101.digininja / DVWA
Damn Vulnerable Web Application (DVWA)
+544 stars
from 13,418 · score 6.30
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
101–200 of 1,368 by Attention Score · Aug 6, 2026 – Nov 3, 2026 (UTC)
102.maurosoria / dirsearch
Web path scanner
+532 stars
from 14,508 · score 6.28
103.anchore / grype
A vulnerability scanner for container images and filesystems
- containers
- security
- vulnerability
- docker
- golang
- go
- +9 more
+523 stars
from 12,647 · score 6.26
104.aliasvault / aliasvault
Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.
- argon2id
- blazor
- dotnet
- password-manager
- srp
- wasm
- +5 more
+492 stars
from 2,956 · score 6.20
105.hashicorp / vault
A tool for secrets management, encryption as a service, and privileged access management
- vault
- go
- secrets
+481 stars
from 35,979 · score 6.18
106.kgretzky / evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
+465 stars
from 15,359 · score 6.14
107.redcanaryco / atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
- mitre
- mitre-attack
+451 stars
from 12,313 · score 6.11
108.openwall / john
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
- john
- c
- ripper
- password
- jtr
- opencl
- +10 more
+446 stars
from 13,416 · score 6.10
+445 stars
from 14,155 · score 6.10
110.redlib-org / redlib
Private front-end for Reddit
- privacy
- privacy-friendly-alternatives
- privacy-frontend
- rust
+434 stars
from 3,532 · score 6.08
111.pwndbg / pwndbg
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
- python
- gdb
- pwndbg
- reverse-engineering
- debugging
- ctf
- +12 more
+430 stars
from 10,713 · score 6.07
112.pterodactyl / panel
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
- laravel
- opensource
- mit
- docker
- free
- tailwindcss
- +6 more
+418 stars
from 9,045 · score 6.04
113.vanhauser-thc / thc-hydra
hydra
- penetration-testing
- password-cracker
- network-security
- hydra
- thc
- pentesting
- +10 more
+401 stars
from 12,058 · score 6.00
114.AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity
- exploit
- hacking
- +14 more
+385 stars
from 6,039 · score 5.96
115.rizinorg / rizin
UNIX-like reverse engineering framework and command-line toolset.
- reverse-engineering
- program-analysis
- security
- exploitation
- debugging
+380 stars
from 3,740 · score 5.94
116.open-policy-agent / opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
- opa
- policy
- declarative
- json
- compliance
- cloud-native
- +2 more
+377 stars
from 12,048 · score 5.93
117.FrancescoStabile / numasec
The AI Agent for Cyber Security.
- ai-agent
- ai-security
- appsec
- bug-bounty
- cybersecurity
- devsecops
- +14 more
+375 stars
from 454 · score 5.93
+368 stars
from 13,900 · score 5.91
119.vxunderground / MalwareSourceCode
Collection of malware source code for a variety of platforms in an array of different programming languages.
- malware
- malware-research
- malware-development
- malware-detection
+361 stars
from 18,526 · score 5.89
+353 stars
from 14,025 · score 5.87
121.trustedsec / social-engineer-toolkit
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
+352 stars
from 15,078 · score 5.87
122.gravitational / teleport
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
- certificate
- golang
- +14 more
+343 stars
from 20,724 · score 5.84
123.tutao / tutanota
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
- javascript
- mithril
- encryption
- tutanota
- security
- +1 more
+343 stars
from 7,767 · score 5.84
124.telekom-security / tpotce
🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
+340 stars
from 9,355 · score 5.83
125.apache / caldera
Automated Adversary Emulation Platform
- adversary-emulation
- caldera
- security-automation
- red-team
- mitre-attack
- security-testing
- +1 more
+340 stars
from 7,149 · score 5.83
126.ozeranskii / httptap
Rich-powered CLI that breaks each HTTP request into DNS, connect, TLS, wait, and transfer phases with waterfall timelines, compact summaries, or metrics-only output.
