101.bitwarden / clients
Bitwarden client apps (web, browser extension, desktop, and cli).
- webextension
- javascript
- bitwarden
- typescript
- safari
- chrome
- +7 more
+60 stars
from 14,086 · score 4.11
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
101–200 of 775 by Attention Score · Oct 29, 2026 – Nov 4, 2026 (UTC)
102.bitwarden / server
Bitwarden infrastructure/backend (API, database, Docker, etc).
- aspnetcore
- aspnet
- sql-server
- api
- sql
- csharp
- +5 more
+59 stars
from 20,506 · score 4.09
103.veracrypt / VeraCrypt
Disk encryption with strong security based on TrueCrypt
- encryption
- encryption-decryption
- encryption-algorithms
- veracrypt
- idrix
- veracrypt-source
+57 stars
from 11,993 · score 4.06
104.chris-ritsen / samsung-tv-root
Samsung Tizen root
- embedded-linux
- firmware-analysis
- hardware-hacking
- mali-gpu
- privilege-escalation
- reverse-engineering
- +14 more
+57 stars
from 457 · score 4.06
105.ZigZagBoi1 / PS5-14.10-Research
Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.
- ps5
- ps5-homebrew
- ps5-jailbreak
- ps5-tools
+57 stars
from 386 · score 4.06
106.acmesh-official / acme.sh
A pure Unix shell script ACME client for SSL / TLS certificate automation
+56 stars
from 47,869 · score 4.04
107.digininja / DVWA
Damn Vulnerable Web Application (DVWA)
+55 stars
from 13,910 · score 4.03
108.jason5ng32 / MyIP
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
+55 stars
from 12,244 · score 4.03
109.WhiskeySockets / Baileys
Socket-based TS/JavaScript API for WhatsApp Web
- bun
- deno
- nodejs
- reverse-engineering
- typescript
- websockets
- +2 more
+55 stars
from 11,482 · score 4.03
+54 stars
from 39,260 · score 4.01
111.ntfargo / Relapse-Exploit
Exploit chain for PS5 7.00 - 13.60
+54 stars
from 2,599 · score 4.01
112.nniiovoo / encrypted-note
Offline, encrypted vault for seed phrases, private keys, passwords and API keys. Also used by agents.
+54 stars
from 359 · score 4.01
113.SWE-agent / SWE-agent
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
- agent
- ai
- developer-tools
- llm
- agent-based-model
- lms
- +1 more
+52 stars
from 20,672 · score 3.97
114.fail2ban / fail2ban
Daemon to ban hosts that cause multiple authentication errors
+52 stars
from 18,901 · score 3.97
115.horsicq / Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.
- debugger
- detect
- unpacker
- disassembler
- reverse-engineering
- elf
- +14 more
+52 stars
from 11,822 · score 3.97
116.dbx0 / executioner
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security
- pentesting
- recon
- +4 more
+50 stars
from 84 · score 3.93
117.prowler-cloud / prowler
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
- security
- security-tools
- security-audit
- security-hardening
- hardening
- aws
- +14 more
+49 stars
from 15,121 · score 3.91
118.sanjayadanushka712 / Ghost-Night
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation
- obfs4
- security-testing
- +1 more
+49 stars
from 83 · score 3.91
119.x86rc / unthemidator
An automated Themida / Code Virtualizer / WinLicense (v3.0-v4) unpacker and dump fixer tool
+48 stars
from 351 · score 3.89
120.CISOfy / lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
- shell
- linux
- pci-dss
- compliance
- security-audit
- security-hardening
- +14 more
+47 stars
from 16,580 · score 3.87
121.qeeqbox / social-analyzer
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
- osint
- social-media
- analyzer
- username
- profile
- reconnaissance
- +13 more
+46 stars
from 24,401 · score 3.85
122.zaproxy / zaproxy
The ZAP by Checkmarx Core project
+46 stars
from 16,061 · score 3.85
123.projectdiscovery / subfinder
Fast passive subdomain enumeration tool.
+46 stars
from 14,673 · score 3.85
124.ikow / php2shell-poc
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
- php-exploit
- php-security
- +8 more
+46 stars
from 1,890 · score 3.85
+45 stars
from 14,565 · score 3.83
126.calesthio / Crucix
Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes.
+45 stars
from 12,152 · score 3.83
+45 stars
from 9,260 · score 3.83
128.anchore / grype
A vulnerability scanner for container images and filesystems
- containers
- security
- vulnerability
- docker
- golang
- go
- +9 more
+44 stars
from 13,133 · score 3.81
129.Zfinix / eleven
Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
+43 stars
from 920 · score 3.78
130.htr-tech / zphisher
An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !
- phishing
- phisher
- phishing-attacks
- htr-tech
- phishing-pages
- zphisher
+42 stars
from 17,098 · score 3.76
131.zitadel / zitadel
ZITADEL - Identity infrastructure, simplified for you.
