txt
RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!
- wordlist
- rockyou
- rockyou2021
- wordlists
- password-strength
- password-safety
- +5 more
+28 stars
from 994 · score 3.37
91.Alia5 / PiCCANTE
PiCCANTE is a powerful tool for exploring and reversing CAN busses of vehicles, based on Raspberry Pi Pico (any model)
- can
- canbus
- car
- car-hacking
- reverse-engineering
- vehicle
- +2 more
+28 stars
from 75 · score 3.37
92.GoSecure / pyrdp
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
+27 stars
from 1,761 · score 3.33
93.0xInfection / TIDoS-Framework
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
- web-fuzzer
- osint
- +7 more
+25 stars
from 1,844 · score 3.26
94.fwdai / rowel
🔑 Local-first Secrets Manager
- password
- password-manager
- desktop
- credentials
- security
- cipher
- +11 more
+25 stars
from 936 · score 3.26
95.rubysec / bundler-audit
Patch-level verification for Bundler
- bundler-audit
- ruby-advisory-db
- ruby
- dependency-checker
- patch-management
- security
- +2 more
+24 stars
from 2,740 · score 3.22
96.nil0x42 / duplicut
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
+23 stars
from 961 · score 3.18
97.byt3bl33d3r / SILENTTRINITYArchived
An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
- security-tools
- c-sharp
- dotnet
- ironpython
- python3
- red-teams
- +4 more
+19 stars
from 2,328 · score 3.00
98.ronin-rb / ronin
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
+19 stars
from 742 · score 3.00
99.OpenAS2 / OpenAs2App
OpenAS2 is a java-based implementation of the EDIINT AS2 standard. It is intended to be used as a server. It is extremely configurable and supports a wide variety of signing and encryption algorithms.
+19 stars
from 225 · score 3.00
+18 stars
from 720 · score 2.94