1.hagezi / dns-blocklists
DNS-Blocklists: For a better internet - keep the internet clean!
- dns
- ads
- blacklist
- blocklist
- coins
- domains
- +14 more
+268 stars
from 27,885 · score 5.59
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
1–100 of 107 by Attention Score · Oct 28, 2026 – Nov 3, 2026 (UTC)
2.hevnsnt / CVEngine
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
- ai
- attack-surface-management
- bbot
- cybersecurity
- mcp
- nmap
- +2 more
+149 stars
from 421 · score 5.01
3.Datalux / Osintgram
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
- osint
- osint-python
- python3
- instagram-api
- penetration-testing
- +7 more
+137 stars
from 15,265 · score 4.93
4.EthanArbuckle / fairplay-decrypt
Offline FairPlay App Store IPA decryption with independent key derivation
+130 stars
from 2,211 · score 4.88
5.angusdevgo / Seep-Reverse-Lab
Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.
+126 stars
from 1,921 · score 4.84
6.sanjayadanushka712 / Ghost-Night
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation
- obfs4
- security-testing
- +1 more
+122 stars
from 8 · score 4.81
7.megadose / holehe
holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
+95 stars
from 15,420 · score 4.56
8.sundowndev / phoneinfoga
Information gathering framework for phone numbers
- information-gathering
- phone-number
- osint
- open-source-intelligence
- reconnaissance
- footprint
- +4 more
+86 stars
from 18,301 · score 4.47
9.cryptomator / cryptomator
Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.
- cryptomator
- java
- cloud-storage
- cryptography
- crypto
- security
- +2 more
+77 stars
from 16,365 · score 4.36
10.dnSpyEx / dnSpy
Unofficial revival of the well known .NET debugger and assembly editor, dnSpy
+68 stars
from 11,352 · score 4.23
11.MobSF / Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
- mobile-security
- windows-mobile-security
- +13 more
+65 stars
from 22,056 · score 4.19
12.tutao / tutanota
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
- javascript
- mithril
- encryption
- tutanota
- security
- +1 more
+60 stars
from 8,050 · score 4.11
13.digininja / DVWA
Damn Vulnerable Web Application (DVWA)
+55 stars
from 13,907 · score 4.03
14.acmesh-official / acme.sh
A pure Unix shell script ACME client for SSL / TLS certificate automation
+53 stars
from 47,867 · score 3.99
15.CISOfy / lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
- shell
- linux
- pci-dss
- compliance
- security-audit
- security-hardening
- +14 more
+53 stars
from 16,570 · score 3.99
16.telekom-security / tpotce
🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
+43 stars
from 9,652 · score 3.78
17.rizinorg / cutter
Free and Open Source Reverse Engineering Platform powered by rizin
+41 stars
from 20,107 · score 3.74
18.htr-tech / zphisher
An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !
- phishing
- phisher
- phishing-attacks
- htr-tech
- phishing-pages
- zphisher
+41 stars
from 17,091 · score 3.74
19.BishopFox / sliver
Adversary Emulation Framework
- security-tools
- implant
- golang
- dns-server
- http
- c2
- +9 more
+41 stars
from 12,185 · score 3.74
20.sbondCo / Watcharr
Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.
+25 stars
from 1,557 · score 3.26
21.Mebus / cupp
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
- password-strength
- weak-passwords
+16 stars
from 6,602 · score 2.83
22.lanmaster53 / recon-ng
Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
+15 stars
from 6,021 · score 2.77
23.LINGYK352 / Watchtower
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
- ai-agents
- attack-surface-management
- docker
- penetration-testing
- python
- security-assessment
- +4 more
+15 stars
from 173 · score 2.77
24.sensepost / objection
📱 objection - runtime mobile exploration
+14 stars
from 9,467 · score 2.71
25.x64dbg / ScyllaHide
Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide
+14 stars
from 4,361 · score 2.71
26.s0md3v / Photon
Incredibly fast crawler designed for OSINT.
