1.goauthentik / authentik
The authentication glue you need.
- saml
- saml-idp
- saml-sp
- oauth2
- oauth2-server
- oauth2-client
- +11 more
+3,561 stars
from 22,657 · score 8.18
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
1–100 of 180 by Attention Score · Aug 6, 2026 – Nov 3, 2026 (UTC)
2.mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
+2,943 stars
from 12,779 · score 7.99
3.Infisical / infisical
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
- environment-variables
- secret-management
- secrets
- security
- open-source
- secret-manager
- +14 more
+1,805 stars
from 28,442 · score 7.50
4.keepassxreboot / keepassxc
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
- keepassxc
- keepass
- password-manager
- linux
- windows
- cross-platform
- +6 more
+1,628 stars
from 28,119 · score 7.40
5.x64dbg / x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
- debugger
- windows
- x64
- disassembler
- reverse-engineering
- security
- +14 more
+1,264 stars
from 48,925 · score 7.14
6.wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
- security
- compliance
- log-analysis
- vulnerability-detection
- cybersecurity
- file-integrity-monitoring
- +14 more
+1,191 stars
from 16,365 · score 7.08
+1,179 stars
from 21,464 · score 7.07
8.veracrypt / VeraCrypt
Disk encryption with strong security based on TrueCrypt
- encryption
- encryption-decryption
- encryption-algorithms
- veracrypt
- idrix
- veracrypt-source
+1,175 stars
from 10,869 · score 7.07
9.bitwarden / server
Bitwarden infrastructure/backend (API, database, Docker, etc).
- aspnetcore
- aspnet
- sql-server
- api
- sql
- csharp
- +5 more
+907 stars
from 19,652 · score 6.81
10.radareorg / radare2
UNIX-like reverse engineering framework and command-line toolset
- radare2
- c
- commandline
- reverse-engineering
- forensics
- security
- +4 more
+878 stars
from 24,421 · score 6.78
11.sqlmapproject / sqlmap
Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
- database
- pentesting
- +9 more
+860 stars
from 37,982 · score 6.76
12.1N3 / Sn1per
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
- cybersecurity
- pentest-tool
- +13 more
+839 stars
from 10,679 · score 6.73
13.lissy93 / personal-security-checklist
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
- privacy
- security
- censorship
- cybersecurity
- checklist
- awesome
- +7 more
+790 stars
from 21,908 · score 6.67
+710 stars
from 38,596 · score 6.57
15.bitwarden / clients
Bitwarden client apps (web, browser extension, desktop, and cli).
- webextension
- javascript
- bitwarden
- typescript
- safari
- chrome
- +7 more
+705 stars
from 13,431 · score 6.56
16.fail2ban / fail2ban
Daemon to ban hosts that cause multiple authentication errors
+703 stars
from 18,241 · score 6.56
+686 stars
from 4,472 · score 6.53
18.SigmaHQ / sigma
Main Sigma Rule Repository
- security
- monitoring
- siem
- logging
- signatures
- elasticsearch
- +3 more
+584 stars
from 10,815 · score 6.37
19.peass-ng / PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
+581 stars
from 20,175 · score 6.37
20.owasp-amass / amass
In-depth attack surface mapping and asset discovery
+580 stars
from 14,881 · score 6.36
+568 stars
from 19,208 · score 6.34
22.bettercap / bettercap
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
+565 stars
from 19,670 · score 6.34
23.hashicorp / vault
A tool for secrets management, encryption as a service, and privileged access management
- vault
- go
- secrets
+481 stars
from 35,979 · score 6.18
24.openwall / john
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
- john
- c
- ripper
- password
- jtr
- opencl
- +10 more
+446 stars
from 13,416 · score 6.10
25.pterodactyl / panel
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
- laravel
- opensource
- mit
- docker
- free
- tailwindcss
- +6 more
+418 stars
from 9,045 · score 6.04
+353 stars
from 14,025 · score 5.87
27.osquery / osquery
SQL powered operating system instrumentation, monitoring, and analytics.
