1001.mbevilacqua / appcompatprocessor
"Evolving AppCompat/AmCache data analysis beyond grep"
+5 stars
from 211 · score 1.79
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
1001–1100 of 1,209 by Attention Score · May 9, 2026 – Nov 4, 2026 (UTC)
1002.appknox / AFE
Android Framework for Exploitation, is a framework for exploiting android based devices
+5 stars
from 201 · score 1.79
1003.jnraber / VirtualDeobfuscator
Reverse engineering tool for virtualization wrappers
+5 stars
from 147 · score 1.79
1004.SAP / cloud-active-defense
Add a layer of active defense to your cloud applications.
- cybersecurity
- deception
- decoy
- honeytoken
- infosec
- security
+5 stars
from 106 · score 1.79
1005.sefcom / honeyplc
High-interaction Honeypot for PLCs and Industrial Control Systems
+5 stars
from 97 · score 1.79
1006.ChrisTruncer / EyeWitness
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
+5 stars
from 60 · score 1.79
1007.kazhuravlev / database-gateway
Safe access to production databases
+5 stars
from 35 · score 1.79
1008.QuipNetwork / hashsigs-ts
Hash-based signatures in typescript, WOTS+
+4 stars
from 11,177 · score 1.61
1009.QuipNetwork / hashsigs-py
The repository host gives no description.
+4 stars
from 11,169 · score 1.61
1010.thoughtbot / clearance
Rails authentication with email & password.
- clearance
- ruby
- thoughtbot
- rails
- rails-authentication
- rubygem
+4 stars
from 3,727 · score 1.61
1011.RolifyCommunity / rolify
Role management library with resource scoping
+4 stars
from 3,169 · score 1.61
1012.mandiant / red_team_tool_countermeasuresArchived
The repository host gives no description.
+4 stars
from 2,659 · score 1.61
1013.FeeiCN / GSILArchived
TranslatedGitHub Sensitive Information Leakage (GitHub sensitive information leakage monitoring)
- sensitive-data
- sensitive-data-security
- security-tools
- security-scanner
+4 stars
from 2,138 · score 1.61
1014.YelpArchive / osxcollectorArchived
A forensic evidence collection & analysis toolkit for OS X
+4 stars
from 1,885 · score 1.61
1015.cloudflare / redoctoberArchived
Go server for two-man rule style file encryption and decryption.
+4 stars
from 1,410 · score 1.61
+4 stars
from 1,261 · score 1.61
+4 stars
from 936 · score 1.61
1018.vincentcox / StaCoAn
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
- bugbounty
- security
- security-tools
- mobile-security
- static-code-analysis
+4 stars
from 866 · score 1.61
+4 stars
from 839 · score 1.61
1020.schrockwell / bodyguard
Simple authorization conventions for Phoenix apps
- phoenix
- authorization
- elixir
+4 stars
from 793 · score 1.61
+4 stars
from 774 · score 1.61
1022.Tencent / HaboMalHunter
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
- malware-analysis
- dynamic-analysis
- security
- linux
- static-analysis
- elf
+4 stars
from 747 · score 1.61
1023.shaj13 / go-guardian
Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.
- golang
- totp
- hotp
- 2fa
- authentication
- auth
- +14 more
+4 stars
from 609 · score 1.61
1024.brannondorsey / dns-rebind-toolkit
A front-end JavaScript toolkit for creating DNS rebinding attacks.