+13 stars
from 13,305 · score 2.64
27.future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
+12 stars
from 12,312 · score 2.56
28.AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity
- exploit
- hacking
- +14 more
+12 stars
from 6,412 · score 2.56
29.nilsteampassnet / TeamPass
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
- php
- access-control
- audit
- browser-extension
- compliance
- credentials
- +14 more
+12 stars
from 1,868 · score 2.56
30.wifiphisher / wifiphisher
The Rogue Access Point Framework
- wifiphisher
- wifi
- rogue
- access-point
- python
- security
- +4 more
+11 stars
from 14,926 · score 2.48
31.screetsec / TheFatRat
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
- thefatrat
- bypass
- linux
- autorun
- bypass-av
- antivirus
- +14 more
+11 stars
from 11,566 · score 2.48
+9 stars
from 9,972 · score 2.30
33.beelzebub-labs / beelzebub
A secure low code deception runtime framework, leveraging AI for System Virtualization.
- cybersecurity
- security
- honeypot
- framework
- go
- research-project
- +14 more
+9 stars
from 2,221 · score 2.30
34.Konloch / bytecode-viewer
A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
- java-decompiler
- apk
- java
- procyon
- cfr
- fernflower
- +14 more
+8 stars
from 15,697 · score 2.20
+8 stars
from 15,219 · score 2.20
36.guardicore / monkey
Infection Monkey - An open-source adversary emulation platform
- penetration-testing
- security-tools
- security-automation
- infection-monkey
- adversary-emulation
+8 stars
from 7,114 · score 2.20
37.aquasecurity / cloudsploit
Cloud Security Posture Management (CSPM)
- aws
- security
- security-audit
- cloud
- azure
- cspm
- +5 more
+7 stars
from 3,782 · score 2.08
38.dyc3 / steamguard-cli
A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.
+7 stars
from 1,075 · score 2.08
39.ibericode / koko-analytics
Privacy-friendly, open-source analytics for WordPress — GDPR compliant, cookieless, and fast
+7 stars
from 399 · score 2.08
40.Zibbp / ganymede
Twitch VOD and Live Stream archiving platform. Includes a rendered and real-time chat for each archive.
- archive
- archived
- chat
- streaming
- twitch
- vod
- +4 more
+6 stars
from 1,018 · score 1.95
41.ivre / ivre
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
- bro
- scans
- nmap
- network
- network-discovery
- scan-ports
- +14 more
+5 stars
from 4,189 · score 1.79
+5 stars
from 1,282 · score 1.79
43.securityfirst / Umbrella_android
Open source Android, iOS and Web app for learning about and managing digital and physical security. From how to send a secure message to dealing with a kidnap. Umbrella has best practice guides in over 40 topics in multiple languages. Used daily by people working in high risk countries - journalists, activists, diplomats, business travelers etc.
+5 stars
from 294 · score 1.79
+4 stars
from 7,426 · score 1.61
45.extremecoders-re / pyinstxtractor
PyInstaller Extractor
- python
- pyinstaller
- decompile
- reverse-engineering
- pyinstaller-extractor
- python-decompiler
- +2 more
+4 stars
from 4,514 · score 1.61
+4 stars
from 3,542 · score 1.61
47.odedshimon / BruteShark
Network Analysis Tool
- hacking
- pcap-files
- pcap
- cyber
- network-analysis
- hashcat
- +11 more
+4 stars
from 3,410 · score 1.61
48.codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
- security-audit
- security-tools
- +14 more
+4 stars
from 3,367 · score 1.61
49.m0bilesecurity / RMS-Runtime-Mobile-Security
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
- mobile-security
- android-security
- frida
- reverse-engineering
- ios-security
+4 stars
from 3,135 · score 1.61
50.wolfSSL / wolfssl
The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.
- ssl
- tls
- cryptography
- security
- openssl
- tls13
- +14 more
+4 stars
from 2,980 · score 1.61
51.nil0x42 / phpsploit
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
- hacktool
- blackhat
- +12 more
+4 stars
from 2,501 · score 1.61
52.evilsocket / xrayArchived
XRay is a tool for recon, mapping and OSINT gathering from public networks.