- security
- monitoring
- intrusion-detection
- sql
- hacktoberfest
+330 stars
from 23,390 · score 5.80
28.ytisf / theZoo
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
- malware
- malware-analysis
- malware-samples
- malware-research
- thezoo
- malwareanalysis
+310 stars
from 13,230 · score 5.74
+286 stars
from 2,669 · score 5.66
30.volatilityfoundation / volatility3
Volatility 3.0 development
- digital-investigation
- forensics
- incident-response
- malware
- memory
- python
- +3 more
+282 stars
from 4,284 · score 5.65
31.PrivateBin / PrivateBin
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
- self-hosted
- self-hosting
- pastebin
- security
- one-time
- self-destroy
- +6 more
+276 stars
from 8,456 · score 5.62
32.Velocidex / velociraptor
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
- endpoint-protection
- endpoint-discovery
- +1 more
+275 stars
from 4,134 · score 5.62
33.Cyan4973 / xxHash
Extremely fast non-cryptographic hash algorithm
- xxhash
- smhasher
- hash-functions
- c
- dispersion
- hash
- +1 more
+259 stars
from 11,144 · score 5.56
34.kevoreilly / CAPEv2
Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
- malware-research
- reverse-engineering
- +3 more
+258 stars
from 3,390 · score 5.56
+240 stars
from 10,587 · score 5.48
36.Gallopsled / pwntools
CTF framework and exploit development library
+227 stars
from 13,597 · score 5.43
37.Mbed-TLS / mbedtls
An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
+219 stars
from 6,831 · score 5.39
38.SpacehuhnTech / esp8266_deauther
Affordable WiFi hacking platform for testing and learning
+216 stars
from 14,864 · score 5.38
39.rustls / rustls
A modern TLS library in Rust
+214 stars
from 7,520 · score 5.37
40.jedisct1 / libsodium
A modern, portable, easy to use crypto library.
- crypto
- cryptography
- c
- zig-package
+210 stars
from 13,829 · score 5.35
41.certbot / certbot
Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
- acme
- acme-client
- certbot
- certificate
- letsencrypt
- python
+198 stars
from 33,110 · score 5.29
42.cowrie / cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
+196 stars
from 6,464 · score 5.28
43.pyca / cryptography
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
- python
- cryptography
+161 stars
from 7,671 · score 5.09
44.wpscanteam / wpscan
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
- wordpress
- wpscan
- security
- security-scanner
- hacking-tool
- scanner
- +2 more
+154 stars
from 9,678 · score 5.04
45.Tencent / BqLog
A lightweight, high-performance, industrial-grade cross-language logging library (C++/Java/C#/Kotlin/TS/Python/Go), battle-tested in Honor of Kings.
- cross-platform
- high-performance
- java
- logging
- cpp
- csharp
- +14 more
+154 stars
from 565 · score 5.04
46.supertokens / supertokens-core
Open source alternative to Auth0 / Firebase Auth / AWS Cognito
- authentication
- session-management
- login
- supertokens
- java
- signin
- +13 more
+149 stars
from 15,191 · score 5.01
47.chaitin / xray
TranslatedA comprehensive security assessment tool developed in-house by Chaitin (长亭), supporting scanning for common web security issues and custom PoCs | Be sure to read the documentation before use
- security
- vulnerability
- vulnerability-scanner
- passive-vulnerability-scanner
- xss
- sqlinjection
- +1 more
+142 stars
from 11,644 · score 4.96
48.thinkst / canarytokens
Canarytokens helps track activity and actions on your network
+140 stars
from 2,098 · score 4.95
49.bountyyfi / lonkero
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
- websecurity
- appsec
- +14 more
+130 stars
from 969 · score 4.88
50.threat9 / routersploit
Exploitation Framework for Embedded Devices
+122 stars
from 13,161 · score 4.81
51.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- pcap
- security
- arkime
- cybersecurity
- infosec
- +7 more
+115 stars
from 2,464 · score 4.75
52.commixproject / commix
Automated Αll-in-One OS command injection exploitation tool.
