1.Minglink / dsh-infinite-gen-5
TranslatedDeepSeek v4.1 flash reverse engineering tool (Infinite 5th Generation) Please give it a Star to bookmark it ⭐ Everyone is welcome to submit improvements to the project
+250 stars
from 3,644 · score 5.53
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
1–100 of 118 by Attention Score · Oct 29, 2026 – Nov 4, 2026 (UTC)
2.keepassxreboot / keepassxc
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
- keepassxc
- keepass
- password-manager
- linux
- windows
- cross-platform
- +6 more
+197 stars
from 29,574 · score 5.29
3.Infisical / infisical
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
- environment-variables
- secret-management
- secrets
- security
- open-source
- secret-manager
- +14 more
+165 stars
from 30,110 · score 5.11
4.x64dbg / x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
- debugger
- windows
- x64
- disassembler
- reverse-engineering
- security
- +14 more
+141 stars
from 50,061 · score 4.96
+127 stars
from 22,525 · score 4.85
6.mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
+126 stars
from 15,608 · score 4.84
7.radareorg / radare2
UNIX-like reverse engineering framework and command-line toolset
- radare2
- c
- commandline
- reverse-engineering
- forensics
- security
- +4 more
+118 stars
from 25,198 · score 4.78
8.wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
- security
- compliance
- log-analysis
- vulnerability-detection
- cybersecurity
- file-integrity-monitoring
- +14 more
+90 stars
from 17,478 · score 4.51
9.goauthentik / authentik
The authentication glue you need.
- saml
- saml-idp
- saml-sp
- oauth2
- oauth2-server
- oauth2-client
- +11 more
+72 stars
from 26,161 · score 4.29
10.lissy93 / personal-security-checklist
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
- privacy
- security
- censorship
- cybersecurity
- checklist
- awesome
- +7 more
+60 stars
from 22,650 · score 4.11
11.bitwarden / clients
Bitwarden client apps (web, browser extension, desktop, and cli).
- webextension
- javascript
- bitwarden
- typescript
- safari
- chrome
- +7 more
+60 stars
from 14,086 · score 4.11
12.bitwarden / server
Bitwarden infrastructure/backend (API, database, Docker, etc).
- aspnetcore
- aspnet
- sql-server
- api
- sql
- csharp
- +5 more
+59 stars
from 20,506 · score 4.09
13.veracrypt / VeraCrypt
Disk encryption with strong security based on TrueCrypt
- encryption
- encryption-decryption
- encryption-algorithms
- veracrypt
- idrix
- veracrypt-source
+57 stars
from 11,993 · score 4.06
14.ZigZagBoi1 / PS5-14.10-Research
Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.
- ps5
- ps5-homebrew
- ps5-jailbreak
- ps5-tools
+57 stars
from 386 · score 4.06
+54 stars
from 39,260 · score 4.01
16.fail2ban / fail2ban
Daemon to ban hosts that cause multiple authentication errors
+52 stars
from 18,901 · score 3.97
17.sqlmapproject / sqlmap
Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
- database
- pentesting
- +9 more
+40 stars
from 38,809 · score 3.71
18.SigmaHQ / sigma
Main Sigma Rule Repository
- security
- monitoring
- siem
- logging
- signatures
- elasticsearch
- +3 more
+40 stars
from 11,364 · score 3.71
19.openwall / john
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
- john
- c
- ripper
- password
- jtr
- opencl
- +10 more
+37 stars
from 13,830 · score 3.64
20.owasp-amass / amass
In-depth attack surface mapping and asset discovery
+35 stars
from 15,429 · score 3.58
+34 stars
from 14,350 · score 3.56
22.Gallopsled / pwntools
CTF framework and exploit development library
+33 stars
from 13,795 · score 3.53
23.1N3 / Sn1per
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
- cybersecurity
- pentest-tool
- +13 more
+31 stars
from 11,490 · score 3.47
24.pterodactyl / panel
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
- laravel
- opensource
- mit
- docker
- free
- tailwindcss
- +6 more
+29 stars
from 9,437 · score 3.40
25.osquery / osquery
SQL powered operating system instrumentation, monitoring, and analytics.