- saml
- authentication
- authorization
- login
- oidc
- sso
- +11 more
+42 stars
from 15,466 · score 3.76
132.projectdiscovery / nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- nuclei-templates
- nuclei
- bugbounty
- security
- nuclei-checks
- exploits
- +4 more
+42 stars
from 13,243 · score 3.76
133.sqlmapproject / sqlmap
Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
- database
- pentesting
- +9 more
+40 stars
from 38,809 · score 3.71
134.SigmaHQ / sigma
Main Sigma Rule Repository
- security
- monitoring
- siem
- logging
- signatures
- elasticsearch
- +3 more
+40 stars
from 11,364 · score 3.71
135.9bie / php2shell-bypass-aslr-exp
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
+40 stars
from 1,513 · score 3.71
136.rizinorg / cutter
Free and Open Source Reverse Engineering Platform powered by rizin
+39 stars
from 20,112 · score 3.69
137.BishopFox / sliver
Adversary Emulation Framework
- security-tools
- implant
- golang
- dns-server
- http
- c2
- +9 more
+39 stars
from 12,193 · score 3.69
138.openwall / john
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
- john
- c
- ripper
- password
- jtr
- opencl
- +10 more
+37 stars
from 13,830 · score 3.64
139.telekom-security / tpotce
🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
+37 stars
from 9,657 · score 3.64
140.goharbor / harbor
An open source trusted cloud native registry project that stores, signs, and scans content.
- cncf
- container
- registry
- helm
- cloud-native
- containers
- +6 more
+36 stars
from 29,635 · score 3.61
141.MatrixTM / MHDDoS
Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 60 Methods
- ddos
- ddos-attacks
- ddos-tool
- attack
- cloudflare-bypass
- layer4
- +13 more
+35 stars
from 16,922 · score 3.58
142.owasp-amass / amass
In-depth attack surface mapping and asset discovery
+35 stars
from 15,429 · score 3.58
+34 stars
from 16,954 · score 3.56
144.kgretzky / evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
+34 stars
from 15,797 · score 3.56
+34 stars
from 14,350 · score 3.56
146.logto-io / logto
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
- authentication
- authorization
- identity
- openid-connect
- passwordless
- social-login
- +14 more
+33 stars
from 14,809 · score 3.53
147.Gallopsled / pwntools
CTF framework and exploit development library
+33 stars
from 13,795 · score 3.53
148.bee-san / Ciphey
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
- decryption
- natural-language-processing
- cryptography
- cipher
- artificial-intelligence
- ctf-tools
- +11 more
+32 stars
from 21,711 · score 3.50
149.redcanaryco / atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
- mitre
- mitre-attack
+32 stars
from 12,738 · score 3.50
150.1N3 / Sn1per
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
- cybersecurity
- pentest-tool
- +13 more
+31 stars
from 11,490 · score 3.47
151.pwndbg / pwndbg
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
- python
- gdb
- pwndbg
- reverse-engineering
- debugging
- ctf
- +12 more
+31 stars
from 11,119 · score 3.47
152.openfga / openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
- authorization
- permissions
- security
- zanzibar
- openfga
- entitlements
- +11 more
+30 stars
from 6,058 · score 3.43
153.NCSC-NL / php2shell
Operational information regarding the 2026 php2shell vulnerabilities
+30 stars
from 327 · score 3.43
154.pterodactyl / panel
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
- laravel
- opensource
- mit
- docker
- free
- tailwindcss
- +6 more
+29 stars
from 9,437 · score 3.40
155.cilium / tetragon
eBPF-based Security Observability and Runtime Enforcement
+29 stars
from 5,125 · score 3.40
156.osquery / osquery
SQL powered operating system instrumentation, monitoring, and analytics.
- security
- monitoring
- intrusion-detection
- sql
- hacktoberfest
+28 stars
from 23,697 · score 3.37
+28 stars
from 19,756 · score 3.37
158.ytisf / theZoo
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
- malware
- malware-analysis
- malware-samples
- malware-research
- thezoo
- malwareanalysis
+28 stars
from 13,512 · score 3.37
159.Manisso / fsociety
fsociety Hacking Tools Pack – A Penetration Testing Framework
- fsociety
- exploitation
- port-scanning
- fsociety-hacking
- post-exploitation
- web-hacking
- +7 more
+28 stars
from 12,366 · score 3.37
160.peass-ng / PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
+27 stars
from 20,734 · score 3.33
161.bettercap / bettercap
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
+27 stars
from 20,212 · score 3.33
162.yuatemycat / SuperGhidra
SuperGhidra: Autonomous Agent Reverse Engineering, Lock-Free Ghidra Daemon & C++ Recovery Suite
- arm64
- binary-analysis
- decompiler
- disassembler
- ghidra
- mcp
- +7 more
+27 stars
from 164 · score 3.33
163.FiloSottile / mkcert
A simple zero-config tool to make locally trusted development certificates with any names you'd like.
- https
- tls
- certificates
- local-development
- localhost
- root-ca
- +6 more
+26 stars
from 59,799 · score 3.30
164.gravitational / teleport
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
- certificate
- golang
- +14 more
+26 stars
from 21,042 · score 3.30
165.SpacehuhnTech / esp8266_deauther
Affordable WiFi hacking platform for testing and learning
+26 stars
from 15,058 · score 3.30
166.Velocidex / velociraptor
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
- endpoint-protection
- endpoint-discovery
- +1 more
+26 stars
from 4,386 · score 3.30
167.assetnote / php2shell-scanner
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
+26 stars
from 958 · score 3.30
168.vxunderground / MalwareSourceCode
Collection of malware source code for a variety of platforms in an array of different programming languages.
