1101.packing-box / pypackerdetect
Packing detection tool for PE files
- detector
- pe-file
- pe-format
- peid
- entrypoint
- pe-sections
- +11 more
+2 stars
from 27 · score 1.10
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
1101–1200 of 1,295 by Attention Score · Aug 7, 2026 – Nov 4, 2026 (UTC)
1102.OpenIDC / ngx_oauth2_module
OAuth 2.x Resource Server module for NGINX
+2 stars
from 17 · score 1.10
1103.galax-io / gatling-picatinny
Gatling DSL extensions — feeders, profile management, transactions, assertions, Redis integration, and utility functions
- gatling
- performance
- performance-testing
- gatling-plugin
- dsl
- feeders
- +6 more
+2 stars
from 12 · score 1.10
1104.getveil / veil
Keep your secrets out of your AI coding agents. A local HTTPS proxy that swaps real credentials with placeholders and injects them at the network boundary.
- ai-agents
- claude-code
- cli
- developer-tools
- golang
- mitm-proxy
- +2 more
+2 stars
from 8 · score 1.10
1105.AyoubTadlaoui / GoLogX
Tamper-evident audit log for Go: an append-only, hash-chained, optionally Ed25519-signed log/slog handler, with offline logx verify. Built on the standard library, zero third-party dependencies. Also a full slog toolkit (colored output, JSON, rotation, fan-out, CLI).
- cli
- go
- golang
- slog
- audit-log
- ed25519
- +9 more
+2 stars
from 6 · score 1.10
1106.kslamph / tronlib
A production-ready Go SDK for TRON: gRPC client with connection pooling, HD wallets, TRC-10/TRC-20, event decoding, transaction simulation, and shielded TRC-20 (Sapling) support. 85% test coverage.
- blockchain
- cryptocurrency
- go
- golang
- sdk
- smart-contracts
- +14 more
+2 stars
from 4 · score 1.10
1107.sane-apps / SaneSales
Universal indie sales tracker for LemonSqueezy, Gumroad, and Stripe. iOS + macOS. 100% on-device privacy.
+2 stars
from 3 · score 1.10
1108.hexsecs / canarchy
Stream-first CAN & J1939 toolkit for security research and AI agents — typed JSONL events, CLI, TUI, fuzzing, MCP server.
+2 stars
from 2 · score 1.10
1109.dgrijalva / jwt-goArchived
ARCHIVE - Golang implementation of JSON Web Tokens (JWT). This project is now maintained at:
+1 stars
from 10,720 · score 0.69
1110.StackExchange / blackboxArchived
Safely store secrets in Git/Mercurial/Subversion
+1 stars
from 6,759 · score 0.69
1111.RolifyCommunity / rolify
Role management library with resource scoping
+1 stars
from 3,172 · score 0.69
+1 stars
from 2,800 · score 0.69
1113.google / enjarifyArchived
The repository host gives no description.
+1 stars
from 2,744 · score 0.69
+1 stars
from 1,968 · score 0.69
1115.nuxt-community / auth-moduleArchived
Zero-boilerplate authentication support for Nuxt 2
+1 stars
from 1,923 · score 0.69
1116.YelpArchive / osxcollectorArchived
A forensic evidence collection & analysis toolkit for OS X
+1 stars
from 1,888 · score 0.69
1117.anhskohbo / no-captcha
No CAPTCHA reCAPTCHA For Laravel.
+1 stars
from 1,845 · score 0.69
1118.reZach / secure-electron-template
The best way to build Electron apps with security in mind.
+1 stars
from 1,708 · score 0.69
1119.airbnb / binaryalert
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
- security
- yara
- serverless
- terraform
- lambda
- aws
- +1 more
+1 stars
from 1,454 · score 0.69
1120.cloudflare / redoctoberArchived
Go server for two-man rule style file encryption and decryption.
