1.goauthentik / authentik
The authentication glue you need.
- saml
- saml-idp
- saml-sp
- oauth2
- oauth2-server
- oauth2-client
- +11 more
+3,110 stars
from 23,123 · score 8.04
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
1–100 of 180 by Attention Score · Aug 7, 2026 – Nov 4, 2026 (UTC)
2.mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
+2,952 stars
from 12,782 · score 7.99
3.Infisical / infisical
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
- environment-variables
- secret-management
- secrets
- security
- open-source
- secret-manager
- +14 more
+1,811 stars
from 28,464 · score 7.50
4.keepassxreboot / keepassxc
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
- keepassxc
- keepass
- password-manager
- linux
- windows
- cross-platform
- +6 more
+1,645 stars
from 28,126 · score 7.41
5.x64dbg / x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
- debugger
- windows
- x64
- disassembler
- reverse-engineering
- security
- +14 more
+1,269 stars
from 48,933 · score 7.15
6.wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
- security
- compliance
- log-analysis
- vulnerability-detection
- cybersecurity
- file-integrity-monitoring
- +14 more
+1,187 stars
from 16,381 · score 7.08
+1,176 stars
from 21,476 · score 7.07
8.veracrypt / VeraCrypt
Disk encryption with strong security based on TrueCrypt
- encryption
- encryption-decryption
- encryption-algorithms
- veracrypt
- idrix
- veracrypt-source
+1,173 stars
from 10,877 · score 7.07
9.bitwarden / server
Bitwarden infrastructure/backend (API, database, Docker, etc).
- aspnetcore
- aspnet
- sql-server
- api
- sql
- csharp
- +5 more
+901 stars
from 19,664 · score 6.80
10.radareorg / radare2
UNIX-like reverse engineering framework and command-line toolset
- radare2
- c
- commandline
- reverse-engineering
- forensics
- security
- +4 more
+885 stars
from 24,431 · score 6.79
11.sqlmapproject / sqlmap
Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
- database
- pentesting
- +9 more
+857 stars
from 37,992 · score 6.75
12.1N3 / Sn1per
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
- cybersecurity
- pentest-tool
- +13 more
+836 stars
from 10,685 · score 6.73
13.lissy93 / personal-security-checklist
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
- privacy
- security
- censorship
- cybersecurity
- checklist
- awesome
- +7 more
+793 stars
from 21,917 · score 6.68
+709 stars
from 38,605 · score 6.57
15.bitwarden / clients
Bitwarden client apps (web, browser extension, desktop, and cli).
- webextension
- javascript
- bitwarden
- typescript
- safari
- chrome
- +7 more
+700 stars
from 13,446 · score 6.55
16.fail2ban / fail2ban
Daemon to ban hosts that cause multiple authentication errors
+698 stars
from 18,255 · score 6.55
+678 stars
from 4,481 · score 6.52
18.SigmaHQ / sigma
Main Sigma Rule Repository
- security
- monitoring
- siem
- logging
- signatures
- elasticsearch
- +3 more
+585 stars
from 10,819 · score 6.37
19.owasp-amass / amass
In-depth attack surface mapping and asset discovery
+582 stars
from 14,882 · score 6.37
20.peass-ng / PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
+581 stars
from 20,180 · score 6.37
+573 stars
from 19,211 · score 6.35
22.bettercap / bettercap
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
+561 stars
from 19,678 · score 6.33
23.hashicorp / vault
A tool for secrets management, encryption as a service, and privileged access management
- vault
- go
- secrets
+482 stars
from 35,984 · score 6.18
24.openwall / john
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
- john
- c
- ripper
- password
- jtr
- opencl
- +10 more
+449 stars
from 13,418 · score 6.11
25.pterodactyl / panel
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
- laravel
- opensource
- mit
- docker
- free
- tailwindcss
- +6 more
+418 stars
from 9,048 · score 6.04
+349 stars
from 14,035 · score 5.86
27.osquery / osquery
SQL powered operating system instrumentation, monitoring, and analytics.
