1.soimy / c3rb3r-rescue
Evidence-based DSM ransomware recovery: preservation, RAM key recovery, copy decryption, and GitLab validation.
+327 stars
from 12 · score 5.79
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
63 repositories by Attention Score · Oct 29, 2026 – Nov 4, 2026 (UTC)
+254 stars
from 15 · score 5.54
3.HunxByts / GhostTrack
Useful tool to track location or mobile number
- fyp
- hacking
- hacking-tool
- indonesia
- information
- information-gathering
- +13 more
+203 stars
from 20,216 · score 5.32
4.bbylw / rea-cn
TranslatedREA: Reverse Everything. Through one MCP service, reverse-engineer and analyze binary files, applications, and runtime behavior. See a feature you like, figure out how it works, and dig down to the binary level.
+132 stars
from 684 · score 4.89
5.hashcat / hashcat
World's fastest and most advanced password recovery utility
+96 stars
from 27,171 · score 4.57
6.justcallmekoko / ESP32Marauder
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
+80 stars
from 12,925 · score 4.39
7.mikeroyal / Self-Hosting-Guide
Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.
- self-hosted
- selfhosted
- home-assistant
- wireguard
- decentralized
- self-hosting
- +14 more
+78 stars
from 23,380 · score 4.37
+68 stars
from 92 · score 4.23
9.x86rc / unthemidator
An automated Themida / Code Virtualizer / WinLicense (v3.0-v4) unpacker and dump fixer tool
+48 stars
from 351 · score 3.89
10.9bie / php2shell-bypass-aslr-exp
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
+40 stars
from 1,513 · score 3.71
11.vxunderground / MalwareSourceCode
Collection of malware source code for a variety of platforms in an array of different programming languages.
- malware
- malware-research
- malware-development
- malware-detection
+25 stars
from 18,867 · score 3.26
12.eness / php2shell-CVE-2026-109618-CVE-2026-109619-PoC
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
+25 stars
from 1,042 · score 3.26
13.maurosoria / dirsearch
Web path scanner
+23 stars
from 15,020 · score 3.18
14.trustedsec / social-engineer-toolkit
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
+20 stars
from 15,414 · score 3.04
15.capstone-engine / capstone
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
- reverse-engineering
- disassembler
- security
- framework
- arm
- arm64
- +14 more
+19 stars
from 9,148 · score 3.00
16.Mr-Destroyer / ZimZilla
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
- ai-bug-bounty
- ai-bug-finder
- ai-bug-reporter
- ai-hacking
- bugbounty
- bughunting
- +14 more
+18 stars
from 227 · score 2.94
+17 stars
from 21,935 · score 2.89
18.SwiftOnSecurity / sysmon-config
Sysmon configuration file template with default high-quality event tracing
- sysmon
- threatintel
- threat-hunting
- sysinternals
- windows
- netsec
- +2 more
+11 stars
from 5,714 · score 2.48
19.beefproject / beef
The Browser Exploitation Framework Project
+10 stars
from 11,077 · score 2.40
20.JoasASantos / php2shell-exploit
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
+8 stars
from 186 · score 2.20
21.Anton-Barinov / php2shell-patches
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
- php-fpm
- php5
- +10 more
+8 stars
from 122 · score 2.20
22.sleuthkit / sleuthkit
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
- sleuthkit
- tct
- ntfs
- forensics
- incident-response
+7 stars
from 3,177 · score 2.08
23.RustCrypto / hashes
Collection of cryptographic hash functions written in pure Rust
- cryptographic-hash-functions
- blake2
- gost
- streebog
- groestl
- md2
- +13 more
+7 stars
from 2,281 · score 2.08
24.DFIRKuiper / Kuiper
Digital Forensics Investigation Platform
+6 stars
from 910 · score 1.95
25.x0rz / EQGRP
Decrypted content of eqgrp-auction-file.tar.xz
- exploits
- shadowbrokers
- equationgroup
- hacking
- nsa
- tao
+4 stars
from 4,204 · score 1.61
26.B-Con / crypto-algorithms
Basic implementations of standard cryptography algorithms, like AES and SHA-1.
+4 stars
from 2,050 · score 1.61
27.hashcat / hashcat-utils
Small utilities that are useful in advanced password cracking
+4 stars
from 1,627 · score 1.61
28.fuzzdb-project / fuzzdb
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
+3 stars
from 9,006 · score 1.39
29.epsylon / ufonet
UFONet - Denial of Service Toolkit
- dos
- ddos
- ufonet
- botnet
- disruption
- cryptography
- +1 more
+3 stars
from 2,546 · score 1.39
30.zeustrojancode / ZeusArchived
NOT MY CODE! Zeus trojan horse - leaked in 2011, I am not the author. This repository is for study purposes only, do not message me about your lame hacking attempts.