- security
- monitoring
- intrusion-detection
- sql
- hacktoberfest
+28 stars
from 23,697 · score 3.37
+28 stars
from 19,756 · score 3.37
27.ytisf / theZoo
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
- malware
- malware-analysis
- malware-samples
- malware-research
- thezoo
- malwareanalysis
+28 stars
from 13,512 · score 3.37
28.peass-ng / PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
+27 stars
from 20,734 · score 3.33
29.bettercap / bettercap
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
+27 stars
from 20,212 · score 3.33
30.SpacehuhnTech / esp8266_deauther
Affordable WiFi hacking platform for testing and learning
+26 stars
from 15,058 · score 3.30
31.Velocidex / velociraptor
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
- endpoint-protection
- endpoint-discovery
- +1 more
+26 stars
from 4,386 · score 3.30
+25 stars
from 5,134 · score 3.26
33.Cyan4973 / xxHash
Extremely fast non-cryptographic hash algorithm
- xxhash
- smhasher
- hash-functions
- c
- dispersion
- hash
- +1 more
+24 stars
from 11,383 · score 3.22
34.cowrie / cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
+22 stars
from 6,639 · score 3.14
35.volatilityfoundation / volatility3
Volatility 3.0 development
- digital-investigation
- forensics
- incident-response
- malware
- memory
- python
- +3 more
+21 stars
from 4,547 · score 3.09
36.aarsaputra / php2shell
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
- php2shell-cve-2026
- php2shell-vulnerability
- +9 more
+21 stars
from 106 · score 3.09
37.kevoreilly / CAPEv2
Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
- malware-research
- reverse-engineering
- +3 more
+20 stars
from 3,630 · score 3.04
+19 stars
from 10,811 · score 3.00
39.rustls / rustls
A modern TLS library in Rust
+19 stars
from 7,717 · score 3.00
40.hashicorp / vault
A tool for secrets management, encryption as a service, and privileged access management
- vault
- go
- secrets
+18 stars
from 36,448 · score 2.94
41.wpscanteam / wpscan
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
- wordpress
- wpscan
- security
- security-scanner
- hacking-tool
- scanner
- +2 more
+18 stars
from 9,816 · score 2.94
42.Mbed-TLS / mbedtls
An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
+15 stars
from 7,035 · score 2.77
+14 stars
from 2,942 · score 2.71
44.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- pcap
- security
- arkime
- cybersecurity
- infosec
- +7 more
+14 stars
from 2,570 · score 2.71
45.certbot / certbot
Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
- acme
- acme-client
- certbot
- certificate
- letsencrypt
- python
+12 stars
from 33,300 · score 2.56
46.jedisct1 / libsodium
A modern, portable, easy to use crypto library.
- crypto
- cryptography
- c
- zig-package
+12 stars
from 14,029 · score 2.56
47.PrivateBin / PrivateBin
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
- self-hosted
- self-hosting
- pastebin
- security
- one-time
- self-destroy
- +6 more
+12 stars
from 8,719 · score 2.56
48.Rurik / Noriben
Noriben - Portable, Simple, Malware Analysis Sandbox
+12 stars
from 1,309 · score 2.56
49.bailey27 / cppcryptfs
cppcryptfs is an implementation of the gocryptfs encrypted overlay filesystem in C++ for Windows.
+12 stars
from 998 · score 2.56
50.chaitin / xray
TranslatedA comprehensive security assessment tool developed in-house by Chaitin (长亭), supporting scanning for common web security issues and custom PoCs | Be sure to read the documentation before use
- security
- vulnerability
- vulnerability-scanner
- passive-vulnerability-scanner
- xss
- sqlinjection
- +1 more
+10 stars
from 11,775 · score 2.40
51.keeweb / keeweb
Free cross-platform password manager compatible with KeePass
- keeweb
- keepass
- security
- password-manager
- password
- electron
- +1 more
+8 stars
from 13,027 · score 2.20
52.teodly / inferno
[MIRROR] unofficial implementation of Dante protocol (Audio over IP)
- audio-over-ip
- dante
- reverse-engineering
- aoip
- audinate
+8 stars
from 357 · score 2.20
53.threat9 / routersploit
Exploitation Framework for Embedded Devices
+7 stars
from 13,276 · score 2.08
54.ReversecLabs / drozer
The Leading Security Assessment Framework for Android.