- security
- monitoring
- intrusion-detection
- sql
- hacktoberfest
+334 stars
from 23,391 · score 5.81
28.ytisf / theZoo
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
- malware
- malware-analysis
- malware-samples
- malware-research
- thezoo
- malwareanalysis
+306 stars
from 13,234 · score 5.73
+287 stars
from 2,669 · score 5.66
30.volatilityfoundation / volatility3
Volatility 3.0 development
- digital-investigation
- forensics
- incident-response
- malware
- memory
- python
- +3 more
+283 stars
from 4,285 · score 5.65
31.Velocidex / velociraptor
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
- endpoint-protection
- endpoint-discovery
- +1 more
+273 stars
from 4,139 · score 5.61
32.PrivateBin / PrivateBin
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
- self-hosted
- self-hosting
- pastebin
- security
- one-time
- self-destroy
- +6 more
+272 stars
from 8,459 · score 5.61
33.Cyan4973 / xxHash
Extremely fast non-cryptographic hash algorithm
- xxhash
- smhasher
- hash-functions
- c
- dispersion
- hash
- +1 more
+262 stars
from 11,145 · score 5.57
34.kevoreilly / CAPEv2
Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
- malware-research
- reverse-engineering
- +3 more
+259 stars
from 3,391 · score 5.56
+241 stars
from 10,589 · score 5.49
36.Gallopsled / pwntools
CTF framework and exploit development library
+228 stars
from 13,600 · score 5.43
37.SpacehuhnTech / esp8266_deauther
Affordable WiFi hacking platform for testing and learning
+218 stars
from 14,866 · score 5.39
38.Mbed-TLS / mbedtls
An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
+214 stars
from 6,836 · score 5.37
39.rustls / rustls
A modern TLS library in Rust
+212 stars
from 7,524 · score 5.36
40.jedisct1 / libsodium
A modern, portable, easy to use crypto library.
- crypto
- cryptography
- c
- zig-package
+211 stars
from 13,830 · score 5.36
41.certbot / certbot
Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
- acme
- acme-client
- certbot
- certificate
- letsencrypt
- python
+201 stars
from 33,111 · score 5.31
42.cowrie / cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
+197 stars
from 6,464 · score 5.29
43.pyca / cryptography
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
- python
- cryptography
+161 stars
from 7,673 · score 5.09
44.wpscanteam / wpscan
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
- wordpress
- wpscan
- security
- security-scanner
- hacking-tool
- scanner
- +2 more
+154 stars
from 9,680 · score 5.04
45.supertokens / supertokens-core
Open source alternative to Auth0 / Firebase Auth / AWS Cognito
- authentication
- session-management
- login
- supertokens
- java
- signin
- +13 more
+148 stars
from 15,194 · score 5.00
46.chaitin / xray
TranslatedA comprehensive security assessment tool developed in-house by Chaitin (长亭), supporting scanning for common web security issues and custom PoCs | Be sure to read the documentation before use
- security
- vulnerability
- vulnerability-scanner
- passive-vulnerability-scanner
- xss
- sqlinjection
- +1 more
+140 stars
from 11,645 · score 4.95
47.thinkst / canarytokens
Canarytokens helps track activity and actions on your network
+138 stars
from 2,101 · score 4.93
48.bountyyfi / lonkero
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
- websecurity
- appsec
- +14 more
+129 stars
from 970 · score 4.87
49.threat9 / routersploit
Exploitation Framework for Embedded Devices
+122 stars
from 13,161 · score 4.81
50.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- pcap
- security
- arkime
- cybersecurity
- infosec
- +7 more
+120 stars
from 2,464 · score 4.80
51.korcankaraokcu / PINCE
Reverse engineering tool for Linux
- gdb
- cheat-engine
- reverse-engineering
- injection
- memory-hacking
- hex-editor
- +10 more
+113 stars
from 3,026 · score 4.74
52.commixproject / commix
Automated Αll-in-One OS command injection exploitation tool.
