+1,037 stars
from 18,739 · score 6.95
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
101–200 of 1,291 by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
102.digininja / DVWA
Damn Vulnerable Web Application (DVWA)
+1,021 stars
from 12,941 · score 6.93
103.moonD4rk / HackBrowserData
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
- chrome
- macos
- windows
- pentest-tool
- hacking
- edge
- +4 more
+999 stars
from 13,672 · score 6.91
104.openfga / openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
- authorization
- permissions
- security
- zanzibar
- openfga
- entitlements
- +11 more
+989 stars
from 5,096 · score 6.90
105.redcanaryco / atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
- mitre
- mitre-attack
+930 stars
from 11,834 · score 6.84
106.maurosoria / dirsearch
Web path scanner
+906 stars
from 14,134 · score 6.81
107.kgretzky / evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
+905 stars
from 14,919 · score 6.81
108.gravitational / teleport
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
- certificate
- golang
- +14 more
+902 stars
from 20,165 · score 6.81
109.openwall / john
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
- john
- c
- ripper
- password
- jtr
- opencl
- +10 more
+884 stars
from 12,978 · score 6.79
110.vxunderground / MalwareSourceCode
Collection of malware source code for a variety of platforms in an array of different programming languages.
- malware
- malware-research
- malware-development
- malware-detection
+862 stars
from 18,025 · score 6.76
111.vanhauser-thc / thc-hydra
hydra
- penetration-testing
- password-cracker
- network-security
- hydra
- thc
- pentesting
- +10 more
+808 stars
from 11,651 · score 6.70
112.pwndbg / pwndbg
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
- python
- gdb
- pwndbg
- reverse-engineering
- debugging
- ctf
- +12 more
+807 stars
from 10,336 · score 6.69
113.open-policy-agent / opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
- opa
- policy
- declarative
- json
- compliance
- cloud-native
- +2 more
+790 stars
from 11,635 · score 6.67
114.yokoffing / Betterfox
Firefox user.js for optimal privacy and security. Your favorite browser, but better.
+773 stars
from 10,193 · score 6.65
115.Mebus / cupp
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
- password-strength
- weak-passwords
+762 stars
from 5,856 · score 6.64
+753 stars
from 13,847 · score 6.63
117.trustedsec / social-engineer-toolkit
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
+733 stars
from 14,697 · score 6.60
118.redlib-org / redlib
Private front-end for Reddit
- privacy
- privacy-friendly-alternatives
- privacy-frontend
- rust
+719 stars
from 3,247 · score 6.58
+714 stars
from 13,554 · score 6.57
120.pterodactyl / panel
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
- laravel
- opensource
- mit
- docker
- free
- tailwindcss
- +6 more
+704 stars
from 8,759 · score 6.56
+693 stars
from 8,607 · score 6.54
+669 stars
from 13,709 · score 6.51
123.falcosecurity / falco
Cloud Native Runtime Security
- cncf
- containers
- security
- falco
- ebpf
- kubernetes
- +4 more
+667 stars
from 8,883 · score 6.50
124.tutao / tutanota
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
- javascript
- mithril
- encryption
- tutanota
- security
- +1 more
+663 stars
from 7,447 · score 6.50
125.arkenfox / user.js
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
+650 stars
from 12,304 · score 6.48
126.AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity
- exploit
- hacking
- +14 more
+644 stars
from 5,780 · score 6.47
127.FrancescoStabile / numasec
The AI Agent for Cyber Security.
- ai-agent
- ai-security
- appsec
- bug-bounty
- cybersecurity
- devsecops
- +14 more
+638 stars
from 191 · score 6.46
128.telekom-security / tpotce
🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
+633 stars
from 9,062 · score 6.45
129.ytisf / theZoo
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
- malware
- malware-analysis
- malware-samples
- malware-research
- thezoo
- malwareanalysis
+626 stars
from 12,914 · score 6.44
130.cure53 / DOMPurify
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
+620 stars
from 16,882 · score 6.43
131.ory / hydra
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
- hydra
- oauth2
- openid-connect
- docker
- server
- security
- +14 more
+589 stars
from 17,057 · score 6.38
132.apache / caldera
Automated Adversary Emulation Platform
- adversary-emulation
- caldera
- security-automation
- red-team
- mitre-attack
- security-testing
- +1 more
+589 stars
from 6,900 · score 6.38
133.rizinorg / rizin
UNIX-like reverse engineering framework and command-line toolset.