- cli
- diagnostics
- http
- http2
- monitoring
- networking
- +5 more
+338 stars
from 509 · score 5.83
127.moonD4rk / HackBrowserData
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
- chrome
- macos
- windows
- pentest-tool
- hacking
- edge
- +4 more
+332 stars
from 14,339 · score 5.81
128.falcosecurity / falco
Cloud Native Runtime Security
- cncf
- containers
- security
- falco
- ebpf
- kubernetes
- +4 more
+332 stars
from 9,218 · score 5.81
129.osquery / osquery
SQL powered operating system instrumentation, monitoring, and analytics.
- security
- monitoring
- intrusion-detection
- sql
- hacktoberfest
+330 stars
from 23,390 · score 5.80
130.yokoffing / Betterfox
Firefox user.js for optimal privacy and security. Your favorite browser, but better.
+329 stars
from 10,637 · score 5.80
131.szTheory / exifcleaner
Cross-platform desktop GUI app to clean image metadata
- exif
- exiftool
- electron
- javascript
- nodejs
- desktop-app
- +14 more
+324 stars
from 2,531 · score 5.78
+322 stars
from 8,978 · score 5.78
133.ytisf / theZoo
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
- malware
- malware-analysis
- malware-samples
- malware-research
- thezoo
- malwareanalysis
+310 stars
from 13,230 · score 5.74
134.kubescape / kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- kubernetes
- security
- nsa
- mitre-attack
- devops
- best-practice
- +1 more
+301 stars
from 11,541 · score 5.71
135.arkenfox / user.js
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
+291 stars
from 12,663 · score 5.68
136.s0md3v / Photon
Incredibly fast crawler designed for OSINT.
+287 stars
from 13,031 · score 5.66
137.elastic / detection-rules
The repository host gives no description.
- threat-detection
- threat-hunting
+286 stars
from 2,669 · score 5.66
138.volatilityfoundation / volatility3
Volatility 3.0 development
- digital-investigation
- forensics
- incident-response
- malware
- memory
- python
- +3 more
+282 stars
from 4,284 · score 5.65
139.PrivateBin / PrivateBin
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
- self-hosted
- self-hosting
- pastebin
- security
- one-time
- self-destroy
- +6 more
+276 stars
from 8,456 · score 5.62
140.cilium / tetragon
eBPF-based Security Observability and Runtime Enforcement
+276 stars
from 4,874 · score 5.62
141.Velocidex / velociraptor
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
- endpoint-protection
- endpoint-discovery
- +1 more
+275 stars
from 4,134 · score 5.62
142.BlessedRebuS / Krawl
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
- anti-crawling
- cloud-native
- crawler
- deception
- honeypot
- kubernetes
- +11 more
+274 stars
from 552 · score 5.62
143.stakater / Reloader
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
- kubernetes
- openshift
- configmap
- secrets
- pods
- deployments
- +5 more
+272 stars
from 10,273 · score 5.61
144.authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- zanzibar
- permissions
- database
- distributed-systems
- security
- security-tools
- +12 more
+272 stars
from 6,920 · score 5.61
145.capstone-engine / capstone
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
- reverse-engineering
- disassembler
- security
- framework
- arm
- arm64
- +14 more
+267 stars
from 8,897 · score 5.59
146.cure53 / DOMPurify
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
+263 stars
from 17,239 · score 5.58
+260 stars
from 21,690 · score 5.56
148.Cyan4973 / xxHash
Extremely fast non-cryptographic hash algorithm
- xxhash
- smhasher
- hash-functions
- c
- dispersion
- hash
- +1 more
+259 stars
from 11,144 · score 5.56
149.kevoreilly / CAPEv2
Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
- malware-research
- reverse-engineering
- +3 more
+258 stars
from 3,390 · score 5.56
150.screetsec / TheFatRat
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