- python
- command-injection
- detection
- exploitation
- pentesting
- vulnerability-scanner
- +4 more
+112 stars
from 5,785 · score 4.73
53.evilsocket / pwnagotchi
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
- ai
- deep-reinforcement-learning
- wpa-psk
- handshakes
- bettercap
- deep-learning
- +1 more
+110 stars
from 9,139 · score 4.71
54.JPCERTCC / LogonTracer
Investigate malicious Windows logon by visualizing and analyzing Windows event log
- security
- dfir
- javascript
- visualization
- active-directory
- event-log
- +2 more
+105 stars
from 3,195 · score 4.66
55.keeweb / keeweb
Free cross-platform password manager compatible with KeePass
- keeweb
- keepass
- security
- password-manager
- password
- electron
- +1 more
+94 stars
from 12,941 · score 4.55
56.KuroLabs / stegcloak
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
- cryptography
- steganography
- compression
- functional-programming
- ramdajs
- hacking-tool
- +10 more
+88 stars
from 3,845 · score 4.49
57.ReversecLabs / drozer
The Leading Security Assessment Framework for Android.
- drozer
- android
- security
- pentesting
- java
- mobile
- +2 more
+79 stars
from 4,573 · score 4.38
58.rednaga / APKiD
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
- android
- antivirus
- machine-learning
- malware-detection
- malware-analysis
- malware-research
- +8 more
+77 stars
from 2,535 · score 4.36
59.m0nad / Diamorphine
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
- kernel-module
- security-tools
- +14 more
+77 stars
from 2,411 · score 4.36
60.bailey27 / cppcryptfs
cppcryptfs is an implementation of the gocryptfs encrypted overlay filesystem in C++ for Windows.
+71 stars
from 939 · score 4.28
61.P-H-C / phc-winner-argon2
The password hash Argon2, winner of PHC
+70 stars
from 5,328 · score 4.26
62.JonathanSalwan / ROPgadget
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
- binary-exploitation
+63 stars
from 4,452 · score 4.16
63.MacPass / MacPass
A native macOS KeePass client
- keepass
- kdbx
- macpass
- password-manager
- password
- objective-c
- +2 more
+60 stars
from 6,837 · score 4.11
64.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+59 stars
from 2,507 · score 4.09
+57 stars
from 5,467 · score 4.06
66.htrgouvea / nipe
An engine to make Tor network your default gateway
+54 stars
from 2,353 · score 4.01
67.teodly / inferno
[MIRROR] unofficial implementation of Dante protocol (Audio over IP)
- audio-over-ip
- dante
- reverse-engineering
- aoip
- audinate
+54 stars
from 311 · score 4.01
68.simsong / bulk_extractor
This is the development tree. Production downloads are at:
+47 stars
from 1,394 · score 3.87
69.brix / crypto-js
JavaScript library of crypto standards.
+43 stars
from 16,357 · score 3.78
70.elastic / protections-artifacts
Elastic Security detection content for Endpoint
+42 stars
from 1,467 · score 3.76
71.Legrandin / pycryptodome
A self-contained cryptographic library for Python
- cryptography
- security
- python
+40 stars
from 3,246 · score 3.71
72.Rurik / Noriben
Noriben - Portable, Simple, Malware Analysis Sandbox
+35 stars
from 1,286 · score 3.58
73.zlib-ng / minizip-ng
Fork of the popular zip manipulation library found in the zlib distribution.