- reverse-engineering
- program-analysis
- security
- exploitation
- debugging
+585 stars
from 3,535 · score 6.37
134.stakater / Reloader
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
- kubernetes
- openshift
- configmap
- secrets
- pods
- deployments
- +5 more
+576 stars
from 9,969 · score 6.36
+563 stars
from 10,264 · score 6.34
136.osquery / osquery
SQL powered operating system instrumentation, monitoring, and analytics.
- security
- monitoring
- intrusion-detection
- sql
- hacktoberfest
+559 stars
from 23,161 · score 6.33
137.s0md3v / Photon
Incredibly fast crawler designed for OSINT.
+555 stars
from 12,763 · score 6.32
138.evyatarmeged / Raccoon
A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
- enumeration
- pentesting
- +9 more
+548 stars
from 3,518 · score 6.31
+541 stars
from 21,409 · score 6.30
140.lucasg / Dependencies
A rewrite of the old legacy software "depends.exe" in C# for Windows devs to troubleshoot dll load dependencies issues.
+538 stars
from 11,398 · score 6.29
141.cilium / tetragon
eBPF-based Security Observability and Runtime Enforcement
+536 stars
from 4,614 · score 6.29
142.PrivateBin / PrivateBin
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
- self-hosted
- self-hosting
- pastebin
- security
- one-time
- self-destroy
- +6 more
+535 stars
from 8,197 · score 6.28
143.authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- zanzibar
- permissions
- database
- distributed-systems
- security
- security-tools
- +12 more
+532 stars
from 6,660 · score 6.28
144.lanmaster53 / recon-ng
Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
+530 stars
from 5,506 · score 6.27
145.kubescape / kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- kubernetes
- security
- nsa
- mitre-attack
- devops
- best-practice
- +1 more
+520 stars
from 11,322 · score 6.26
146.capstone-engine / capstone
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
- reverse-engineering
- disassembler
- security
- framework
- arm
- arm64
- +14 more
+515 stars
from 8,649 · score 6.25
+507 stars
from 29,150 · score 6.23
148.go-acme / lego
Let's Encrypt/ACME client and library written in Go
+507 stars
from 9,492 · score 6.23
149.bee-san / Ciphey
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
- decryption
- natural-language-processing
- cryptography
- cipher
- artificial-intelligence
- ctf-tools
- +11 more
+504 stars
from 21,236 · score 6.22
150.kevoreilly / CAPEv2
Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
- malware-research
- reverse-engineering
- +3 more
+499 stars
from 3,149 · score 6.21
151.screetsec / TheFatRat
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
- thefatrat
- bypass
- linux
- autorun
- bypass-av
- antivirus
- +14 more
+497 stars
from 11,080 · score 6.21
152.Velocidex / velociraptor
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
- endpoint-protection
- endpoint-discovery
- +1 more
+496 stars
from 3,913 · score 6.21
153.volatilityfoundation / volatility3
Volatility 3.0 development
- digital-investigation
- forensics
- incident-response
- malware
- memory
- python
- +3 more
+493 stars
from 4,073 · score 6.20
154.dexidp / dex
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
- oidc
- kubernetes
- idp
- identity-provider
- hacktoberfest
+492 stars
from 10,737 · score 6.20
155.apache / casbin
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
- casbin
- access-control
- authorization
- rbac
- abac
- acl
- +12 more
+490 stars
from 19,985 · score 6.20
156.SpacehuhnTech / WiFiDuck
Wireless keystroke injection attack platform
+480 stars
from 2,859 · score 6.18
157.sensepost / objection
📱 objection - runtime mobile exploration
+475 stars
from 9,006 · score 6.17
158.bridgecrewio / checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
- terraform
- static-analysis
