1.HunxByts / GhostTrack
Useful tool to track location or mobile number
- fyp
- hacking
- hacking-tool
- indonesia
- information
- information-gathering
- +13 more
+3,407 stars
from 16,988 · score 8.13
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
86 repositories by Attention Score · Oct 5, 2026 – Nov 3, 2026 (UTC)
2.mikeroyal / Self-Hosting-Guide
Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.
- self-hosted
- selfhosted
- home-assistant
- wireguard
- decentralized
- self-hosting
- +14 more
+519 stars
from 22,927 · score 6.25
3.justcallmekoko / ESP32Marauder
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
+455 stars
from 12,537 · score 6.12
4.hashcat / hashcat
World's fastest and most advanced password recovery utility
+338 stars
from 26,912 · score 5.83
5.Mr-Destroyer / ZimZilla
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
- ai-bug-bounty
- ai-bug-finder
- ai-bug-reporter
- ai-hacking
- bugbounty
- bughunting
- +14 more
+246 stars
from 0 · score 5.51
6.xdreizein666 / getcontact-cli
GetContact CLI adalah project Python untuk melakukan lookup nomor telepon lewat API GetContact, tanpa aplikasi Android dan tanpa browser.
+205 stars
from 599 · score 5.33
7.ZeroDayEvil / CVE-2026-54121-Certighost
🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.
- active-directory
- ai-security-tool
- privilege-escalation
- red-team
- cve-2026-54121
+179 stars
from 87 · score 5.19
8.ZeroDayEvil / CVE-2026-75604-PoC
🛡 Official AI Security Tool module for CVE-2026-75604 (Next.js Windows Unauthenticated Remote Code Execution) with safe in-app execution, deep vulnerability validation, and DevSecOps-ready security auditing workflows.
- ai-hacking
- ai-security-tool
- cve-scanning
- cve-tools
- exploit
- offensive-security
- +10 more
+152 stars
from 26 · score 5.03
9.vxunderground / MalwareSourceCode
Collection of malware source code for a variety of platforms in an array of different programming languages.
- malware
- malware-research
- malware-development
- malware-detection
+141 stars
from 18,746 · score 4.96
10.maurosoria / dirsearch
Web path scanner
+133 stars
from 14,907 · score 4.90
11.capstone-engine / capstone
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
- reverse-engineering
- disassembler
- security
- framework
- arm
- arm64
- +14 more
+115 stars
from 9,049 · score 4.75
12.trustedsec / social-engineer-toolkit
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
+101 stars
from 15,329 · score 4.62
+83 stars
from 21,867 · score 4.43
14.W00t3k / Awesome-Cellular-Hacking
Awesome-Cellular-Hacking
+56 stars
from 4,049 · score 4.04
15.beefproject / beef
The Browser Exploitation Framework Project
+54 stars
from 11,031 · score 4.01
16.SwiftOnSecurity / sysmon-config
Sysmon configuration file template with default high-quality event tracing
- sysmon
- threatintel
- threat-hunting
- sysinternals
- windows
- netsec
- +2 more
+49 stars
from 5,673 · score 3.91
17.pret / pokecrystal
Disassembly of Pokémon Crystal
- pokemon
- disassembly
- gameboy-color
- reverse-engineering
- gbz80
+34 stars
from 2,512 · score 3.56
18.sleuthkit / sleuthkit
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
- sleuthkit
- tct
- ntfs
- forensics
- incident-response
+29 stars
from 3,154 · score 3.40
19.RustCrypto / hashes
Collection of cryptographic hash functions written in pure Rust
- cryptographic-hash-functions
- blake2
- gost
- streebog
- groestl
- md2
- +13 more
+22 stars
from 2,266 · score 3.14
20.fuzzdb-project / fuzzdb
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
+19 stars
from 8,990 · score 3.00
+19 stars
from 884 · score 3.00
22.epsylon / ufonet
UFONet - Denial of Service Toolkit
- dos
- ddos
- ufonet
- botnet
- disruption
- cryptography
- +1 more
+18 stars
from 2,532 · score 2.94
+17 stars
from 29,640 · score 2.89
24.pret / pokegold
Disassembly of Pokémon Gold/Silver
- pokemon
- disassembly
- gameboy-color
- reverse-engineering
- gbz80
+16 stars
from 719 · score 2.83
25.zladx / LADX-Disassembly
Disassembly of Legend of Zelda: Link's Awakening DX
- gameboy
- hacktoberfest
- reverse-engineering
- z80
+15 stars
from 904 · score 2.77
26.christophetd / CloudFlair
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
+13 stars
from 2,972 · score 2.64
27.qazbnm456 / awesome-cve-poc
✍️ A curated list of CVE PoCs.