- thefatrat
- bypass
- linux
- autorun
- bypass-av
- antivirus
- +14 more
+253 stars
from 11,324 · score 5.54
151.bee-san / Ciphey
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
- decryption
- natural-language-processing
- cryptography
- cipher
- artificial-intelligence
- ctf-tools
- +11 more
+250 stars
from 21,490 · score 5.53
152.dexidp / dex
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
- oidc
- kubernetes
- idp
- identity-provider
- hacktoberfest
+248 stars
from 10,981 · score 5.52
153.wifiphisher / wifiphisher
The Rogue Access Point Framework
- wifiphisher
- wifi
- rogue
- access-point
- python
- security
- +4 more
+246 stars
from 14,691 · score 5.51
154.androguard / androguard
Reverse engineering and pentesting for Android applications
- android
- dalvik
- reverse-engineering
- dex
- odex
- pentesting
+242 stars
from 6,160 · score 5.49
+240 stars
from 10,587 · score 5.48
156.bridgecrewio / checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
- terraform
- static-analysis
- aws
- gcp
- azure
- aws-security
- +7 more
+237 stars
from 8,894 · score 5.47
157.go-acme / lego
Let's Encrypt/ACME client and library written in Go
+236 stars
from 9,763 · score 5.47
158.lanmaster53 / recon-ng
Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
+236 stars
from 5,800 · score 5.47
+232 stars
from 9,761 · score 5.45
160.SpacehuhnTech / WiFiDuck
Wireless keystroke injection attack platform
+230 stars
from 3,109 · score 5.44
161.lucasg / Dependencies
A rewrite of the old legacy software "depends.exe" in C# for Windows devs to troubleshoot dll load dependencies issues.
+229 stars
from 11,707 · score 5.44
162.Gallopsled / pwntools
CTF framework and exploit development library
+227 stars
from 13,597 · score 5.43
163.LinkStackOrg / LinkStack
LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
- php
- blade
- laravel
- self-hosted
- webapp
- open-source
- +6 more
+226 stars
from 3,709 · score 5.42
164.Mbed-TLS / mbedtls
An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
+219 stars
from 6,831 · score 5.39
165.ory / hydra
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
- hydra
- oauth2
- openid-connect
- docker
- server
- security
- +14 more
+218 stars
from 17,428 · score 5.39
166.sensepost / objection
📱 objection - runtime mobile exploration
+218 stars
from 9,263 · score 5.39
167.SpacehuhnTech / esp8266_deauther
Affordable WiFi hacking platform for testing and learning
+216 stars
from 14,864 · score 5.38
168.rustls / rustls
A modern TLS library in Rust
+214 stars
from 7,520 · score 5.37
169.dromara / Sa-Token
Translated✨ An open-source, free, one-stop Java permission authentication framework that makes authentication and authorization simple and elegant! — Login authentication, permission authentication, distributed Session, microservice gateway authentication, SSO single sign-on, OAuth2.0 unified authentication, jwt integration, API Key authorization, API parameter signing
- java
- token
- authorization
- sso
- aouth2
- springcloud
+213 stars
from 18,895 · score 5.37
170.apache / casbin
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
- casbin
- access-control
- authorization
- rbac
- abac
- acl
- +12 more
+212 stars
from 20,263 · score 5.36
171.jedisct1 / libsodium
A modern, portable, easy to use crypto library.
- crypto
- cryptography
- c
- zig-package
+210 stars
from 13,829 · score 5.35
172.MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
- malware-analysis
- stix
- +14 more
+207 stars
from 6,432 · score 5.34
173.Manisso / fsociety
fsociety Hacking Tools Pack – A Penetration Testing Framework
- fsociety
- exploitation
- port-scanning
- fsociety-hacking
- post-exploitation
- web-hacking
- +7 more
+206 stars
from 12,178 · score 5.33
174.dwisiswant0 / apkleaks
Scanning APK file for URIs, endpoints & secrets.