- aws
- gcp
- azure
- aws-security
- +7 more
+475 stars
from 8,656 · score 6.17
159.jhaals / yopass
Secure sharing of secrets, passwords and files
- password-share
- encryption-decryption
- file-upload
- onetimelink
- onetimesecret
- secret-sharing
+475 stars
from 2,743 · score 6.17
160.Gallopsled / pwntools
CTF framework and exploit development library
+473 stars
from 13,351 · score 6.16
161.Mail-0 / Zero
Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord
+471 stars
from 10,408 · score 6.16
162.Cyan4973 / xxHash
Extremely fast non-cryptographic hash algorithm
- xxhash
- smhasher
- hash-functions
- c
- dispersion
- hash
- +1 more
+469 stars
from 10,934 · score 6.15
163.Mbed-TLS / mbedtls
An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
+467 stars
from 6,583 · score 6.15
+463 stars
from 9,530 · score 6.14
165.szTheory / exifcleaner
Cross-platform desktop GUI app to clean image metadata
- exif
- exiftool
- electron
- javascript
- nodejs
- desktop-app
- +14 more
+461 stars
from 2,394 · score 6.14
166.jedisct1 / libsodium
A modern, portable, easy to use crypto library.
- crypto
- cryptography
- c
- zig-package
+456 stars
from 13,583 · score 6.12
167.dromara / Sa-Token
Translated✨ An open-source, free, one-stop Java permission authentication framework that makes authentication and authorization simple and elegant! — Login authentication, permission authentication, distributed Session, microservice gateway authentication, SSO single sign-on, OAuth2.0 unified authentication, jwt integration, API Key authorization, API parameter signing
- java
- token
- authorization
- sso
- aouth2
- springcloud
+454 stars
from 18,654 · score 6.12
168.Manisso / fsociety
fsociety Hacking Tools Pack – A Penetration Testing Framework
- fsociety
- exploitation
- port-scanning
- fsociety-hacking
- post-exploitation
- web-hacking
- +7 more
+453 stars
from 11,931 · score 6.12
169.wifiphisher / wifiphisher
The Rogue Access Point Framework
- wifiphisher
- wifi
- rogue
- access-point
- python
- security
- +4 more
+451 stars
from 14,486 · score 6.11
170.certbot / certbot
Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
- acme
- acme-client
- certbot
- certificate
- letsencrypt
- python
+420 stars
from 32,888 · score 6.04
171.javascript-obfuscator / javascript-obfuscator
A powerful obfuscator for JavaScript and Node.js
- javascript-obfuscator
- obfuscation
- uglify
- javascript
- protection
- obfuscate
- +14 more
+417 stars
from 15,904 · score 6.04
172.SpacehuhnTech / esp8266_deauther
Affordable WiFi hacking platform for testing and learning
+415 stars
from 14,665 · score 6.03
173.cert-manager / cert-manager
Automatically provision and manage TLS certificates in Kubernetes
- kubernetes
- letsencrypt
- tls
- certificate
- crd
- hacktoberfest
+414 stars
from 13,732 · score 6.03
174.ory / kratos
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
- identity
- identity-management
- user-management
- users
- user
- login
- +5 more
+413 stars
from 13,536 · score 6.03
175.MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
- malware-analysis
- stix
- +14 more
+412 stars
from 6,227 · score 6.02
176.LinkStackOrg / LinkStack
LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
- php
- blade
- laravel
- self-hosted
- webapp
- open-source
- +6 more
+408 stars
from 3,527 · score 6.01
177.s0md3v / XSStrike
Most advanced XSS scanner.
- xss
- xss-scanner
- xss-exploit
- xss-bruteforce
- xss-python
- xss-detection
- +2 more
+402 stars
from 14,837 · score 6.00
178.supertokens / supertokens-core
Open source alternative to Auth0 / Firebase Auth / AWS Cognito
- authentication
- session-management
- login
- supertokens
- java
- signin
- +13 more
+401 stars
from 14,939 · score 6.00
179.elastic / detection-rules
The repository host gives no description.