+1 stars
from 1,413 · score 0.69
1121.ChALkeR / notes
Some public notes
+1 stars
from 1,273 · score 0.69
1122.wwwtyro / crypticoArchived
An easy-to-use encryption system utilizing RSA and AES for javascript.
+1 stars
from 1,172 · score 0.69
1123.dromara / dongle
A simple, semantic and developer-friendly crypto package for golang
- aes
- rsa
- des
- 3des
- base16
- base64
- +13 more
+1 stars
from 1,103 · score 0.69
+1 stars
from 1,080 · score 0.69
1125.o1egl / paseto
Platform-Agnostic Security Tokens implementation in GO (Golang)
- go
- golang
- token
- past
- auth
- authentication
- +7 more
+1 stars
from 939 · score 0.69
+1 stars
from 929 · score 0.69
1127.google / certificate-transparencyArchived
Auditing for TLS certificates.
+1 stars
from 886 · score 0.69
1128.WithSecureOpenSource / see
Sandboxed Execution Environment
+1 stars
from 821 · score 0.69
1129.0x09AL / raven
raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.
+1 stars
from 798 · score 0.69
1130.ueberauth / oauth2
An Elixir OAuth 2.0 Client Library
+1 stars
from 771 · score 0.69
1131.Aguafrommars / TheIdServer
OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI
- openid-connect
- admin-ui
- iam
- openid
- oidc
- oidc-server
- +12 more
+1 stars
from 754 · score 0.69
1132.Tencent / HaboMalHunter
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
- malware-analysis
- dynamic-analysis
- security
- linux
- static-analysis
- elf
+1 stars
from 750 · score 0.69
1133.thesp0nge / dawnscanner
Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
- codereview
- cybersecurity
- ruby
- sinatra
- padrino
- vulnerabilities
- +4 more
+1 stars
from 747 · score 0.69
1134.jbe2277 / waf
Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
+1 stars
from 729 · score 0.69
1135.alex / letsencrypt-aws
The repository host gives no description.
+1 stars
from 726 · score 0.69
1136.BetterCrypto / Applied-Crypto-Hardening
Best Current Practices regarding secure online communication and configuration of services using cryptography.
- cryptography
- applied-cryptography
- documentation
- best-practices
+1 stars
from 698 · score 0.69
1137.cristalhq / jwt
Safe, simple and fast JSON Web Tokens for Go
- jwt
- jwt-token
- jwt-claims
- dependency-free
- go
- golang
- +5 more
+1 stars
from 687 · score 0.69
1138.brannondorsey / whonow
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
- dns
- dns-rebinding
- hacking
- malicious-domains
- nodejs
- penetration-testing
- +2 more
+1 stars
from 657 · score 0.69
1139.mattifestation / CimSweep
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
+1 stars
from 656 · score 0.69
1140.mlsecproject / combine
Tool to gather Threat Intelligence indicators from publicly available sources
+1 stars
from 654 · score 0.69
1141.guelfoweb / peframe
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
+1 stars
from 627 · score 0.69
1142.shaj13 / go-guardian
Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.
- golang
- totp
- hotp
- 2fa
- authentication
- auth
- +14 more
+1 stars
from 612 · score 0.69
1143.idanr1986 / cuckoo-droid
CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.