- malware
- malware-research
- malware-development
- malware-detection
+25 stars
from 18,867 · score 3.26
+25 stars
from 5,134 · score 3.26
170.eness / php2shell-CVE-2026-109618-CVE-2026-109619-PoC
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
+25 stars
from 1,042 · score 3.26
171.arkenfox / user.js
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
+24 stars
from 12,934 · score 3.22
172.Cyan4973 / xxHash
Extremely fast non-cryptographic hash algorithm
- xxhash
- smhasher
- hash-functions
- c
- dispersion
- hash
- +1 more
+24 stars
from 11,383 · score 3.22
173.apache / caldera
Automated Adversary Emulation Platform
- adversary-emulation
- caldera
- security-automation
- red-team
- mitre-attack
- security-testing
- +1 more
+24 stars
from 7,468 · score 3.22
174.sbondCo / Watcharr
Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.
+24 stars
from 1,563 · score 3.22
175.maurosoria / dirsearch
Web path scanner
+23 stars
from 15,020 · score 3.18
176.stakater / Reloader
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
- kubernetes
- openshift
- configmap
- secrets
- pods
- deployments
- +5 more
+22 stars
from 10,525 · score 3.14
177.cowrie / cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
+22 stars
from 6,639 · score 3.14
178.redlib-org / redlib
Private front-end for Reddit
- privacy
- privacy-friendly-alternatives
- privacy-frontend
- rust
+22 stars
from 3,948 · score 3.14
179.zzusec / apk-reverse
Suitable for Android APK reverse engineering analysis
+22 stars
from 215 · score 3.14
180.vanhauser-thc / thc-hydra
hydra
- penetration-testing
- password-cracker
- network-security
- hydra
- thc
- pentesting
- +10 more
+21 stars
from 12,440 · score 3.09
181.mandiant / capa
The FLARE team's open-source tool to identify capabilities in executable files.
- malware-analysis
- reverse-engineering
- binary-analysis
- threat-intelligence
- gsoc-2026
+21 stars
from 6,278 · score 3.09
182.volatilityfoundation / volatility3
Volatility 3.0 development
- digital-investigation
- forensics
- incident-response
- malware
- memory
- python
- +3 more
+21 stars
from 4,547 · score 3.09
183.aarsaputra / php2shell
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
- php2shell-cve-2026
- php2shell-vulnerability
- +9 more
+21 stars
from 106 · score 3.09
184.trustedsec / social-engineer-toolkit
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
+20 stars
from 15,414 · score 3.04
185.lanmaster53 / recon-ng
Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
+20 stars
from 6,019 · score 3.04
186.kevoreilly / CAPEv2
Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
- malware-research
- reverse-engineering
- +3 more
+20 stars
from 3,630 · score 3.04
+19 stars
from 10,811 · score 3.00
188.go-acme / lego
Let's Encrypt/ACME client and library written in Go
+19 stars
from 9,983 · score 3.00
189.capstone-engine / capstone
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
- reverse-engineering
- disassembler
- security
- framework
- arm
- arm64
- +14 more
+19 stars
from 9,148 · score 3.00
190.bridgecrewio / checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
- terraform
- static-analysis
- aws
- gcp
- azure
- aws-security
- +7 more
+19 stars
from 9,117 · score 3.00
191.rustls / rustls
A modern TLS library in Rust
+19 stars
from 7,717 · score 3.00
192.authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- zanzibar
- permissions
- database
- distributed-systems
- security
- security-tools
- +12 more
+19 stars
from 7,176 · score 3.00
193.MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
- malware-analysis
- stix
- +14 more
+19 stars
from 6,623 · score 3.00
194.passbolt / passbolt_api
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
- password-manager
- passbolt
- security
- cakephp
- productivity
- php
- +3 more
+19 stars
from 6,193 · score 3.00
195.Bubka / 2FAuth
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
- otp
- 2fa
- 2factor
- totp
- hotp
- self-hosted
- +4 more
+19 stars
from 4,196 · score 3.00
196.openai / php2shell-checker
The repository host gives no description.
+19 stars
from 1,443 · score 3.00
197.hashicorp / vault
A tool for secrets management, encryption as a service, and privileged access management
- vault
- go
- secrets
+18 stars
from 36,448 · score 2.94
198.open-policy-agent / opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
- opa
- policy
- declarative
- json
- compliance
- cloud-native
- +2 more
+18 stars
from 12,411 · score 2.94
199.wpscanteam / wpscan
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
- wordpress
- wpscan
- security
- security-scanner
- hacking-tool
- scanner
- +2 more
+18 stars
from 9,816 · score 2.94
200.falcosecurity / falco
Cloud Native Runtime Security
- cncf
- containers
- security
- falco
- ebpf
- kubernetes
- +4 more
+18 stars
from 9,533 · score 2.94