- drozer
- android
- security
- pentesting
- java
- mobile
- +2 more
+7 stars
from 4,645 · score 2.08
55.supertokens / supertokens-core
Open source alternative to Auth0 / Firebase Auth / AWS Cognito
- authentication
- session-management
- login
- supertokens
- java
- signin
- +13 more
+6 stars
from 15,336 · score 1.95
56.P-H-C / phc-winner-argon2
The password hash Argon2, winner of PHC
+6 stars
from 5,392 · score 1.95
57.rednaga / APKiD
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
- android
- antivirus
- machine-learning
- malware-detection
- malware-analysis
- malware-research
- +8 more
+6 stars
from 2,606 · score 1.95
58.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+6 stars
from 2,560 · score 1.95
59.thinkst / canarytokens
Canarytokens helps track activity and actions on your network
+6 stars
from 2,233 · score 1.95
60.libtom / libtomcrypt
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
- libtomcrypt
- cryptography
- c
- encryption
+6 stars
from 1,795 · score 1.95
61.evilsocket / pwnagotchi
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
- ai
- deep-reinforcement-learning
- wpa-psk
- handshakes
- bettercap
- deep-learning
- +1 more
+5 stars
from 9,244 · score 1.79
62.MacPass / MacPass
A native macOS KeePass client
- keepass
- kdbx
- macpass
- password-manager
- password
- objective-c
- +2 more
+5 stars
from 6,892 · score 1.79
63.Legrandin / pycryptodome
A self-contained cryptographic library for Python
- cryptography
- security
- python
+5 stars
from 3,281 · score 1.79
64.last-byte / PersistenceSniper
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
- incident-response
- malware-detection
- persistence
- powershell
- powershell-module
- powershell-script
- +3 more
+5 stars
from 2,147 · score 1.79
65.USArmyResearchLab / Dshell
Dshell is a network forensic analysis framework.
+4 stars
from 5,501 · score 1.61
66.JonathanSalwan / ROPgadget
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
- binary-exploitation
+4 stars
from 4,511 · score 1.61
67.linkedin / qark
Tool to look for several security related Android application vulnerabilities
+4 stars
from 3,394 · score 1.61
68.korcankaraokcu / PINCE
Reverse engineering tool for Linux
- gdb
- cheat-engine
- reverse-engineering
- injection
- memory-hacking
- hex-editor
- +10 more
+4 stars
from 3,135 · score 1.61
69.simsong / bulk_extractor
This is the development tree. Production downloads are at:
+4 stars
from 1,437 · score 1.61
+4 stars
from 150 · score 1.61
+3 stars
from 4,110 · score 1.39
72.KuroLabs / stegcloak
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
- cryptography
- steganography
- compression
- functional-programming
- ramdajs
- hacking-tool
- +10 more
+3 stars
from 3,930 · score 1.39
73.JPCERTCC / LogonTracer
Investigate malicious Windows logon by visualizing and analyzing Windows event log
- security
- dfir
- javascript
- visualization
- active-directory
- event-log
- +2 more
+3 stars
from 3,297 · score 1.39
74.cmu-sei / pharos
Automated static analysis tools for binary programs
- binary-analysis
- reverse-engineering
+3 stars
from 1,739 · score 1.39
75.tklengyel / drakvuf
DRAKVUF Black-box Binary Analysis
- malware-analysis
- virtualization
- xen
- introspection
+3 stars
from 1,287 · score 1.39
76.EnableSecurity / sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
- svcrack
- svmap
- +6 more
+3 stars
from 1,110 · score 1.39
77.wagga40 / Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
- detection
- auditd
- +9 more
+3 stars
from 870 · score 1.39
78.jedisct1 / libhydrogen
A lightweight, secure, easy-to-use crypto library suitable for constrained environments.