- minizip
- zip
- zlib
- lzma
- bzip2
- winzip-aes
- +9 more
+33 stars
from 1,476 · score 3.53
74.wagga40 / Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
- detection
- auditd
- +9 more
+33 stars
from 840 · score 3.53
75.digitalbazaar / forge
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
- crypto
- cryptography
- x509
- message-digest
- aes
- asn1
- +14 more
+32 stars
from 5,317 · score 3.50
76.profanity-im / profanity
Ncurses based XMPP client
- xmpp-client
- c
- xmpp
- chat
- ncurses
- decentralization
- +6 more
+32 stars
from 1,520 · score 3.50
+32 stars
from 1,304 · score 3.50
78.krzyzanowskim / CryptoSwift
CryptoSwift is a growing collection of standard and secure cryptographic algorithms implemented in Swift
- swift
- aes
- cryptography
- commoncrypto
- cryptoswift
- md5
- +7 more
+31 stars
from 10,547 · score 3.47
79.tklengyel / drakvuf
DRAKVUF Black-box Binary Analysis
- malware-analysis
- virtualization
- xen
- introspection
+31 stars
from 1,259 · score 3.47
80.longld / peda
PEDA - Python Exploit Development Assistance for GDB
+29 stars
from 6,133 · score 3.40
81.CalebFenton / simplify
Android virtual machine and deobfuscator
- deobfuscation
- java
- optimization
- android
- reverse-engineering
- malware-analysis
- +9 more
+29 stars
from 4,648 · score 3.40
82.in-toto / in-toto
in-toto is a framework to protect supply chain integrity.
- supply-chain
- security
- new-york-university
- secure-systems-lab
+29 stars
from 1,025 · score 3.40
83.cmu-sei / pharos
Automated static analysis tools for binary programs
- binary-analysis
- reverse-engineering
+28 stars
from 1,714 · score 3.37
84.panda-re / panda
Platform for Architecture-Neutral Dynamic Analysis
- reverse-engineering
- dynamic-analysis
- qemu
- pandare
- pypanda
+27 stars
from 2,768 · score 3.33
85.linkedin / qark
Tool to look for several security related Android application vulnerabilities
+26 stars
from 3,372 · score 3.30
86.libtom / libtomcrypt
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
- libtomcrypt
- cryptography
- c
- encryption
+26 stars
from 1,775 · score 3.30
87.HemmeligOrg / Hemmelig.appArchived
Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.
- secret
- encryption
- onetimesecret
- password
- personal-data
- gdpr
- +9 more
+26 stars
from 1,218 · score 3.30
+25 stars
from 2,264 · score 3.26
89.django-guardian / django-guardian
Per object permissions for Django
+24 stars
from 3,897 · score 3.22
+23 stars
from 4,090 · score 3.18
91.OpenIdentityPlatform / OpenAM
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
- openam
- sso
- oauth
- saml
- aaa
- authentication
- +14 more
+23 stars
from 879 · score 3.18
92.Neo23x0 / yarGen
yarGen is a generator for YARA rules
- python
- yara
- malware
- malware-research
- malware-analysis
- malwareanalysis
+22 stars
from 1,802 · score 3.14
93.EnableSecurity / sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
- svcrack
- svmap
- +6 more
+22 stars
from 1,091 · score 3.14
94.USArmyResearchLab / Dshell
Dshell is a network forensic analysis framework.
+21 stars
from 5,484 · score 3.09
95.jedisct1 / libhydrogen
A lightweight, secure, easy-to-use crypto library suitable for constrained environments.
+21 stars
from 774 · score 3.09
96.vanhoefm / krackattacks-scripts
The repository host gives no description.
+20 stars
from 3,517 · score 3.04
97.last-byte / PersistenceSniper
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
- incident-response
- malware-detection
- persistence
- powershell
- powershell-module
- powershell-script
- +3 more
+20 stars
from 2,132 · score 3.04
98.mstrobel / procyon
Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.
+20 stars
from 1,208 · score 3.04
99.counteractive / incident-response-plan-template
A concise, directive, specific, flexible, and free incident response plan template
- incident-response
- incident
- incident-management
- infosec
- information-security
- cybersecurity
+19 stars
from 792 · score 3.00
100.PowerShellMafia / PowerSploitArchived
PowerSploit - A PowerShell Post-Exploitation Framework
+18 stars
from 13,051 · score 2.94