1.HunxByts / GhostTrack
Useful tool to track location or mobile number
- fyp
- hacking
- hacking-tool
- indonesia
- information
- information-gathering
- +13 more
+5,834 stars
from 14,561 · score 8.67
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
1–100 of 116 by Attention Score · Aug 6, 2026 – Nov 3, 2026 (UTC)
2.mikeroyal / Self-Hosting-Guide
Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.
- self-hosted
- selfhosted
- home-assistant
- wireguard
- decentralized
- self-hosting
- +14 more
+1,379 stars
from 22,067 · score 7.23
3.justcallmekoko / ESP32Marauder
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
+1,220 stars
from 11,772 · score 7.11
4.hashcat / hashcat
World's fastest and most advanced password recovery utility
+864 stars
from 26,386 · score 6.76
5.maurosoria / dirsearch
Web path scanner
+532 stars
from 14,508 · score 6.28
6.vxunderground / MalwareSourceCode
Collection of malware source code for a variety of platforms in an array of different programming languages.
- malware
- malware-research
- malware-development
- malware-detection
+361 stars
from 18,526 · score 5.89
7.trustedsec / social-engineer-toolkit
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
+352 stars
from 15,078 · score 5.87
8.capstone-engine / capstone
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
- reverse-engineering
- disassembler
- security
- framework
- arm
- arm64
- +14 more
+267 stars
from 8,897 · score 5.59
+260 stars
from 21,690 · score 5.56
10.beefproject / beef
The Browser Exploitation Framework Project
+149 stars
from 10,936 · score 5.01
11.SwiftOnSecurity / sysmon-config
Sysmon configuration file template with default high-quality event tracing
- sysmon
- threatintel
- threat-hunting
- sysinternals
- windows
- netsec
- +2 more
+125 stars
from 5,597 · score 4.84
12.sleuthkit / sleuthkit
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
- sleuthkit
- tct
- ntfs
- forensics
- incident-response
+69 stars
from 3,114 · score 4.25
13.fuzzdb-project / fuzzdb
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
+67 stars
from 8,942 · score 4.22
+63 stars
from 29,594 · score 4.16
15.epsylon / ufonet
UFONet - Denial of Service Toolkit
- dos
- ddos
- ufonet
- botnet
- disruption
- cryptography
- +1 more
+56 stars
from 2,494 · score 4.04
16.RustCrypto / hashes
Collection of cryptographic hash functions written in pure Rust
- cryptographic-hash-functions
- blake2
- gost
- streebog
- groestl
- md2
- +13 more
+47 stars
from 2,241 · score 3.87
+44 stars
from 859 · score 3.81
18.pret / pokegold
Disassembly of Pokémon Gold/Silver
- pokemon
- disassembly
- gameboy-color
- reverse-engineering
- gbz80
+37 stars
from 698 · score 3.64
19.hashcat / hashcat-utils
Small utilities that are useful in advanced password cracking
+35 stars
from 1,596 · score 3.58
20.sundaysec / Android-Exploits
A collection of android Exploits and Hacks
+31 stars
from 1,002 · score 3.47
+30 stars
from 1,602 · score 3.43
22.zladx / LADX-Disassembly
Disassembly of Legend of Zelda: Link's Awakening DX
- gameboy
- hacktoberfest
- reverse-engineering
- z80
+29 stars
from 890 · score 3.40
23.RustCrypto / AEADs
Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers
+27 stars
from 945 · score 3.33
24.christophetd / CloudFlair
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
+26 stars
from 2,959 · score 3.30
25.B-Con / crypto-algorithms
Basic implementations of standard cryptography algorithms, like AES and SHA-1.
+25 stars
from 2,029 · score 3.26
26.andresriancho / w3af
w3af: web application attack and audit framework, the open source web vulnerability scanner.
+24 stars
from 4,886 · score 3.22
27.trustedsec / hate_crack
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
+22 stars
from 1,843 · score 3.14
28.tldrsec / prompt-injection-defenses
Every practical and proposed defense against prompt injection.
- ai
- cybersecurity
- prompt-injection
- security
+22 stars
from 719 · score 3.14
29.samyk / poisontap
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
+21 stars
from 6,461 · score 3.09
+20 stars
from 1,213 · score 3.04
31.x0rz / EQGRP
Decrypted content of eqgrp-auction-file.tar.xz
- exploits
- shadowbrokers
- equationgroup
- hacking
- nsa
- tao
+18 stars
from 4,190 · score 2.94
32.airbus-seclab / bincat
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
- ida-plugin
- taint-analysis
- reverse-engineering
- disassembly
+18 stars
from 1,864 · score 2.94
33.zama-ai / bounty-programArchived
Zama Bounty Program: Contribute to the FHE space and Zama's open source libraries and get rewarded 💰
- bounty-program
- cryptography
- fully-homomorphic-encryption
- zama
+17 stars
from 15,204 · score 2.89
34.DFIRKuiper / Kuiper
Digital Forensics Investigation Platform
+16 stars
from 898 · score 2.83
+15 stars
from 320 · score 2.77
36.engn33r / awesome-bluetooth-security
List of Bluetooth BR/EDR/LE security resources
- bluetooth
- bluetooth-low-energy
- bluetooth-security
- pentesting
- penetration-testing
- security
- +4 more
+14 stars
from 609 · score 2.71
37.RustCrypto / formats
Cryptography-related format encoders/decoders: DER, PEM, PKCS, PKIX
+14 stars
from 331 · score 2.71
38.xFFFFF / Gekko-Strategies
Strategies to Gekko trading bot with backtests results and some useful tools.
