301.RyanDFIR / hindsight
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
+140 stars
from 1,412 · score 4.95
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
301–400 of 1,227 by Attention Score · May 9, 2026 – Nov 4, 2026 (UTC)
302.neon-mmd / websurfx
:rocket: An open source alternative to searx which provides a modern-looking :sparkles:, lightning-fast :zap:, privacy respecting :disguised_face:, secure :lock: meta search engine
- meta-search-engine
- rust
- search-engine
- fast
- privacy
- actix-web
- +14 more
+140 stars
from 1,086 · score 4.95
303.dyc3 / steamguard-cli
A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.
+140 stars
from 942 · score 4.95
304.elceef / dnstwist
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
+138 stars
from 5,636 · score 4.93
+138 stars
from 1,700 · score 4.93
306.tennc / webshell
This is a webshell open source project
- webshell
- webshell-sniper
- php
- jsp
- asp
- aspx
- +3 more
+136 stars
from 10,661 · score 4.92
307.digitalocean / nginxconfig.io
⚙️ NGINX config generator on steroids 💉
+135 stars
from 28,115 · score 4.91
308.sleuthkit / sleuthkit
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
- sleuthkit
- tct
- ntfs
- forensics
- incident-response
+135 stars
from 3,049 · score 4.91
309.dfir-iris / iris-web
Collaborative Incident Response platform
- forensic
- incident-response
- csirt-tooling
- python
- digital-forensics
- digital-forensics-incident-response
- +2 more
+135 stars
from 1,483 · score 4.91
310.linuxserver / docker-swag
Nginx webserver and reverse proxy with php support and a built-in Certbot (Let's Encrypt) client. It also contains fail2ban for intrusion prevention.
- hacktoberfest
+133 stars
from 3,621 · score 4.90
311.deepfence / SecretScanner
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
- vulnerability-scanners
- k8s
- +10 more
+132 stars
from 3,265 · score 4.89
+131 stars
from 3,857 · score 4.88
313.Permify / permify
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
- access-control
- authorization
- rbac
- rebac
- zanzibar
- acl
- +13 more
+130 stars
from 5,837 · score 4.88
314.log2timeline / plaso
Super timeline all the things
+130 stars
from 2,056 · score 4.88
315.markbates / goth
Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.
+129 stars
from 6,493 · score 4.87
316.panva / node-oidc-provider
OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js
- openid
- oidc
- openid-provider
- openid-connect
- connect
- server
- +4 more
+129 stars
from 3,718 · score 4.87
317.pxb1988 / dex2jar
Tools to work with android .dex and java .class files
+127 stars
from 13,032 · score 4.85
318.ambionics / phpggc
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
+127 stars
from 3,790 · score 4.85
319.codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
- security-audit
- security-tools
- +14 more
+127 stars
from 3,245 · score 4.85
320.apereo / cas
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
- sso-authentication
- authentication
- authorization
- java
- websso
- saml2
- +14 more
+125 stars
from 11,269 · score 4.84
321.JonathanSalwan / ROPgadget
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
- binary-exploitation
+125 stars
from 4,390 · score 4.84
+125 stars
from 3,281 · score 4.84
323.helmetjs / helmet
Help secure Express apps with various HTTP headers
- javascript
- middleware
- security
- helmet
- http-headers
+121 stars
from 10,624 · score 4.80
324.cider-security-research / cicd-goat
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
+119 stars
from 2,213 · score 4.79
325.activecm / rita
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
- cyber-security
- network-traffic-analysis
- +10 more
+119 stars
from 548 · score 4.79
326.splunk / security_content
Splunk Security Content
- splunk
- detection
- engineering
- responses
- cicd
- cybersecurity
- +1 more
+118 stars
from 1,609 · score 4.78
327.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+115 stars
from 2,451 · score 4.75
+115 stars
from 2,388 · score 4.75
329.ZerBea / hcxtools
A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.