+3 stars
from 792 · score 1.39
79.brix / crypto-js
JavaScript library of crypto standards.
+2 stars
from 16,398 · score 1.10
80.CalebFenton / simplify
Android virtual machine and deobfuscator
- deobfuscation
- java
- optimization
- android
- reverse-engineering
- malware-analysis
- +9 more
+2 stars
from 4,675 · score 1.10
81.vanhoefm / krackattacks-scripts
The repository host gives no description.
+2 stars
from 3,535 · score 1.10
82.panda-re / panda
Platform for Architecture-Neutral Dynamic Analysis
- reverse-engineering
- dynamic-analysis
- qemu
- pandare
- pypanda
+2 stars
from 2,793 · score 1.10
83.m0nad / Diamorphine
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
- kernel-module
- security-tools
- +14 more
+2 stars
from 2,486 · score 1.10
84.htrgouvea / nipe
An engine to make Tor network your default gateway
+2 stars
from 2,405 · score 1.10
85.profanity-im / profanity
Ncurses based XMPP client
- xmpp-client
- c
- xmpp
- chat
- ncurses
- decentralization
- +6 more
+2 stars
from 1,550 · score 1.10
86.elastic / protections-artifacts
Elastic Security detection content for Endpoint
+2 stars
from 1,507 · score 1.10
+2 stars
from 1,334 · score 1.10
88.greg7mdp / sparsepp
A fast, memory efficient hash map for C++
- hash-tables
- sparse-containers
- unordered
- sparsehash
- hashmap
- hash
- +2 more
+2 stars
from 1,313 · score 1.10
89.in-toto / in-toto
in-toto is a framework to protect supply chain integrity.
- supply-chain
- security
- new-york-university
- secure-systems-lab
+2 stars
from 1,052 · score 1.10
90.counteractive / incident-response-plan-template
A concise, directive, specific, flexible, and free incident response plan template
- incident-response
- incident
- incident-management
- infosec
- information-security
- cybersecurity
+2 stars
from 809 · score 1.10
+2 stars
from 665 · score 1.10
92.squidKid-deluxe / QTradeX-Algo-Trading-SDK
AI-powered SDK featuring algorithmic trading, backtesting, deployment on 100+ exchanges, and multiple optimization engines.
- ai
- algorithmic-trading
- crypto
- machine-learning
- python
- trading-platform
- +13 more
+2 stars
from 89 · score 1.10
93.hookprobe / hookprobe
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
- ai-security
- cybersecurity
- ids
- iot-security
- ips
- open-source-security
- +14 more
+2 stars
from 47 · score 1.10
94.anpa1200 / adversarygraph
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.
- cybersecurity
- docker
- fastapi
- llm
- mitre-attack
- react
- +14 more
+2 stars
from 33 · score 1.10
95.longld / peda
PEDA - Python Exploit Development Assistance for GDB
+1 stars
from 6,161 · score 0.69
+1 stars
from 5,523 · score 0.69
97.digitalbazaar / forge
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
- crypto
- cryptography
- x509
- message-digest
- aes
- asn1
- +14 more
+1 stars
from 5,348 · score 0.69
98.django-oauth / django-oauth-toolkit
OAuth2 goodies for the Djangonauts!
+1 stars
from 3,342 · score 0.69
99.ruby-oauth / oauth2
🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)
- authentication
- authorization
- oauth2
- oauth2-client
- security
- oidc
- +1 more
+1 stars
from 2,181 · score 0.69
100.jtesta / ssh-mitmArchived
SSH man-in-the-middle tool
- penetration-testing
- ssh
- mitm
- man-in-the-middle
- man-in-the-middle-attack
- hacking
+1 stars
from 1,740 · score 0.69