- gekko
- strategies
- gekko-strategies
- gekko-backtest
- backtest-database
- cryptocurrency
- +14 more
+13 stars
from 1,429 · score 2.64
39.correlatedsecurity / Awesome-SOAR
A curated Cyber "Security Orchestration, Automation and Response (SOAR)" awesome list.
+12 stars
from 997 · score 2.56
40.mesquidar / adbsploitArchived
A python based tool for exploiting and managing Android devices via ADB
+12 stars
from 893 · score 2.56
41.zeustrojancode / ZeusArchived
NOT MY CODE! Zeus trojan horse - leaked in 2011, I am not the author. This repository is for study purposes only, do not message me about your lame hacking attempts.
- c
- c-plus-plus
- malware
- russian
- virus
- leaks
+11 stars
from 1,559 · score 2.48
42.sh4hin / Androl4b
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
- mobile-security
- android
- malware-analyzer
- penetration-testing
- reverse-engineering
- application-security
+11 stars
from 1,165 · score 2.48
43.n0kovo / hashcat-rules-collection
Hascat Rules Collection – Probably the largest collection of hashcat rule-files anywhere.
- hashcat
- hashcat-rules
- hashcat-rule
- password-cracking
- password-cracking-tool
- wordlist-generator
- +2 more
+11 stars
from 163 · score 2.48
+10 stars
from 6,615 · score 2.40
45.lijiejie / subDomainsBrute
A fast sub domain brute tool for pentesters
+10 stars
from 3,609 · score 2.40
46.404labfr / laravel-impersonate
Laravel Impersonate is a plugin that allows you to authenticate as your users.
- laravel-package
- impersonate
- php
- user-management
- laravel
+10 stars
from 2,334 · score 2.40
47.vbuterin / pybitcointools
SImple, common-sense Bitcoin-themed Python ECC library
+10 stars
from 1,327 · score 2.40
48.hellman / xortool
A tool to analyze multi-byte xor cipher
- xortool
- xor-cipher
- cryptography
- cryptanalysis
+9 stars
from 1,482 · score 2.30
49.seemoo-lab / internalblue
Bluetooth experimentation framework for Broadcom and Cypress chips.
+9 stars
from 783 · score 2.30
50.doyensec / awesome-electronjs-hacking
A curated list of awesome resources about Electron.js (in)security
+9 stars
from 678 · score 2.30
51.pret / pokepinball
Disassembly of Pokémon Pinball
- pokemon
- disassembly
- gameboy
- reverse-engineering
- gbz80
+9 stars
from 196 · score 2.30
+8 stars
from 1,608 · score 2.20
53.doridori / Android-Security-Reference
A W.I.P Android Security Ref
+8 stars
from 989 · score 2.20
+7 stars
from 2,492 · score 2.08
+7 stars
from 1,218 · score 2.08
56.medama-io / medama
Self-hostable, privacy-focused website analytics.
- analytics
- cookie-free
- privacy
- self-hosted
- web-analytics
- website-analytics
- +6 more
+7 stars
from 633 · score 2.08
57.Security-Onion-Solutions / security-onionArchived
Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
- intrusion-detection
- network-security-monitoring
- log-management
- ids
- nsm
- hunting
- +1 more
+6 stars
from 3,130 · score 1.95
+6 stars
from 2,315 · score 1.95
59.hlandau / acmetool
:lock: acmetool, an automatic certificate acquisition tool for ACME (Let's Encrypt)
- acmetool
- certificate
- acme-server
- acme
- letsencrypt
- ssl
- +2 more
+6 stars
from 2,089 · score 1.95
+6 stars
from 566 · score 1.95
61.fabacab / awesome-pentest
:computer:⚔️ A collection of awesome penetration testing resources, tools, and other shiny things.
+6 stars
from 277 · score 1.95
+6 stars
from 89 · score 1.95
63.eldraco / domain_analyzer
Analyze the security of any domain by finding all the information possible. Made in python.
+5 stars
from 1,860 · score 1.79
+5 stars
from 1,710 · score 1.79
65.mikechambers / as3corelib
An ActionScript 3 Library that contains a number of classes and utilities for working with ActionScript? 3. These include classes for MD5 and SHA 1 hashing, Image encoders, and JSON serialization as well as general String, Number and Date APIs.
+4 stars
from 1,501 · score 1.61
+4 stars
from 600 · score 1.61
67.dashbitco / nimble_totp
A tiny Elixir library for time-based one time passwords (TOTP)
+4 stars
from 473 · score 1.61
68.HenryHoggard / awesome-arm-exploitation
A collection of awesome videos, articles, books and resources about ARM exploitation.