- python
- command-injection
- detection
- exploitation
- pentesting
- vulnerability-scanner
- +4 more
+114 stars
from 5,784 · score 4.74
53.korcankaraokcu / PINCE
Reverse engineering tool for Linux
- gdb
- cheat-engine
- reverse-engineering
- injection
- memory-hacking
- hex-editor
- +10 more
+114 stars
from 3,025 · score 4.74
54.evilsocket / pwnagotchi
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
- ai
- deep-reinforcement-learning
- wpa-psk
- handshakes
- bettercap
- deep-learning
- +1 more
+112 stars
from 9,136 · score 4.73
55.JPCERTCC / LogonTracer
Investigate malicious Windows logon by visualizing and analyzing Windows event log
- security
- dfir
- javascript
- visualization
- active-directory
- event-log
- +2 more
+104 stars
from 3,195 · score 4.65
56.keeweb / keeweb
Free cross-platform password manager compatible with KeePass
- keeweb
- keepass
- security
- password-manager
- password
- electron
- +1 more
+93 stars
from 12,941 · score 4.54
57.KuroLabs / stegcloak
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
- cryptography
- steganography
- compression
- functional-programming
- ramdajs
- hacking-tool
- +10 more
+88 stars
from 3,844 · score 4.49
58.ReversecLabs / drozer
The Leading Security Assessment Framework for Android.
- drozer
- android
- security
- pentesting
- java
- mobile
- +2 more
+80 stars
from 4,570 · score 4.39
59.m0nad / Diamorphine
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
- kernel-module
- security-tools
- +14 more
+78 stars
from 2,410 · score 4.37
60.rednaga / APKiD
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
- android
- antivirus
- machine-learning
- malware-detection
- malware-analysis
- malware-research
- +8 more
+77 stars
from 2,534 · score 4.36
61.bailey27 / cppcryptfs
cppcryptfs is an implementation of the gocryptfs encrypted overlay filesystem in C++ for Windows.
+72 stars
from 938 · score 4.29
62.P-H-C / phc-winner-argon2
The password hash Argon2, winner of PHC
+71 stars
from 5,328 · score 4.28
63.JonathanSalwan / ROPgadget
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
- binary-exploitation
+61 stars
from 4,452 · score 4.13
64.MacPass / MacPass
A native macOS KeePass client
- keepass
- kdbx
- macpass
- password-manager
- password
- objective-c
- +2 more
+60 stars
from 6,837 · score 4.11
65.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+60 stars
from 2,505 · score 4.11
+57 stars
from 5,466 · score 4.06
67.htrgouvea / nipe
An engine to make Tor network your default gateway
+54 stars
from 2,353 · score 4.01
68.teodly / inferno
[MIRROR] unofficial implementation of Dante protocol (Audio over IP)
- audio-over-ip
- dante
- reverse-engineering
- aoip
- audinate
+54 stars
from 311 · score 4.01
69.simsong / bulk_extractor
This is the development tree. Production downloads are at:
+47 stars
from 1,394 · score 3.87
70.brix / crypto-js
JavaScript library of crypto standards.
+44 stars
from 16,355 · score 3.81
71.elastic / protections-artifacts
Elastic Security detection content for Endpoint
+41 stars
from 1,467 · score 3.74
72.R74nCom / sandboxels
In-browser falling-sand simulation game with over 500 elements and thousands of reactions.
- browser-game
- cellular-automata
- cellular-automaton
- chemistry
- chemistry-lab
- falling-sand
- +14 more
+41 stars
from 436 · score 3.74
73.Legrandin / pycryptodome
A self-contained cryptographic library for Python
- cryptography
- security
- python
+40 stars
from 3,246 · score 3.71
74.digitalbazaar / forge
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
- crypto
- cryptography
- x509
- message-digest
- aes
- asn1
- +14 more
+33 stars
from 5,317 · score 3.53
75.profanity-im / profanity
Ncurses based XMPP client
- xmpp-client
- c
- xmpp
- chat
- ncurses
- decentralization
- +6 more
+33 stars
from 1,519 · score 3.53
76.zlib-ng / minizip-ng
Fork of the popular zip manipulation library found in the zlib distribution.