+4 stars
from 2,332 · score 1.61
53.hashtopolis / server
Hashtopolis - distributed password cracking with Hashcat
- cracking
- distributed
- hashcat
- pentesting
- passwords
- hashtopussy
- +8 more
+4 stars
from 1,823 · score 1.61
54.fwdai / rowel
🔑 Local-first Secrets Manager
- password
- password-manager
- desktop
- credentials
- security
- cipher
- +11 more
+4 stars
from 957 · score 1.61
55.OneKeePass / desktop
A secure password manager for macOS,Linux and Windows platforms
+4 stars
from 514 · score 1.61
56.jassics / cybersecurity-roadmap
Skills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelines
- security-tools
- security-automation
- aws-security
- cloud-security
- network-security
- devsecops
- +10 more
+4 stars
from 506 · score 1.61
57.Alia5 / PiCCANTE
PiCCANTE is a powerful tool for exploring and reversing CAN busses of vehicles, based on Raspberry Pi Pico (any model)
- can
- canbus
- car
- car-hacking
- reverse-engineering
- vehicle
- +2 more
+4 stars
from 99 · score 1.61
58.linuxserver / docker-swag
Nginx webserver and reverse proxy with php support and a built-in Certbot (Let's Encrypt) client. It also contains fail2ban for intrusion prevention.
- hacktoberfest
+3 stars
from 3,751 · score 1.39
59.WithSecureOpenSource / chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
- attack
- rust
- security
- threat-hunting
- blueteam
- chainsaw
- +7 more
+3 stars
from 3,702 · score 1.39
60.authpass / authpass
AuthPass - Password Manager based on Flutter for all platforms. Keepass 2.x (KDBX 3 and KDBX 4) compatible.
- flutter
- password-manager
- password-store
- android
- macos-application
- flutter-apps
- +14 more
+3 stars
from 2,806 · score 1.39
61.cliffe / SecGen
Create randomly insecure VMs
- security
- security-vulnerability
- virtualization
- randomization
- provisioning
- labs
- +2 more
+3 stars
from 2,798 · score 1.39
62.ev-flow / quark-engine
The repository host gives no description.
- defcon
- android
- blackhat
- blackbox
- malware-analysis
- malware-detection
+3 stars
from 1,735 · score 1.39
+3 stars
from 1,452 · score 1.39
64.CaringCaribou / caringcaribou
A friendly car security exploration tool for the CAN bus
+3 stars
from 965 · score 1.39
65.D4Vinci / elpscrk
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
- elliot
- cupp
- passwords
- hacking-tool
- bruteforce
- brute-force
- +6 more
+3 stars
from 965 · score 1.39
66.liudf0716 / apfree-wifidog
Translatedapfree-wifidog is a high-performance captive portal solution that serves as a gateway between your wireless networks and the Internet. Optimized for both HTTP and HTTPS traffic, it ensures secure border control while enabling seamless user authentication and efficient network management. Buy the services in the link below to support my open source work.
- openwrt
- libevent
- c
- wifidog
- wifi
- captive-portal
- +1 more
+3 stars
from 938 · score 1.39
67.vsys-host / shkeeper.io
SHKeeper is a self-hosted and open-source cryptocurrency gateway payment processor. It's integrate with popular CMS, any e-commerce, your own code or product
- accept-crypto
- accept-crypto-payments
- crypto
- crypto-gateway
- crypto-payment
- crypto-payment-api
- +14 more
+3 stars
from 635 · score 1.39
68.cynicsketch / nix-mineral
Conveniently and reasonably harden NixOS.
+3 stars
from 573 · score 1.39
69.akamai-threat-research / mqtt-pwn
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- python
- mqtt
- mqtt-broker
- mqtt-client
- iot
- exploitation
- +1 more
+3 stars
from 453 · score 1.39
70.s0md3v / XSStrike
Most advanced XSS scanner.
- xss
- xss-scanner
- xss-exploit
- xss-bruteforce
- xss-python
- xss-detection
- +2 more
+2 stars
from 15,237 · score 1.10
71.a0rtega / pafishArchived
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
- malware
- reverse-engineering
- virtual-machine
- malware-families
- analysis-environments
- sandbox
- +3 more
+2 stars
from 3,943 · score 1.10
+2 stars
from 3,933 · score 1.10
73.h3xduck / TripleCross
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
+2 stars
from 1,990 · score 1.10
74.x0rz / phishing_catcher
Phishing catcher using Certstream
- phishing
- threat-intelligence
- certificate-transparency
- osint
- threatintel
+2 stars
from 1,830 · score 1.10
75.traggo / server
self-hosted tag-based time tracking
- golang
- selfhosted
- freesoftware
- privacy
- self-hosted
- timetracking
- +2 more
+2 stars
from 1,638 · score 1.10
76.PlumHound / PlumHound
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
- bloodhound
- bloodhoundad
- +14 more
+2 stars
from 1,332 · score 1.10
77.AndroBugs / AndroBugs_FrameworkArchived
AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.
