1.goauthentik / authentik
The authentication glue you need.
- saml
- saml-idp
- saml-sp
- oauth2
- oauth2-server
- oauth2-client
- +11 more
+5,088 stars
from 21,130 · score 8.53
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
1–100 of 178 by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
2.Infisical / infisical
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
- environment-variables
- secret-management
- secrets
- security
- open-source
- secret-manager
- +14 more
+3,810 stars
from 26,437 · score 8.25
3.mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
+3,423 stars
from 12,299 · score 8.14
4.keepassxreboot / keepassxc
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
- keepassxc
- keepass
- password-manager
- linux
- windows
- cross-platform
- +6 more
+3,000 stars
from 26,747 · score 8.01
5.veracrypt / VeraCrypt
Disk encryption with strong security based on TrueCrypt
- encryption
- encryption-decryption
- encryption-algorithms
- veracrypt
- idrix
- veracrypt-source
+2,393 stars
from 9,651 · score 7.78
+2,261 stars
from 20,382 · score 7.72
7.x64dbg / x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
- debugger
- windows
- x64
- disassembler
- reverse-engineering
- security
- +14 more
+2,193 stars
from 47,996 · score 7.69
8.bitwarden / server
Bitwarden infrastructure/backend (API, database, Docker, etc).
- aspnetcore
- aspnet
- sql-server
- api
- sql
- csharp
- +5 more
+2,180 stars
from 18,379 · score 7.69
9.wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
- security
- compliance
- log-analysis
- vulnerability-detection
- cybersecurity
- file-integrity-monitoring
- +14 more
+2,157 stars
from 15,399 · score 7.68
10.1N3 / Sn1per
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
- cybersecurity
- pentest-tool
- +13 more
+1,819 stars
from 9,699 · score 7.51
11.sqlmapproject / sqlmap
Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
- database
- pentesting
- +9 more
+1,813 stars
from 37,029 · score 7.50
12.radareorg / radare2
UNIX-like reverse engineering framework and command-line toolset
- radare2
- c
- commandline
- reverse-engineering
- forensics
- security
- +4 more
+1,771 stars
from 23,528 · score 7.48
13.bitwarden / clients
Bitwarden client apps (web, browser extension, desktop, and cli).
- webextension
- javascript
- bitwarden
- typescript
- safari
- chrome
- +7 more
+1,564 stars
from 12,572 · score 7.36
14.lissy93 / personal-security-checklist
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
- privacy
- security
- censorship
- cybersecurity
- checklist
- awesome
- +7 more
+1,512 stars
from 21,186 · score 7.32
+1,477 stars
from 37,829 · score 7.30
16.fail2ban / fail2ban
Daemon to ban hosts that cause multiple authentication errors
+1,370 stars
from 17,574 · score 7.22
17.bettercap / bettercap
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
+1,202 stars
from 19,033 · score 7.09
+1,151 stars
from 4,007 · score 7.05
19.peass-ng / PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
+1,134 stars
from 19,622 · score 7.03
20.hashicorp / vault
A tool for secrets management, encryption as a service, and privileged access management
- vault
- go
- secrets
+1,082 stars
from 35,378 · score 6.99
21.owasp-amass / amass
In-depth attack surface mapping and asset discovery
+1,059 stars
from 14,402 · score 6.97
22.SigmaHQ / sigma
Main Sigma Rule Repository
- security
- monitoring
- siem
- logging
- signatures
- elasticsearch
- +3 more
+1,039 stars
from 10,360 · score 6.95
+1,037 stars
from 18,739 · score 6.95
24.openwall / john
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
- john
- c
- ripper
- password
- jtr
- opencl
- +10 more
+884 stars
from 12,978 · score 6.79
25.pterodactyl / panel
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
- laravel
- opensource
- mit
- docker
- free
- tailwindcss
- +6 more
+704 stars
from 8,759 · score 6.56
+669 stars
from 13,709 · score 6.51
27.ytisf / theZoo
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
- malware
- malware-analysis
- malware-samples
- malware-research
- thezoo
- malwareanalysis
+626 stars
from 12,914 · score 6.44
+563 stars
from 10,264 · score 6.34
29.osquery / osquery
SQL powered operating system instrumentation, monitoring, and analytics.