+12 stars
from 3,534 · score 2.56
28.B-Con / crypto-algorithms
Basic implementations of standard cryptography algorithms, like AES and SHA-1.
+11 stars
from 2,043 · score 2.48
29.PaulSec / awesome-sec-talks
A collected list of awesome security talks
+10 stars
from 4,236 · score 2.40
30.engn33r / awesome-bluetooth-security
List of Bluetooth BR/EDR/LE security resources
- bluetooth
- bluetooth-low-energy
- bluetooth-security
- pentesting
- penetration-testing
- security
- +4 more
+8 stars
from 615 · score 2.20
+8 stars
from 327 · score 2.20
32.x0rz / EQGRP
Decrypted content of eqgrp-auction-file.tar.xz
- exploits
- shadowbrokers
- equationgroup
- hacking
- nsa
- tao
+7 stars
from 4,201 · score 2.08
33.airbus-seclab / bincat
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
- ida-plugin
- taint-analysis
- reverse-engineering
- disassembly
+7 stars
from 1,875 · score 2.08
34.jstrosch / malware-samples
Malware samples, analysis exercises and other interesting resources.
- malware-samples
- trickbot
- pcaps
- lokibot
- emotet
- maldoc-templates
- +3 more
+7 stars
from 1,686 · score 2.08
+6 stars
from 1,815 · score 1.95
36.B3nac / Android-Reports-and-Resources
A big list of Android Hackerone disclosed reports and other resources.
- android
- hackerone
- android-repo
- android-security
- android-resource
- bugbounty
- +7 more
+6 stars
from 1,712 · score 1.95
37.zeustrojancode / ZeusArchived
NOT MY CODE! Zeus trojan horse - leaked in 2011, I am not the author. This repository is for study purposes only, do not message me about your lame hacking attempts.
- c
- c-plus-plus
- malware
- russian
- virus
- leaks
+6 stars
from 1,564 · score 1.95
38.RustCrypto / AEADs
Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers
+6 stars
from 966 · score 1.95
39.DFIRKuiper / Kuiper
Digital Forensics Investigation Platform
+6 stars
from 908 · score 1.95
+5 stars
from 6,620 · score 1.79
41.correlatedsecurity / Awesome-SOAR
A curated Cyber "Security Orchestration, Automation and Response (SOAR)" awesome list.
+5 stars
from 1,004 · score 1.79
42.doyensec / awesome-electronjs-hacking
A curated list of awesome resources about Electron.js (in)security
+5 stars
from 682 · score 1.79
43.RustCrypto / formats
Cryptography-related format encoders/decoders: DER, PEM, PKCS, PKIX
+5 stars
from 340 · score 1.79
44.samyk / poisontap
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
+4 stars
from 6,478 · score 1.61
45.XRPLF / xrpl.js
A JavaScript/TypeScript API for interacting with the XRP Ledger in Node.js and the browser
- ripple
- xrp-ledger
- javascript
- api
- xrp
- blockchain
- +8 more
+4 stars
from 1,332 · score 1.61
+4 stars
from 1,229 · score 1.61
47.sh4hin / Androl4b
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
- mobile-security
- android
- malware-analyzer
- penetration-testing
- reverse-engineering
- application-security
+4 stars
from 1,172 · score 1.61
48.sundaysec / Android-Exploits
A collection of android Exploits and Hacks
+4 stars
from 1,029 · score 1.61
49.tldrsec / prompt-injection-defenses
Every practical and proposed defense against prompt injection.
- ai
- cybersecurity
- prompt-injection
- security
+4 stars
from 737 · score 1.61
50.fabacab / awesome-pentest
:computer:⚔️ A collection of awesome penetration testing resources, tools, and other shiny things.
+4 stars
from 279 · score 1.61
51.pret / pokepinball
Disassembly of Pokémon Pinball
- pokemon
- disassembly
- gameboy
- reverse-engineering
- gbz80
+4 stars
from 201 · score 1.61
52.zama-ai / bounty-programArchived
Zama Bounty Program: Contribute to the FHE space and Zama's open source libraries and get rewarded 💰
- bounty-program
- cryptography
- fully-homomorphic-encryption
- zama
+3 stars
from 15,218 · score 1.39
+3 stars
from 2,318 · score 1.39
54.hlandau / acmetool
:lock: acmetool, an automatic certificate acquisition tool for ACME (Let's Encrypt)
- acmetool
- certificate
- acme-server
- acme
- letsencrypt
- ssl
- +2 more
+3 stars
from 2,092 · score 1.39
+3 stars
from 1,712 · score 1.39
56.hellman / xortool
A tool to analyze multi-byte xor cipher
- xortool
- xor-cipher
- cryptography
- cryptanalysis
+3 stars
from 1,488 · score 1.39
57.doridori / Android-Security-Reference
A W.I.P Android Security Ref
+3 stars
from 994 · score 1.39
58.andresriancho / w3af
w3af: web application attack and audit framework, the open source web vulnerability scanner.