+4 stars
from 364 · score 1.61
69.ps1337 / automotive-security-research
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
- car-hacking
- automotive-security
+4 stars
from 102 · score 1.61
70.brancogao / webhook-debugger
Capture, inspect, and replay webhooks with 90-day history + signature verification. Built on Cloudflare Workers + D1.
+4 stars
from 12 · score 1.61
71.miracl / MIRACL
MIRACL Cryptographic SDK: Multiprecision Integer and Rational Arithmetic Cryptographic Library is a C software library that is widely regarded by developers as the gold standard open source SDK for elliptic curve cryptography (ECC).
+3 stars
from 700 · score 1.39
72.GoSecure / dtd-finder
List DTDs and generate XXE payloads using those local DTDs.
- xxe
- dtd
- security
- hacktoberfest
+3 stars
from 661 · score 1.39
73.clem9669 / hashcat-rule
Rule for hashcat or john. Aiming to crack how people generate their password
- hashcat
- hashcat-rules
- john
- john-rules
- hashcat-rule
+3 stars
from 470 · score 1.39
74.hashview / hashview
A web front-end for password cracking and analytics
- python
- hashcat
- web
- flask
- analytics
- distributed
+3 stars
from 397 · score 1.39
75.pret / pokemon-reverse-engineering-toolsArchived
Tools for building and disassembling Pokémon Red and Pokémon Crystal
- pokemon
- reverse-engineering
- disassembly
- python
+3 stars
from 351 · score 1.39
76.hasherezade / persistence_demos
Demos of various (also non standard) persistence methods used by malware
+3 stars
from 229 · score 1.39
77.sansecio / magevulndb
List of Magento extensions with known security issues.
- magento
- extensions
- vulnerability
+3 stars
from 219 · score 1.39
+3 stars
from 123 · score 1.39
79.oguzhantopgul / Vezir-Project
Yet Another Linux Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis
+3 stars
from 116 · score 1.39
+2 stars
from 2,242 · score 1.10
81.praetorian-inc / Hob0RulesArchived
Password cracking rules for Hashcat based on statistics and industry patterns
+2 stars
from 1,528 · score 1.10
+2 stars
from 1,522 · score 1.10
83.ChALkeR / notes
Some public notes
+2 stars
from 1,273 · score 1.10
+2 stars
from 1,263 · score 1.10
85.muellerberndt / android_app_security_checklist
Android App Security Checklist
+2 stars
from 892 · score 1.10
86.stealth / sshttp
SSH/HTTP(S) multiplexer. Run a webserver and a sshd on the same port w/o changes.
+2 stars
from 892 · score 1.10
87.ReversecLabs / dref
DNS Rebinding Exploitation Framework
- dns-rebinding
- red-team
- hacking
- web-hacking
- browser-hacking
- pentesting
- +3 more
+2 stars
from 494 · score 1.10
88.1ultimat3 / PcapViz
Visualize network topologies and collect graph statistics based on pcap files
- network-topology
- python
- pcap
- security-tools
+2 stars
from 358 · score 1.10
89.PJanisio / Xiaomi_Yi_autoexec
Compilation of autoexec scripts and mods for Xiaomi Yi camera after reverse engineering of firmware.
- reverse-engineering
- xiaomi
- xiaomi-firmware
- xiaomi-camera
- xiaomi-sport
- xiaomi-yi
- +1 more
+2 stars
from 310 · score 1.10
+2 stars
from 277 · score 1.10
91.Safe-Intelligence-Lab / awesome-adversarial-examples-dl
A curated list of awesome resources for adversarial examples in deep learning
- deep-learning
- security
- adversarial-examples
- machine-learning
- computer-vision
+2 stars
from 266 · score 1.10
92.maciejczyzewski / retter
A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)
+2 stars
from 118 · score 1.10
93.FCSC-FR / shovel
Web interface to explore Suricata EVE outputs
- attack-defense-ctf
- ctf
- network-monitor
- suricata
- ecsc
- ecsc2024
- +1 more
+2 stars
from 97 · score 1.10
94.packing-box / dataset-packed-pe
Dataset of packed PE samples
- dataset
- pe-files
- upx
- samples
- pe-format
- executable-packing
- +6 more
+2 stars
from 49 · score 1.10
95.cloudsecurelab / security-acronyms
Curated list of Cyber Security acronyms & abbreviations
+2 stars
from 47 · score 1.10
96.wwwtyro / crypticoArchived
An easy-to-use encryption system utilizing RSA and AES for javascript.
+1 stars
from 1,172 · score 0.69
97.BetterCrypto / Applied-Crypto-Hardening
Best Current Practices regarding secure online communication and configuration of services using cryptography.
- cryptography
- applied-cryptography
- documentation
- best-practices
+1 stars
from 698 · score 0.69
98.guelfoweb / peframe
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
+1 stars
from 627 · score 0.69
99.idanr1986 / cuckoo-droid
CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.
+1 stars
from 608 · score 0.69
100.jesusprubio / strong-nodeArchived
:heavy_check_mark: More than 100 security checks for your Node.js API
+1 stars
from 504 · score 0.69