- security
- monitoring
- intrusion-detection
- sql
- hacktoberfest
+559 stars
from 23,161 · score 6.33
30.PrivateBin / PrivateBin
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
- self-hosted
- self-hosting
- pastebin
- security
- one-time
- self-destroy
- +6 more
+535 stars
from 8,197 · score 6.28
31.kevoreilly / CAPEv2
Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
- malware-research
- reverse-engineering
- +3 more
+499 stars
from 3,149 · score 6.21
32.Velocidex / velociraptor
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
- endpoint-protection
- endpoint-discovery
- +1 more
+496 stars
from 3,913 · score 6.21
33.volatilityfoundation / volatility3
Volatility 3.0 development
- digital-investigation
- forensics
- incident-response
- malware
- memory
- python
- +3 more
+493 stars
from 4,073 · score 6.20
34.Gallopsled / pwntools
CTF framework and exploit development library
+473 stars
from 13,351 · score 6.16
35.Cyan4973 / xxHash
Extremely fast non-cryptographic hash algorithm
- xxhash
- smhasher
- hash-functions
- c
- dispersion
- hash
- +1 more
+469 stars
from 10,934 · score 6.15
36.Mbed-TLS / mbedtls
An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
+467 stars
from 6,583 · score 6.15
37.jedisct1 / libsodium
A modern, portable, easy to use crypto library.
- crypto
- cryptography
- c
- zig-package
+456 stars
from 13,583 · score 6.12
38.certbot / certbot
Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
- acme
- acme-client
- certbot
- certificate
- letsencrypt
- python
+420 stars
from 32,888 · score 6.04
39.SpacehuhnTech / esp8266_deauther
Affordable WiFi hacking platform for testing and learning
+415 stars
from 14,665 · score 6.03
40.supertokens / supertokens-core
Open source alternative to Auth0 / Firebase Auth / AWS Cognito
- authentication
- session-management
- login
- supertokens
- java
- signin
- +13 more
+401 stars
from 14,939 · score 6.00
+399 stars
from 2,556 · score 5.99
42.rustls / rustls
A modern TLS library in Rust
+393 stars
from 7,341 · score 5.98
43.cowrie / cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
+362 stars
from 6,298 · score 5.89
44.wpscanteam / wpscan
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
- wordpress
- wpscan
- security
- security-scanner
- hacking-tool
- scanner
- +2 more
+347 stars
from 9,485 · score 5.85
45.chaitin / xray
TranslatedA comprehensive security assessment tool developed in-house by Chaitin (长亭), supporting scanning for common web security issues and custom PoCs | Be sure to read the documentation before use
- security
- vulnerability
- vulnerability-scanner
- passive-vulnerability-scanner
- xss
- sqlinjection
- +1 more
+339 stars
from 11,447 · score 5.83
46.bountyyfi / lonkero
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
- websecurity
- appsec
- +14 more
+336 stars
from 763 · score 5.82
47.korcankaraokcu / PINCE
Reverse engineering tool for Linux
- gdb
- cheat-engine
- reverse-engineering
- injection
- memory-hacking
- hex-editor
- +10 more
+289 stars
from 2,850 · score 5.67
48.pyca / cryptography
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
- python
- cryptography
+285 stars
from 7,547 · score 5.66
49.threat9 / routersploit
Exploitation Framework for Embedded Devices
+262 stars
from 13,021 · score 5.57
50.evilsocket / pwnagotchi
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
- ai
- deep-reinforcement-learning
- wpa-psk
- handshakes
- bettercap
- deep-learning
- +1 more
+254 stars
from 8,994 · score 5.54
51.commixproject / commix
Automated Αll-in-One OS command injection exploitation tool.