+2 stars
from 4,908 · score 1.10
59.Security-Onion-Solutions / security-onionArchived
Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
- intrusion-detection
- network-security-monitoring
- log-management
- ids
- nsm
- hunting
- +1 more
+2 stars
from 3,134 · score 1.10
60.eldraco / domain_analyzer
Analyze the security of any domain by finding all the information possible. Made in python.
+2 stars
from 1,863 · score 1.10
61.PaulSec / awesome-windows-domain-hardening
A curated list of awesome Security Hardening techniques for Windows.
+2 stars
from 1,803 · score 1.10
62.joaomilho / Enterprise
🦄 The Enterprise™ programming language
+2 stars
from 1,618 · score 1.10
63.xFFFFF / Gekko-Strategies
Strategies to Gekko trading bot with backtests results and some useful tools.
- gekko
- strategies
- gekko-strategies
- gekko-backtest
- backtest-database
- cryptocurrency
- +14 more
+2 stars
from 1,440 · score 1.10
+2 stars
from 1,223 · score 1.10
65.miracl / MIRACL
MIRACL Cryptographic SDK: Multiprecision Integer and Rational Arithmetic Cryptographic Library is a C software library that is widely regarded by developers as the gold standard open source SDK for elliptic curve cryptography (ECC).
+2 stars
from 701 · score 1.10
+2 stars
from 570 · score 1.10
67.ReversecLabs / dref
DNS Rebinding Exploitation Framework
- dns-rebinding
- red-team
- hacking
- web-hacking
- browser-hacking
- pentesting
- +3 more
+2 stars
from 494 · score 1.10
68.dashbitco / nimble_totp
A tiny Elixir library for time-based one time passwords (TOTP)
+2 stars
from 475 · score 1.10
69.pret / pokemon-reverse-engineering-toolsArchived
Tools for building and disassembling Pokémon Red and Pokémon Crystal
- pokemon
- reverse-engineering
- disassembly
- python
+2 stars
from 352 · score 1.10
70.ps1337 / automotive-security-research
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
- car-hacking
- automotive-security
+2 stars
from 104 · score 1.10
71.nikivdev / privacy-respecting
Curated List of Privacy Respecting Services and Software
- privacy
- curated-list
- self-hosted
- security
- security-tools
+1 stars
from 2,059 · score 0.69
72.mesquidar / adbsploitArchived
A python based tool for exploiting and managing Android devices via ADB
+1 stars
from 904 · score 0.69
73.stealth / sshttp
SSH/HTTP(S) multiplexer. Run a webserver and a sshd on the same port w/o changes.
+1 stars
from 893 · score 0.69
74.seemoo-lab / internalblue
Bluetooth experimentation framework for Broadcom and Cypress chips.
+1 stars
from 791 · score 0.69
75.GoSecure / dtd-finder
List DTDs and generate XXE payloads using those local DTDs.
- xxe
- dtd
- security
- hacktoberfest
+1 stars
from 663 · score 0.69
76.ChrisTheCoolHut / PinCTF
Using Intel's PIN tool to solve CTF problems
- ctf
- pin
- reverse-engineering
- instruction-counting
+1 stars
from 506 · score 0.69
77.clem9669 / hashcat-rule
Rule for hashcat or john. Aiming to crack how people generate their password
- hashcat
- hashcat-rules
- john
- john-rules
- hashcat-rule
+1 stars
from 472 · score 0.69
78.sansecio / magevulndb
List of Magento extensions with known security issues.
- magento
- extensions
- vulnerability
+1 stars
from 221 · score 0.69
79.n0kovo / hashcat-rules-collection
Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.
- hashcat
- hashcat-rules
- hashcat-rule
- password-cracking
- password-cracking-tool
- wordlist-generator
- +2 more
+1 stars
from 173 · score 0.69
+1 stars
from 125 · score 0.69
81.maciejczyzewski / retter
A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)
+1 stars
from 119 · score 0.69
+1 stars
from 94 · score 0.69
83.ucsb-seclab / packware
Effects of packers on machine-learning-based malware classifiers that use only static analysis
+1 stars
from 90 · score 0.69
+1 stars
from 55 · score 0.69
85.OISF / suricata-intel-index
Suricata rule and intel index
- suricata
- intel
- security
- rules
- signatures
- ids
- +2 more
+1 stars
from 34 · score 0.69
86.brancogao / webhook-debugger
Capture, inspect, and replay webhooks with 90-day history + signature verification. Built on Cloudflare Workers + D1.
+1 stars
from 15 · score 0.69