+2 stars
from 1,225 · score 1.10
+2 stars
from 1,152 · score 1.10
79.schutzwerk / CANalyzat0r
Security analysis toolkit for proprietary car protocols
- carhacking
- automotive-security
- reverse-engineering
+2 stars
from 793 · score 1.10
80.fkie-cad / friTap
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
- frida
- ssl
- security
- hooking
- network-analysis
- network-forensics
- +11 more
+2 stars
from 563 · score 1.10
81.kpcyrd / authoscope
Scriptable network authentication cracker
- rust
- cracking
- lua
- dictionary-attack
- concurrency
- password
- +2 more
+2 stars
from 420 · score 1.10
82.OpenAS2 / OpenAs2App
OpenAS2 is a java-based implementation of the EDIINT AS2 standard. It is intended to be used as a server. It is extremely configurable and supports a wide variety of signing and encryption algorithms.
+2 stars
from 242 · score 1.10
83.Greenwolf / social_mapper
A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)
+1 stars
from 4,090 · score 0.69
84.bitwarden / desktopArchived
The desktop vault (Windows, macOS, & Linux).
+1 stars
from 3,526 · score 0.69
85.0xInfection / TIDoS-Framework
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
- web-fuzzer
- osint
- +7 more
+1 stars
from 1,868 · score 0.69
86.iGio90 / Dwarf
Full featured multi arch/os debugger built on top of PyQt5 and frida
- frida
- pyqt5
- reverse-engineering
- cracking
- unicorn-emulator
- capstone-engine
- +5 more
+1 stars
from 1,320 · score 0.69
87.P3GLEG / Whaler
Program to reverse Docker images into Dockerfiles
- security-tools
- security
- docker-security
- reverse-engineering
- docker-image
- dockerfile
- +2 more
+1 stars
from 1,195 · score 0.69
88.snovvcrash / usbripArchived
Tracking history of USB events on GNU/Linux
+1 stars
from 1,184 · score 0.69
89.Abacus-Group-RTO / legionArchived
Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
+1 stars
from 1,054 · score 0.69
+1 stars
from 1,042 · score 0.69
91.StamusNetworks / scirius
Scirius is a web application for Suricata ruleset management and threat hunting.
- python
- security
- management
- interface
- suricata
- signatures
- +8 more
+1 stars
from 685 · score 0.69
92.activecm / rita
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
- cyber-security
- network-traffic-analysis
- +10 more
+1 stars
from 666 · score 0.69
93.l4rm4nd / VoucherVault
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
- coupons
- vouchers
- conventional-commits
- apprise
- asset-manager
- coupon-management-system
- +14 more
+1 stars
from 513 · score 0.69
94.mushorg / snare
Super Next generation Advanced Reactive honEypot
+1 stars
from 486 · score 0.69
95.spieglt / Cloaker
Simple, drag-and-drop, password-based file encryption
- encryption-utility
- cross-platform
- encryption
- gui
- drag-and-drop
- simple
- +2 more
+1 stars
from 441 · score 0.69
96.SUPERAndroidAnalyzer / superArchived
Secure, Unified, Powerful and Extensible Rust Android Analyzer
+1 stars
from 427 · score 0.69
97.WangYihang / Webshell-Sniper
:hammer: Manage your website via terminal
- php
- security-tools
- python
- pentest
- webshell-sniper
- webshell
+1 stars
from 424 · score 0.69
98.monnappa22 / Limon
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
+1 stars
from 405 · score 0.69
99.andreiverse / gorilla
tool for generating wordlists or extending an existing one using mutations.
+1 stars
from 390 · score 0.69
100.clem9669 / wordlists
Various wordlists FR & EN - Cracking French passwords
+1 stars
from 328 · score 0.69