- python
- command-injection
- detection
- exploitation
- pentesting
- vulnerability-scanner
- +4 more
+206 stars
from 5,692 · score 5.33
52.keeweb / keeweb
Free cross-platform password manager compatible with KeePass
- keeweb
- keepass
- security
- password-manager
- password
- electron
- +1 more
+201 stars
from 12,833 · score 5.31
53.m0nad / Diamorphine
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
- kernel-module
- security-tools
- +14 more
+194 stars
from 2,294 · score 5.27
54.thinkst / canarytokens
Canarytokens helps track activity and actions on your network
+194 stars
from 2,044 · score 5.27
55.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- pcap
- security
- arkime
- cybersecurity
- infosec
- +7 more
+192 stars
from 2,387 · score 5.26
56.Tencent / BqLog
A lightweight, high-performance, industrial-grade cross-language logging library (C++/Java/C#/Kotlin/TS/Python/Go), battle-tested in Honor of Kings.
- cross-platform
- high-performance
- java
- logging
- cpp
- csharp
- +14 more
+187 stars
from 532 · score 5.24
57.PowerShellMafia / PowerSploitArchived
PowerSploit - A PowerShell Post-Exploitation Framework
+177 stars
from 12,891 · score 5.18
58.ReversecLabs / drozer
The Leading Security Assessment Framework for Android.
- drozer
- android
- security
- pentesting
- java
- mobile
- +2 more
+162 stars
from 4,488 · score 5.09
59.KuroLabs / stegcloak
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
- cryptography
- steganography
- compression
- functional-programming
- ramdajs
- hacking-tool
- +10 more
+158 stars
from 3,774 · score 5.07
60.rednaga / APKiD
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
- android
- antivirus
- machine-learning
- malware-detection
- malware-analysis
- malware-research
- +8 more
+151 stars
from 2,460 · score 5.02
61.JPCERTCC / LogonTracer
Investigate malicious Windows logon by visualizing and analyzing Windows event log
- security
- dfir
- javascript
- visualization
- active-directory
- event-log
- +2 more
+146 stars
from 3,153 · score 4.99
62.P-H-C / phc-winner-argon2
The password hash Argon2, winner of PHC
+145 stars
from 5,254 · score 4.98
63.JonathanSalwan / ROPgadget
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
- binary-exploitation
+123 stars
from 4,390 · score 4.82
64.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+115 stars
from 2,450 · score 4.75
65.teodly / inferno
[MIRROR] unofficial implementation of Dante protocol (Audio over IP)
- audio-over-ip
- dante
- reverse-engineering
- aoip
- audinate
+112 stars
from 253 · score 4.73
66.htrgouvea / nipe
An engine to make Tor network your default gateway
+107 stars
from 2,300 · score 4.68
+106 stars
from 5,417 · score 4.67
68.brix / crypto-js
JavaScript library of crypto standards.
+93 stars
from 16,306 · score 4.54
69.elastic / protections-artifacts
Elastic Security detection content for Endpoint
+90 stars
from 1,418 · score 4.51
70.R74nCom / sandboxels
In-browser falling-sand simulation game with over 500 elements and thousands of reactions.
- browser-game
- cellular-automata
- cellular-automaton
- chemistry
- chemistry-lab
- falling-sand
- +14 more
+90 stars
from 387 · score 4.51
71.simsong / bulk_extractor
This is the development tree. Production downloads are at:
+85 stars
from 1,356 · score 4.45
72.MacPass / MacPass
A native macOS KeePass client
- keepass
- kdbx
- macpass
- password-manager
- password
- objective-c
- +2 more
+82 stars
from 6,815 · score 4.42
73.digitalbazaar / forge
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
- crypto
- cryptography
- x509
- message-digest
- aes
- asn1
- +14 more
+75 stars
from 5,275 · score 4.33
74.shadawck / awesome-anti-forensic
Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.