+4 stars
from 500 · score 1.61
1025.FuzzingLabs / octopusArchived
Security Analysis tool for WebAssembly module (wasm) and Blockchain Smart Contracts (BTC/ETH/NEO/EOS)
- security-analysis
- disassembler
- blockchain
- smart-contracts
- ethereum
- neo
- +7 more
+4 stars
from 486 · score 1.61
1026.HynekPetrak / malware-jail
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- malware-samples
- wscript
- deobfuscation
- angler
- javascript
- malware-jail
- +6 more
+4 stars
from 476 · score 1.61
1027.jitbit / AspNetSaml
Very simple SAML 2.0 consumer module for ASP.NET/C#
- saml
- asp-net
- single-sign-on
- asp-net-mvc
- asp-net-core
- aspnetcore
- +4 more
+4 stars
from 414 · score 1.61
1028.rarecoil / pantagrule
large hashcat rulesets generated from real-world compromised passwords
- hashcat
- hashcat-rules
- password-cracking
- security-research
- passwords
+4 stars
from 398 · score 1.61
1029.alexMyG / AndroPyTool
A framework for automated extraction of static and dynamic features from Android applications
- android-malware-detection
- android-analysis
+4 stars
from 378 · score 1.61
+4 stars
from 349 · score 1.61
1031.ampotos / dynStruct
Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone
+4 stars
from 326 · score 1.61
1032.peburrows / goth
Elixir package for Oauth authentication via Google Cloud APIs
- gcp
- authentication
- google-cloud-platform
- elixir
+4 stars
from 321 · score 1.61
1033.ArgoZhang / SliderCaptcha
Slider captcha support mobile
+4 stars
from 301 · score 1.61
+4 stars
from 288 · score 1.61
1035.tuupola / branca-spec
Authenticated and encrypted API tokens using modern crypto
+4 stars
from 232 · score 1.61
+4 stars
from 229 · score 1.61
1037.williballenthin / EVTXtract
EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
+4 stars
from 209 · score 1.61
+4 stars
from 191 · score 1.61
1039.vapor-community / Imperial
Federated Authentication with OAuth providers
+4 stars
from 190 · score 1.61
1040.TurboPack / LockBox3
LockBox3 is a Delphi and C++Builder library for cryptography.
+4 stars
from 187 · score 1.61
1041.typedb-osi / typedb-cti
Open Source Threat Intelligence Platform
- cti
- cybersecurity
- security
- intelligence
- osint
- cyber
- +1 more
+4 stars
from 165 · score 1.61
+4 stars
from 150 · score 1.61
1043.in-toto / in-toto-golang
A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
- in-toto
- software-supply-chain
- security
+4 stars
from 149 · score 1.61
1044.Gui774ume / ebpfkit-monitor
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
- linux
- security
- kernel
- rootkit
- linux-kernel
- ebpf
- +2 more
+4 stars
from 141 · score 1.61
+4 stars
from 128 · score 1.61
1046.maciejczyzewski / retter
A collection of hash functions, ciphers, tools, libraries, and materials related to cryptography & security. :closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key::closed_lock_with_key: (project was renamed, libchaos is main)
+4 stars
from 116 · score 1.61
1047.essentialkaos / branca
Authenticated encrypted API tokens (IETF XChaCha20-Poly1305 AEAD) for Golang
- golang
- tokens
- branca
- jwt
+4 stars
from 96 · score 1.61
1048.bad-antics / nullsec-logreaper
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
- c
- forensics
- log-analysis
- security
- high-performance
- nullsec
- +5 more
+4 stars
from 79 · score 1.61
1049.zitadel / passwap
Package passwap provides a unified implementation between different password hashing algorithms. It allows for easy swapping between algorithms, using the same API for all of them.
+4 stars
from 74 · score 1.61
1050.AdnaneKhan / ActionsTOCTOU
Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)
- actions
- bugbounty
- cicd
+4 stars
from 41 · score 1.61
1051.bad-antics / n01d-forge
🔥 n01d-forge - Secure Cross-Platform Image Burner with Encryption | LUKS, VeraCrypt, Secure Erase, Hash Verification
- bootable-usb
- cross-platform
- encryption
- etcher-alternative
- image-burner
- iso
- +9 more
+4 stars
from 10 · score 1.61
1052.andrewmichaelsmith / flux
HTTP honeypot on autopilot
+4 stars
from 3 · score 1.61
1053.kslamph / tronlib
A production-ready Go SDK for TRON: gRPC client with connection pooling, HD wallets, TRC-10/TRC-20, event decoding, transaction simulation, and shielded TRC-20 (Sapling) support. 85% test coverage.