- threat-detection
- threat-hunting
+399 stars
from 2,556 · score 5.99
180.rustls / rustls
A modern TLS library in Rust
+393 stars
from 7,341 · score 5.98
+389 stars
from 9,592 · score 5.97
182.Karib0u / rustinel
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
- etw
- incident-response
- +14 more
+384 stars
from 142 · score 5.95
183.dwisiswant0 / apkleaks
Scanning APK file for URIs, endpoints & secrets.
- mobile-security
- android-security
- reverse-engineering
- bugbounty
- static-analysis
- apk
- +2 more
+375 stars
from 6,003 · score 5.93
184.androguard / androguard
Reverse engineering and pentesting for Android applications
- android
- dalvik
- reverse-engineering
- dex
- odex
- pentesting
+373 stars
from 6,029 · score 5.92
185.passbolt / passbolt_api
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
- password-manager
- passbolt
- security
- cakephp
- productivity
- php
- +3 more
+364 stars
from 5,843 · score 5.90
+363 stars
from 4,572 · score 5.90
187.Col-E / Recaf
The modern Java bytecode editor
- java
- bytecode
- bytecode-engineering
- reverse-engineering
- jvm-bytecode
- decompile
- +8 more
+362 stars
from 7,094 · score 5.89
188.cowrie / cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
+362 stars
from 6,298 · score 5.89
189.ozeranskii / httptap
Rich-powered CLI that breaks each HTTP request into DNS, connect, TLS, wait, and transfer phases with waterfall timelines, compact summaries, or metrics-only output.
- cli
- diagnostics
- http
- http2
- monitoring
- networking
- +5 more
+359 stars
from 488 · score 5.89
190.mandiant / capa
The FLARE team's open-source tool to identify capabilities in executable files.
- malware-analysis
- reverse-engineering
- binary-analysis
- threat-intelligence
- gsoc-2026
+357 stars
from 5,942 · score 5.88
191.BLAKE3-team / BLAKE3
the official Rust and C implementations of the BLAKE3 cryptographic hash function
+349 stars
from 6,158 · score 5.86
192.nextauthjs / next-auth
Authentication for the Web.
- nodejs
- nextjs
- oauth
- react
- authentication
- nextauth
- +12 more
+347 stars
from 28,026 · score 5.85
193.wpscanteam / wpscan
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
- wordpress
- wpscan
- security
- security-scanner
- hacking-tool
- scanner
- +2 more
+347 stars
from 9,485 · score 5.85
194.Bubka / 2FAuth
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
- otp
- 2fa
- 2factor
- totp
- hotp
- self-hosted
- +4 more
+347 stars
from 3,868 · score 5.85
195.Vineflower / vineflower
Modern Java decompiler aiming to be as accurate as possible, with an emphasis on output quality. Fork of the Fernflower decompiler.
- decompiler
- fernflower
- java
- hacktoberfest
+347 stars
from 2,104 · score 5.85
196.chaitin / xray
TranslatedA comprehensive security assessment tool developed in-house by Chaitin (长亭), supporting scanning for common web security issues and custom PoCs | Be sure to read the documentation before use
- security
- vulnerability
- vulnerability-scanner
- passive-vulnerability-scanner
- xss
- sqlinjection
- +1 more
+339 stars
from 11,447 · score 5.83
197.bountyyfi / lonkero
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
- cve-scanning
- pentesting-tools
- rust
- vulnerability-scanners
- websecurity
- appsec
- +14 more
+336 stars
from 763 · score 5.82
+331 stars
from 10,733 · score 5.81
199.hugsy / gef
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
- python
- exploit
- gdb
- linux
- reverse-engineering
- ctf
- +13 more
+330 stars
from 8,090 · score 5.80
200.RsaCtfTool / RsaCtfTool
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
- rsa-attack
- rsa
- cryptography
+325 stars
from 6,883 · score 5.79