Ranked by Attention Score: stars gained over the last 7 complete days
1–100 of 208 by Attention Score · Oct 29, 2026 – Nov 4, 2026 (UTC)
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
An agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its work. Works with Claude Code, Codex, Cursor, Gemini CLI, OpenCode and GitHub Copilot.
Enterprise-grade Shopify Admin API authentication adapter — OAuth 2.0 Client Credentials Grant with automatic token refresh.
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
Hunt down social media accounts by username across social networks
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
Custom apps for the BMW MGU / iDrive 7 head unit (shift lights, virtual dyno, brake and drag timers, G-meter, fault scanner) plus an SDK kit to build and install your own.
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
🕵️♂️ Collect a dossier on a person by username from 6K websites
ALL IN ONE Hacking Tool For Hackers
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
A blade runner for your network. Detects shadow AI agents before they go rogue.
Translated全链哨兵 (Quanlian Shaobing, "full-chain sentinel") is a cybersecurity Agent that integrates Web penetration testing, Android App security testing, iOS APP security toilet, batch targeting for attack and defense, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.
Composio powers 1000+ toolkits, tool search, context management, authentication, and a sandboxed workbench to help you build AI agents that turn intent into action.
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
TranslatedBased on an in-depth REA teardown, a high-fidelity recreation of the official Claude desktop UI. Recreates 30 independent React components and 8 hardcore interaction physics algorithms, and comes with a 3000+ line reverse-engineering analysis manual.
Reverse engineer anything with agents, from app behavior down to native binaries.
.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!
Automated Penetration Testing Agentic Framework Powered by Large Language Models
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
The most comprehensive authentication framework
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
🕵️♂️ All-in-one OSINT tool for analysing any website
A 100% free modern JS SaaS boilerplate (React, NodeJS, Prisma). Full-featured: Auth (email, google, github, slack, MS), Email sending, Background jobs, Landing page, Payments (Stripe, Polar.sh), Shadcn UI, S3 file upload. AI-ready with tailored AGENTS.md, skills, and Claude Code plugin. One cmd deploy. Powered by Wasp full-stack framework.
Catch risky npm dependency changes before they merge.
Socket-based TS/JavaScript API for WhatsApp Web
Exploit chain for PS5 7.00 - 13.60
Offline, encrypted vault for seed phrases, private keys, passwords and API keys. Also used by agents.
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
Program for determining types of files for Windows, Linux and MacOS.
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
Fast passive subdomain enumeration tool.
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 60 Methods
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
Small and highly portable detection tests based on MITRE's ATT&CK.
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
fsociety Hacking Tools Pack – A Penetration Testing Framework
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
Suitable for Android APK reverse engineering analysis
Toggle the iPhone call-recording announcement on/off from a Windows GUI, built on the airlift AirTraffic sandbox escape.
Let's Encrypt/ACME client and library written in Go
Search and browse documents and data; find the people and companies you look for.
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
Firefox user.js for optimal privacy and security. Your favorite browser, but better.
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
Cameradar hacks its way into RTSP videosurveillance cameras
The modern Java bytecode editor
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
Wireless keystroke injection attack platform
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
Open-source agentic security operations platform:
A library for patching, replacing and decorating .NET and Mono methods during runtime
comment engine
Your web application for managing personal data.
A repository of sysmon configuration modules
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
A high performance offensive security tool for reconnaissance and vulnerability scanning
Small set of tools for helping with reverse engineering Linux drivers
High-Fidelity AI-Assisted Deterministic Reverse Engineering FastMCP Server
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
The universe in numbers. Free, open-source calculators for everything countable.
Cover your Mac's screen with a hotkey while AI agents keep running, even with the lid closed. The covered screen glows when Claude Code, Codex or Gemini needs you. Touch ID unlock.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
A rewrite of the old legacy software "depends.exe" in C# for Windows devs to troubleshoot dll load dependencies issues.
Malicious traffic detection system
Keep passwords and other sensitive information out of your chat logs and inboxes.
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
What The Function: your AI agent decompiles games you own into C that compiles to the exact same bytes. Runs locally.
An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.
Go implementation of JSON Web Tokens (JWT).
RetDec is a retargetable machine-code decompiler based on LLVM.
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
A toolset to make a system look as if it was the victim of an APT attack
A fast & densely stored hashmap and hashset
Creates up to a thousand WiFi access points with custom SSIDs.
HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js
Entity Framework Core Power Tools - reverse engineering, migrations and model visualization in Visual Studio & CLI
Optimized C library for EC operations on curve secp256k1
A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
:key: Hash type identifier (CLI & lib)
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
Auditable & minimal JS implementation of public-key post-quantum cryptography