- blockchain
- cryptocurrency
- go
- golang
- sdk
- smart-contracts
- +14 more
+4 stars
from 2 · score 1.61
1054.sattyamjjain / zerotrust
Privacy-first Chrome extension for real-time website security analysis using on-device AI. Trust scores (0-100), phishing detection, SSL verification, cookie compliance & AI chatbot powered by WebLLM with zero external data transmission.
- browser-extension
- chrome-extension
- cybersecurity
- on-device-ai
- phishing-detection
- privacy
- +8 more
+4 stars
from 2 · score 1.61
1055.sane-apps / SaneSales
Universal indie sales tracker for LemonSqueezy, Gumroad, and Stripe. iOS + macOS. 100% on-device privacy.
+4 stars
from 1 · score 1.61
1056.jipegit / OSXAuditor
OS X Auditor is a free Mac OS X computer forensics tool
+3 stars
from 3,125 · score 1.39
1057.sindresorhus / gulp-rev
Static asset revisioning by appending content hash to filenames: `unicorn.css` → `unicorn-d41d8cd98f.css`
+3 stars
from 1,532 · score 1.39
1058.kelp404 / CocoaSecurity
Encrypt/Decrypt: AES. Hash: MD5, SHA(SHA1, SHA224, SHA256, SHA384, SHA512). Encode/Decode: Base64, Hex.
+3 stars
from 1,127 · score 1.39
1059.authomatic / authomatic
Simple yet powerful authorization / authentication client library for Python web applications.
- python
- authentication
- oauth2-client
- oauth-client
- openid-client
- authorization
+3 stars
from 1,051 · score 1.39
1060.brannondorsey / whonow
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
- dns
- dns-rebinding
- hacking
- malicious-domains
- nodejs
- penetration-testing
- +2 more
+3 stars
from 655 · score 1.39
1061.mandiant / sunburst_countermeasuresArchived
The repository host gives no description.
+3 stars
from 558 · score 1.39
1062.google / docker-explorerArchived
A tool to help forensicate offline docker acquisitions
+3 stars
from 552 · score 1.39
+3 stars
from 547 · score 1.39
1064.0x4D31 / honeyLambda
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
- honeytoken
- honeypot
- security
- deception
- lambda
- serverless
- +2 more
+3 stars
from 524 · score 1.39
1065.Gallopsled / pwntools-write-ups
A colleciton of CTF write-ups all using pwntools
+3 stars
from 524 · score 1.39
1066.JPCERTCC / MalConfScan
Volatility plugin for extracts configuration data of known malware
+3 stars
from 495 · score 1.39
1067.sasa1977 / site_encrypt
Integrated certification via Let's encrypt for Elixir-powered sites
+3 stars
from 492 · score 1.39
1068.rafael-santiago / pig
A Linux packet crafting tool.
- packet-crafting
- networking
- hacking-tool
- intrusion-prevention
- forensics
- network-analysis
- +6 more
+3 stars
from 474 · score 1.39
1069.HR / CrypterArchived
🔓✨🔒 An innovative, convenient and secure encryption app
+3 stars
from 464 · score 1.39
1070.JPCERTCC / SysmonSearch
Investigate suspicious activity by visualizing Sysmon's event log
- security
- kibana
- elasticsearch
- sysmon
- stix
- stix2
+3 stars
from 429 · score 1.39
1071.JoelGMSec / Cloudtopolis
Zero Infrastructure Password Cracking
+3 stars
from 415 · score 1.39
1072.Samsung / cotopaxi
Set of tools for security testing of Internet of Things devices using specific network IoT protocols
+3 stars
from 360 · score 1.39
1073.orlikoski / CDQR
The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
+3 stars
from 344 · score 1.39
1074.gsmith257-cyber / GraphCrawlerArchived
GraphQL automated security testing toolkit
- api
- automated-testing
- cybersecurity
- graphql
- graphql-api
- pentesting
- +2 more
+3 stars
from 332 · score 1.39
1075.PJanisio / Xiaomi_Yi_autoexec
Compilation of autoexec scripts and mods for Xiaomi Yi camera after reverse engineering of firmware.