+1 stars
from 608 · score 0.69
+1 stars
from 584 · score 0.69
+1 stars
from 577 · score 0.69
+1 stars
from 574 · score 0.69
1147.SocialConnect / auth
:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:
+1 stars
from 563 · score 0.69
1148.kevinburke / nacl
Pure Go implementation of the NaCL set of API's
- golang
- nacl
- security
- secretbox
- curve25519
+1 stars
from 550 · score 0.69
+1 stars
from 535 · score 0.69
1150.jesusprubio / strong-nodeArchived
:heavy_check_mark: More than 100 security checks for your Node.js API
+1 stars
from 504 · score 0.69
1151.JPCERTCC / MalConfScan
Volatility plugin for extracts configuration data of known malware
+1 stars
from 497 · score 0.69
1152.sasa1977 / site_encrypt
Integrated certification via Let's encrypt for Elixir-powered sites
+1 stars
from 494 · score 0.69
1153.gfoss / PSRecon
:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
+1 stars
from 493 · score 0.69
1154.iSECPartners / Introspy-Android
Security profiling for blackbox Android
+1 stars
from 490 · score 0.69
1155.FuzzingLabs / octopusArchived
Security Analysis tool for WebAssembly module (wasm) and Blockchain Smart Contracts (BTC/ETH/NEO/EOS)
- security-analysis
- disassembler
- blockchain
- smart-contracts
- ethereum
- neo
- +7 more
+1 stars
from 489 · score 0.69
+1 stars
from 482 · score 0.69
1157.HR / CrypterArchived
🔓✨🔒 An innovative, convenient and secure encryption app
+1 stars
from 466 · score 0.69
1158.guardsight / gsvsoc_cirt-playbook-battle-cards
Cyber Incident Response Team Playbook Battle Cards
- playbook-battle-cards
- cybersecurity
- cyber-threats
- cyber-security-team
- incident-response
- secops
+1 stars
from 434 · score 0.69
1159.DefensePointSecurity / threat_noteArchived
DPS' Lightweight Investigation Notebook
+1 stars
from 432 · score 0.69
1160.JPCERTCC / SysmonSearch
Investigate suspicious activity by visualizing Sysmon's event log
- security
- kibana
- elasticsearch
- sysmon
- stix
- stix2
+1 stars
from 431 · score 0.69
1161.SUPERAndroidAnalyzer / superArchived
Secure, Unified, Powerful and Extensible Rust Android Analyzer
+1 stars
from 427 · score 0.69
+1 stars
from 424 · score 0.69
1163.JoelGMSec / Cloudtopolis
Zero Infrastructure Password Cracking
+1 stars
from 417 · score 0.69
1164.pfalcon / ScratchABit
Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API
- reverse-engineering
- disassembler
- ida-plugin
- ida
- idapython
+1 stars
from 412 · score 0.69
1165.rarecoil / pantagrule
large hashcat rulesets generated from real-world compromised passwords
- hashcat
- hashcat-rules
- password-cracking
- security-research
- passwords
+1 stars
from 401 · score 0.69
1166.google / hiba
HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.
+1 stars
from 389 · score 0.69
1167.ANSSI-FR / polichombrArchived
Collaborative malware analysis framework
+1 stars
from 382 · score 0.69
1168.alexMyG / AndroPyTool
A framework for automated extraction of static and dynamic features from Android applications
- android-malware-detection
- android-analysis
+1 stars
from 381 · score 0.69
1169.hoangvvo / next-session
Simple promise-based session middleware for Next.js, micro, Express, and more
- javascript
- middleware
- session
- promise
- nextjs
+1 stars
from 358 · score 0.69
+1 stars
from 352 · score 0.69
+1 stars
from 352 · score 0.69
1172.SoftFluent / EntityFrameworkCore.DataEncryption
A plugin for Microsoft.EntityFrameworkCore to add support of encrypted fields using built-in or custom encryption providers.
- entity-framework-core
- plugin
- encryption
- netstandard
- netstandard20
- dotnet-core
- +2 more
+1 stars
from 348 · score 0.69
1173.pluto / ronkathon
Cryptography Educational Foundations
+1 stars
from 347 · score 0.69
+1 stars
from 347 · score 0.69
1175.arcaneiceman / kraken
Kraken: A multi-platform distributed brute-force password cracking system
- kraken
- kraken-client
- security-tools
- security
- wpa2-cracking
- bruteforce-password-cracker
- +2 more
+1 stars
from 330 · score 0.69
+1 stars
from 330 · score 0.69
1177.ampotos / dynStruct
Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone
+1 stars
from 329 · score 0.69
1178.tijme / angularjs-csti-scanner
Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.