- minizip
- zip
- zlib
- lzma
- bzip2
- winzip-aes
- +9 more
+33 stars
from 1,476 · score 3.53
77.krzyzanowskim / CryptoSwift
CryptoSwift is a growing collection of standard and secure cryptographic algorithms implemented in Swift
- swift
- aes
- cryptography
- commoncrypto
- cryptoswift
- md5
- +7 more
+32 stars
from 10,546 · score 3.50
+31 stars
from 1,304 · score 3.47
79.tklengyel / drakvuf
DRAKVUF Black-box Binary Analysis
- malware-analysis
- virtualization
- xen
- introspection
+31 stars
from 1,259 · score 3.47
80.wagga40 / Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
- detection
- auditd
- +9 more
+31 stars
from 840 · score 3.47
81.in-toto / in-toto
in-toto is a framework to protect supply chain integrity.
- supply-chain
- security
- new-york-university
- secure-systems-lab
+29 stars
from 1,024 · score 3.40
82.longld / peda
PEDA - Python Exploit Development Assistance for GDB
+28 stars
from 6,133 · score 3.37
83.CalebFenton / simplify
Android virtual machine and deobfuscator
- deobfuscation
- java
- optimization
- android
- reverse-engineering
- malware-analysis
- +9 more
+28 stars
from 4,648 · score 3.37
84.Rurik / Noriben
Noriben - Portable, Simple, Malware Analysis Sandbox
+28 stars
from 1,286 · score 3.37
85.panda-re / panda
Platform for Architecture-Neutral Dynamic Analysis
- reverse-engineering
- dynamic-analysis
- qemu
- pandare
- pypanda
+27 stars
from 2,767 · score 3.33
86.libtom / libtomcrypt
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
- libtomcrypt
- cryptography
- c
- encryption
+27 stars
from 1,774 · score 3.33
87.cmu-sei / pharos
Automated static analysis tools for binary programs
- binary-analysis
- reverse-engineering
+27 stars
from 1,714 · score 3.33
88.HemmeligOrg / Hemmelig.appArchived
Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.
- secret
- encryption
- onetimesecret
- password
- personal-data
- gdpr
- +9 more
+27 stars
from 1,218 · score 3.33
89.linkedin / qark
Tool to look for several security related Android application vulnerabilities
+26 stars
from 3,371 · score 3.30
+26 stars
from 2,264 · score 3.30
91.django-guardian / django-guardian
Per object permissions for Django
+24 stars
from 3,897 · score 3.22
+23 stars
from 4,090 · score 3.18
93.OpenIdentityPlatform / OpenAM
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
- openam
- sso
- oauth
- saml
- aaa
- authentication
- +14 more
+23 stars
from 879 · score 3.18
94.Neo23x0 / yarGen
yarGen is a generator for YARA rules
- python
- yara
- malware
- malware-research
- malware-analysis
- malwareanalysis
+22 stars
from 1,802 · score 3.14
95.idaholab / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- security
- arkime
- cybersecurity
- infosec
- network-traffic-analysis
- +7 more
+22 stars
from 474 · score 3.14
96.USArmyResearchLab / Dshell
Dshell is a network forensic analysis framework.
+21 stars
from 5,484 · score 3.09
97.mstrobel / procyon
Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.
+20 stars
from 1,208 · score 3.04
98.EnableSecurity / sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
- svcrack
- svmap
- +6 more
+20 stars
from 1,091 · score 3.04
99.jedisct1 / libhydrogen
A lightweight, secure, easy-to-use crypto library suitable for constrained environments.
+20 stars
from 774 · score 3.04
100.vanhoefm / krackattacks-scripts
The repository host gives no description.
+19 stars
from 3,517 · score 3.00