- reverse-engineering
- xiaomi
- xiaomi-firmware
- xiaomi-camera
- xiaomi-sport
- xiaomi-yi
- +1 more
+3 stars
from 309 · score 1.39
1076.sp00ks-git / hat
HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems
+3 stars
from 307 · score 1.39
1077.dwyl / elixir-auth-google
👤Minimalist Google OAuth Authentication for Elixir Apps. Tested, Documented & Maintained. Setup in 5 mins. 🚀
- elixir
- google-api
- auth
- authentication
- oauth
- +1 more
+3 stars
from 288 · score 1.39
+3 stars
from 279 · score 1.39
1079.QuasarApp / Qt-SecretArchived
Simple encryption library supporting RSA and AES algorithms.
- rsa
- aes
- qt
- cryptography
- algorithms
- alghorithm
- +5 more
+3 stars
from 266 · score 1.39
1080.keikoproj / kube-forensics
The repository host gives no description.
+3 stars
from 232 · score 1.39
1081.airsidemobile / JOSESwift
A framework for the JOSE standards JWS, JWE, and JWK written in Swift.
- jws
- jwk
- swift
- jwe
- jose
- ios
- +2 more
+3 stars
from 222 · score 1.39
+3 stars
from 222 · score 1.39
1083.SentryPeer / SentryPeer
Protect your SIP Servers from bad actors at https://sentrypeer.org
- sip
- voip
- security-tools
- honeypot
- peer-to-peer
- p2p
- +14 more
+3 stars
from 209 · score 1.39
1084.arisada / midgetpack
midgetpack is a multiplatform secure ELF packer
+3 stars
from 207 · score 1.39
1085.aau-network-security / haaukins
A Highly Accessible and Automated Virtualization Platform for Security Education
- cybersecurity
- virtualization
- docker
- virtualbox
- golang
- security-education
- +12 more
+3 stars
from 195 · score 1.39
+3 stars
from 185 · score 1.39
+3 stars
from 180 · score 1.39
1088.IronCoreLabs / recrypt-rs
A set of cryptographic primitives for building a multi-hop Proxy Re-encryption scheme, known as Transform Encryption.
- cryptography
- rust
- proxy-re-encryption
- transform-encryption
- ecc
- constant-time
- +1 more
+3 stars
from 166 · score 1.39
1089.williballenthin / shellbags
Cross-platform, open-source shellbag parser
+3 stars
from 157 · score 1.39
1090.echoCTF / echoCTF.RED
A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code
- ctf
- echoctf
- cybersecurity
- hacking
+3 stars
from 148 · score 1.39
1091.DOSAYGO-STUDIO / rain
The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm
- call-for-papers
- cryptanalysis
- cryptanalysis-tasks
- cryptography
- cryptohash
- hash
- +7 more
+3 stars
from 131 · score 1.39
+3 stars
from 123 · score 1.39
1093.fox-it / acquire
acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
+3 stars
from 118 · score 1.39
1094.AlienVault-OTX / OTX-Suricata
The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.
+3 stars
from 117 · score 1.39
1095.SoftSec-KAIST / NTFuzz
NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)
- fuzzer
- fuzzing
- kernel-fuzzer
- windows-kernel
- b2r2
- fsharp
- +1 more
+3 stars
from 111 · score 1.39
+3 stars
from 101 · score 1.39
1097.HynekPetrak / sshame
brute force SSH public-key authentication
- ssh
- penetration-testing
- remote-admin-tool
- ssh-key
- brute-force
- brute-force-attacks
- +2 more
+3 stars
from 77 · score 1.39
1098.akuafif / hXOR-Packer
A PE (Portable Executable) packer with Huffman Compression and Xor encryption.
- huffman-compression
- huffman-algorithm
- pe-header
- packer
- xor-encryption
- huffman-tree
- +1 more
+3 stars
from 65 · score 1.39
1099.kemalcr / kemal-session
Powerful Session Management for Kemal applications
- kemal
- session
- crystal
- middleware
+3 stars
from 63 · score 1.39
1100.Egor-S / pocketbase-sveltekit-static
PocketBase + SvelteKit (Static): minimalistic template with configured authorization featuring a single binary or Docker image for deploying.
+3 stars
from 46 · score 1.39