- c
- c-plus-plus
- malware
- russian
- virus
- leaks
+3 stars
from 1,567 · score 1.39
31.xdreizein666 / getcontact-cli
GetContact CLI adalah project Python untuk melakukan lookup nomor telepon lewat API GetContact, tanpa aplikasi Android dan tanpa browser.
+3 stars
from 802 · score 1.39
32.RustCrypto / signatures
Cryptographic signature algorithms: DSA, ECDSA, Ed25519
- ecdsa
- ed25519
- signatures
- dsa
- rust
+3 stars
from 667 · score 1.39
33.stealthsploit / OneRuleToRuleThemStill
A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule
+3 stars
from 665 · score 1.39
34.sonyxperiadev / ApkAnalyserArchived
The repository host gives no description.
+2 stars
from 1,049 · score 1.10
35.RustCrypto / AEADs
Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers
+2 stars
from 970 · score 1.10
+2 stars
from 915 · score 1.10
37.RustCrypto / elliptic-curves
Collection of pure Rust elliptic curve implementations: NIST P-224, P-256, P-384, P-521, secp256k1, SM2
- ecdsa
- nist
- rust
- schnorr
- taproot
+2 stars
from 879 · score 1.10
+2 stars
from 602 · score 1.10
39.JoasASantos / php2shell-scanner
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
- php
- php-security
- +4 more
+2 stars
from 109 · score 1.10
+1 stars
from 6,624 · score 0.69
41.Security-Onion-Solutions / security-onionArchived
Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
- intrusion-detection
- network-security-monitoring
- log-management
- ids
- nsm
- hunting
- +1 more
+1 stars
from 3,135 · score 0.69
42.christophetd / CloudFlair
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
+1 stars
from 2,984 · score 0.69
43.404labfr / laravel-impersonate
Laravel Impersonate is a plugin that allows you to authenticate as your users.
- laravel-package
- impersonate
- php
- user-management
- laravel
+1 stars
from 2,343 · score 0.69
44.hlandau / acmetool
:lock: acmetool, an automatic certificate acquisition tool for ACME (Let's Encrypt)
- acmetool
- certificate
- acme-server
- acme
- letsencrypt
- ssl
- +2 more
+1 stars
from 2,094 · score 0.69
45.airbus-seclab / bincat
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
- ida-plugin
- taint-analysis
- reverse-engineering
- disassembly
+1 stars
from 1,881 · score 0.69
46.eldraco / domain_analyzer
Analyze the security of any domain by finding all the information possible. Made in python.
+1 stars
from 1,864 · score 0.69
47.trustedsec / hate_crack
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
+1 stars
from 1,864 · score 0.69
48.praetorian-inc / Hob0RulesArchived
Password cracking rules for Hashcat based on statistics and industry patterns
+1 stars
from 1,529 · score 0.69
49.xFFFFF / Gekko-Strategies
Strategies to Gekko trading bot with backtests results and some useful tools.
- gekko
- strategies
- gekko-strategies
- gekko-backtest
- backtest-database
- cryptocurrency
- +14 more
+1 stars
from 1,441 · score 0.69
+1 stars
from 1,224 · score 0.69
+1 stars
from 1,161 · score 0.69
52.miracl / MIRACL
MIRACL Cryptographic SDK: Multiprecision Integer and Rational Arithmetic Cryptographic Library is a C software library that is widely regarded by developers as the gold standard open source SDK for elliptic curve cryptography (ECC).
+1 stars
from 702 · score 0.69
53.GoSecure / dtd-finder
List DTDs and generate XXE payloads using those local DTDs.
- xxe
- dtd
- security
- hacktoberfest
+1 stars
from 664 · score 0.69
+1 stars
from 577 · score 0.69
+1 stars
from 529 · score 0.69
56.dashbitco / nimble_totp
A tiny Elixir library for time-based one time passwords (TOTP)
+1 stars
from 476 · score 0.69
57.pret / pokemon-reverse-engineering-toolsArchived
Tools for building and disassembling Pokémon Red and Pokémon Crystal
- pokemon
- reverse-engineering
- disassembly
- python
+1 stars
from 353 · score 0.69
+1 stars
from 182 · score 0.69
59.n0kovo / hashcat-rules-collection
Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.
- hashcat
- hashcat-rules
- hashcat-rule
- password-cracking
- password-cracking-tool
- wordlist-generator
- +2 more
+1 stars
from 173 · score 0.69
+1 stars
from 125 · score 0.69
61.ps1337 / automotive-security-research
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
- car-hacking
- automotive-security
+1 stars
from 105 · score 0.69
+1 stars
from 94 · score 0.69
63.brancogao / webhook-debugger
Capture, inspect, and replay webhooks with 90-day history + signature verification. Built on Cloudflare Workers + D1.
+1 stars
from 15 · score 0.69