- mobile-security
- android-security
- reverse-engineering
- bugbounty
- static-analysis
- apk
- +2 more
+200 stars
from 6,178 · score 5.30
175.certbot / certbot
Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
- acme
- acme-client
- certbot
- certificate
- letsencrypt
- python
+198 stars
from 33,110 · score 5.29
176.cowrie / cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
+196 stars
from 6,464 · score 5.28
177.javascript-obfuscator / javascript-obfuscator
A powerful obfuscator for JavaScript and Node.js
- javascript-obfuscator
- obfuscation
- uglify
- javascript
- protection
- obfuscate
- +14 more
+195 stars
from 16,126 · score 5.28
178.jhaals / yopass
Secure sharing of secrets, passwords and files
- password-share
- encryption-decryption
- file-upload
- onetimelink
- onetimesecret
- secret-sharing
+190 stars
from 3,028 · score 5.25
179.mandiant / capa
The FLARE team's open-source tool to identify capabilities in executable files.
- malware-analysis
- reverse-engineering
- binary-analysis
- threat-intelligence
- gsoc-2026
+188 stars
from 6,111 · score 5.24
+183 stars
from 4,752 · score 5.21
181.ory / kratos
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
- identity
- identity-management
- user-management
- users
- user
- login
- +5 more
+178 stars
from 13,771 · score 5.19
182.passbolt / passbolt_api
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
- password-manager
- passbolt
- security
- cakephp
- productivity
- php
- +3 more
+178 stars
from 6,029 · score 5.19
183.Mail-0 / Zero
Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord
+177 stars
from 10,702 · score 5.18
184.s0md3v / XSStrike
Most advanced XSS scanner.
- xss
- xss-scanner
- xss-exploit
- xss-bruteforce
- xss-python
- xss-detection
- +2 more
+176 stars
from 15,063 · score 5.18
185.BLAKE3-team / BLAKE3
the official Rust and C implementations of the BLAKE3 cryptographic hash function
+176 stars
from 6,331 · score 5.18
186.RsaCtfTool / RsaCtfTool
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
- rsa-attack
- rsa
- cryptography
+175 stars
from 7,033 · score 5.17
187.Vineflower / vineflower
Modern Java decompiler aiming to be as accurate as possible, with an emphasis on output quality. Fork of the Fernflower decompiler.
- decompiler
- fernflower
- java
- hacktoberfest
+173 stars
from 2,278 · score 5.16
188.cert-manager / cert-manager
Automatically provision and manage TLS certificates in Kubernetes
- kubernetes
- letsencrypt
- tls
- certificate
- crd
- hacktoberfest
+172 stars
from 13,974 · score 5.15
+171 stars
from 9,810 · score 5.15
190.Col-E / Recaf
The modern Java bytecode editor
- java
- bytecode
- bytecode-engineering
- reverse-engineering
- jvm-bytecode
- decompile
- +8 more
+169 stars
from 7,287 · score 5.14
191.Ullaakut / cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
- penetration-testing
- security
- hacking
- infosec
- rtsp
- cctv
- +5 more
+164 stars
from 5,123 · score 5.11
192.coipond / coi
Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops threats automatically.
- claude
- claude-code
- ai-tools
- anthropic
- coding-assistant
- containers
- +14 more
+164 stars
from 609 · score 5.11
193.Bubka / 2FAuth
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
- otp
- 2fa
- 2factor
- totp
- hotp
- self-hosted
- +4 more
+162 stars
from 4,053 · score 5.09
194.pyca / cryptography
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
- python
- cryptography
+161 stars
from 7,671 · score 5.09
195.Yamato-Security / hayabusa
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
+159 stars
from 3,277 · score 5.08
+157 stars
from 10,907 · score 5.06
197.Mebus / cupp
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
- password-strength
- weak-passwords
+157 stars
from 6,461 · score 5.06
198.google / nsjail
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
+157 stars
from 4,024 · score 5.06
199.wpscanteam / wpscan
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
- wordpress
- wpscan
- security
- security-scanner
- hacking-tool
- scanner
- +2 more
+154 stars
from 9,678 · score 5.04
200.Tencent / BqLog
A lightweight, high-performance, industrial-grade cross-language logging library (C++/Java/C#/Kotlin/TS/Python/Go), battle-tested in Honor of Kings.
- cross-platform
- high-performance
- java
- logging
- cpp
- csharp
- +14 more
+154 stars
from 565 · score 5.04