- awesome-list
- awesome
- anti-forensic
- anti-forensics
- cybersecurity
- forensic-analysis
- +2 more
+74 stars
from 984 · score 4.32
75.Legrandin / pycryptodome
A self-contained cryptographic library for Python
- cryptography
- security
- python
+71 stars
from 3,215 · score 4.28
76.panda-re / panda
Platform for Architecture-Neutral Dynamic Analysis
- reverse-engineering
- dynamic-analysis
- qemu
- pandare
- pypanda
+71 stars
from 2,723 · score 4.28
77.longld / peda
PEDA - Python Exploit Development Assistance for GDB
+69 stars
from 6,092 · score 4.25
+67 stars
from 2,223 · score 4.22
79.wagga40 / Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
- detection
- auditd
- +9 more
+67 stars
from 804 · score 4.22
80.krzyzanowskim / CryptoSwift
CryptoSwift is a growing collection of standard and secure cryptographic algorithms implemented in Swift
- swift
- aes
- cryptography
- commoncrypto
- cryptoswift
- md5
- +7 more
+64 stars
from 10,514 · score 4.17
81.profanity-im / profanity
Ncurses based XMPP client
- xmpp-client
- c
- xmpp
- chat
- ncurses
- decentralization
- +6 more
+64 stars
from 1,488 · score 4.17
82.tklengyel / drakvuf
DRAKVUF Black-box Binary Analysis
- malware-analysis
- virtualization
- xen
- introspection
+64 stars
from 1,226 · score 4.17
83.zlib-ng / minizip-ng
Fork of the popular zip manipulation library found in the zlib distribution.
- minizip
- zip
- zlib
- lzma
- bzip2
- winzip-aes
- +9 more
+62 stars
from 1,447 · score 4.14
84.HemmeligOrg / Hemmelig.appArchived
Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.
- secret
- encryption
- onetimesecret
- password
- personal-data
- gdpr
- +9 more
+62 stars
from 1,183 · score 4.14
85.in-toto / in-toto
in-toto is a framework to protect supply chain integrity.
- supply-chain
- security
- new-york-university
- secure-systems-lab
+59 stars
from 994 · score 4.09
+57 stars
from 4,056 · score 4.06
87.cmu-sei / pharos
Automated static analysis tools for binary programs
- binary-analysis
- reverse-engineering
+56 stars
from 1,685 · score 4.04
88.CalebFenton / simplify
Android virtual machine and deobfuscator
- deobfuscation
- java
- optimization
- android
- reverse-engineering
- malware-analysis
- +9 more
+55 stars
from 4,621 · score 4.03
89.Rurik / Noriben
Noriben - Portable, Simple, Malware Analysis Sandbox
+55 stars
from 1,259 · score 4.03
90.vanhoefm / krackattacks-scripts
The repository host gives no description.
+51 stars
from 3,485 · score 3.95
91.last-byte / PersistenceSniper
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
- incident-response
- malware-detection
- persistence
- powershell
- powershell-module
- powershell-script
- +3 more
+50 stars
from 2,101 · score 3.93
92.libtom / libtomcrypt
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
- libtomcrypt
- cryptography
- c
- encryption
+50 stars
from 1,751 · score 3.93
+50 stars
from 1,285 · score 3.93
94.linkedin / qark
Tool to look for several security related Android application vulnerabilities
+48 stars
from 3,349 · score 3.89
95.HaschekSolutions / pictshare
:camera: PictShare is an open source image, mp4, pastebin hosting service with a simple resizing and upload API that you can host yourself. :rice_scene:
- docker
- images
- selfhosted
- picture
- mp4-uploads
- image-uploader
- +1 more
+48 stars
from 903 · score 3.89
96.dvershinin / gixy
NGINX configuration static analyzer
+47 stars
from 1,143 · score 3.87
97.Neo23x0 / yarGen
yarGen is a generator for YARA rules
- python
- yara
- malware
- malware-research
- malware-analysis
- malwareanalysis
+46 stars
from 1,778 · score 3.85
98.EnableSecurity / sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
- svcrack
- svmap
- +6 more
+42 stars
from 1,069 · score 3.76
99.counteractive / incident-response-plan-template
A concise, directive, specific, flexible, and free incident response plan template
- incident-response
- incident
- incident-management
- infosec
- information-security
- cybersecurity
+40 stars
from 771 · score 3.71
100.django-guardian / django-guardian
Per object permissions for Django
+37 stars
from 3,884 · score 3.64