+1 stars
from 325 · score 0.69
1179.peburrows / goth
Elixir package for Oauth authentication via Google Cloud APIs
- gcp
- authentication
- google-cloud-platform
- elixir
+1 stars
from 324 · score 0.69
+1 stars
from 320 · score 0.69
1181.GaProgMan / OwaspHeaders.Core
Inject OWASP recommended HTTP Headers for increased security in a single line
- aspnetcore
- middleware
- owasp
- security
- nuget
- http-header
- +1 more
+1 stars
from 314 · score 0.69
1182.sp00ks-git / hat
HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems
+1 stars
from 309 · score 0.69
1183.forensicanalysis / artifactcollectorArchived
🧭 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system
- dfir
- digital-forensics
- forensicartifacts
+1 stars
from 307 · score 0.69
1184.inodee / threathunting-spl
Splunk code (SPL) for serious threat hunters and detection engineers.
- splunk
- threat-hunting
- use-case
- siem
- rules
- spl
+1 stars
from 293 · score 0.69
+1 stars
from 291 · score 0.69
1186.dwyl / elixir-auth-google
👤Minimalist Google OAuth Authentication for Elixir Apps. Tested, Documented & Maintained. Setup in 5 mins. 🚀
- elixir
- google-api
- auth
- authentication
- oauth
- +1 more
+1 stars
from 290 · score 0.69
1187.inspektor-dev / inspektor
Inspektor is a protocol-aware proxy that is used to enforce access policies👮
+1 stars
from 285 · score 0.69
1188.capacitor-community / generic-oauth2
Generic Capacitor OAuth 2 client plugin. Stop the war in Ukraine!
- capacitor
- oauth2
- oauth2-client
- capacitor-plugin
- social-login
- authentication
+1 stars
from 279 · score 0.69
1189.fundamentalslib / fundamentals5
Fundamentals 5 Code Library for FreePascal and Delphi
+1 stars
from 276 · score 0.69
1190.juunas11 / aspnetcore-security-headers
Middleware for adding security headers to an ASP.NET Core application.
+1 stars
from 276 · score 0.69
1191.tenzir / threatbusArchived
🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
- threat-intelligence
- threatintel
- threat-hunting
- ids
- zeek
- misp
- +7 more
+1 stars
from 270 · score 0.69
1192.QuasarApp / Qt-SecretArchived
Simple encryption library supporting RSA and AES algorithms.
- rsa
- aes
- qt
- cryptography
- algorithms
- alghorithm
- +5 more
+1 stars
from 268 · score 0.69
1193.codeyourweb / fastfinder
Incident Response - Fast suspicious file finder
- dfir
- investigation
- incident-response
- threat-hunting
+1 stars
from 260 · score 0.69
1194.lorien / captcha_solver
Universal python API to captcha solving services
+1 stars
from 257 · score 0.69
1195.Kwynto / gosession
This is quick session for net/http in golang. This package is perhaps the best implementation of the session mechanism, at least it tries to become one.
- go
- golang
- session
+1 stars
from 256 · score 0.69
1196.robertdavidgraham / telnetlogger
Simulates enough of a Telnet connection in order to log failed login attempts.
+1 stars
from 246 · score 0.69
1197.yuce / pot
POT is an Erlang library for generating Google Authenticator compatible one time passwords
- erlang
- 2fa
- authenticator
- elixir
+1 stars
from 242 · score 0.69
1198.Orange-Cyberdefense / fenrir-ocd
The repository host gives no description.
+1 stars
from 240 · score 0.69
1199.rastrea2r / rastrea2r
Collecting & Hunting for IOCs with gusto and style
- threat
- hunting
- ioc
- security-tools
+1 stars
from 237 · score 0.69
1200.tuupola / branca-spec
Authenticated and encrypted API tokens using modern crypto
+1 stars
from 235 · score 0.69