- wlan
- wpa
- wpa2
- raspberry-pi
- hashcat
- handshake
- +8 more
+115 stars
from 2,354 · score 4.75
330.pennersr / django-allauth
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/
- authentication
- django
- oauth2
- openid-connect
- python
- saml
- +8 more
+114 stars
from 10,269 · score 4.74
331.panva / openid-client
OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
- oidc
- openid
- openid-client
- openid-connect
- passport
- connect
- +1 more
+114 stars
from 2,326 · score 4.74
332.zitadel / oidc
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
+113 stars
from 1,807 · score 4.74
+112 stars
from 661 · score 4.73
334.teodly / inferno
[MIRROR] unofficial implementation of Dante protocol (Audio over IP)
- audio-over-ip
- dante
- reverse-engineering
- aoip
- audinate
+112 stars
from 253 · score 4.73
335.docker / docker-bench-security
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
+110 stars
from 9,596 · score 4.71
+110 stars
from 2,700 · score 4.71
337.ory / keto
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
- authorization
- fine-grained-permissions
- +8 more
+109 stars
from 5,309 · score 4.70
338.epsylon / ufonet
UFONet - Denial of Service Toolkit
- dos
- ddos
- ufonet
- botnet
- disruption
- cryptography
- +1 more
+108 stars
from 2,441 · score 4.69
+107 stars
from 5,417 · score 4.68
340.htrgouvea / nipe
An engine to make Tor network your default gateway
+107 stars
from 2,300 · score 4.68
341.mandiant / flare-fakenet-ng
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
- fakenet-ng
- traffic-redirection
- malware-analysis
- mandiant-flare
- gsoc-2026
+107 stars
from 2,116 · score 4.68
342.safedep / vet
Protect against malicious open source packages 🤖
+103 stars
from 1,021 · score 4.64
343.ossec / ossec-hids
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- hids
- security
- pci-dss
- nist800-53
- ossec
- compliance
- +5 more
+102 stars
from 4,968 · score 4.63
+102 stars
from 4,921 · score 4.63
+102 stars
from 1,354 · score 4.63
346.nilsteampassnet / TeamPass
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
- php
- access-control
- audit
- browser-extension
- compliance
- credentials
- +14 more
+101 stars
from 1,782 · score 4.62
347.auth0 / node-jsonwebtoken
JsonWebToken implementation for node.js http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html
+100 stars
from 18,082 · score 4.62
+100 stars
from 1,187 · score 4.62
349.WebDecoy / FCaptcha
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
- fingerprinting
- go
- +14 more
+100 stars
from 132 · score 4.62
+99 stars
from 2,080 · score 4.61
351.sigstore / rekor
Software Supply Chain Transparency Log
- supply-chain
- provenance
- security
- transparency-log
+99 stars
from 1,131 · score 4.61
352.RetireJS / retire.js
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
- vulnerabilities
- scanner
- firefox-extension
- grunt-plugins
- javascript
- vulnerable-libraries
- +8 more
+98 stars
from 4,105 · score 4.60
353.s0md3v / ReconDog
Reconnaissance Swiss Army Knife
- recon
- information-gathering
- honeypot-detector
- subdomain-enumeration
- cms-detector
+98 stars
from 2,029 · score 4.60
354.CERT-Polska / Artemis
A modular vulnerability scanner with automatic report generation capabilities.
- artemis
- pentesting
- security
- security-scanner
- security-tools
- vulnerability-detection
- +2 more
+98 stars
from 1,158 · score 4.60
355.bailey27 / cppcryptfs
cppcryptfs is an implementation of the gocryptfs encrypted overlay filesystem in C++ for Windows.
+98 stars
from 912 · score 4.60
356.sbousseaden / EVTX-ATTACK-SAMPLES
Windows Events Attack Samples
- threat-hunting
- evtx
- windows-security
- mitre-attack
- detection-engineering
- dataset
- +2 more
+96 stars
from 2,545 · score 4.57
357.bitcoin-core / secp256k1
Optimized C library for EC operations on curve secp256k1
+96 stars
from 2,406 · score 4.57
+95 stars
from 5,627 · score 4.56
359.in-toto / witness
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
- supply-chain
+95 stars
from 521 · score 4.56
360.heartcombo / devise
Flexible authentication solution for Rails with Warden.
- rails
- ruby
- authentication
- devise
+94 stars
from 24,259 · score 4.55
361.brix / crypto-js
JavaScript library of crypto standards.
+94 stars
from 16,306 · score 4.55
362.volatilityfoundation / volatilityArchived
An advanced memory forensics framework
- python
- malware
- volatility-framework
- memory
- ram
+94 stars
from 7,961 · score 4.55
363.paulmillr / noble-hashes
Audited & minimal JS implementation of hash functions, MACs and KDFs.
- cryptography
- hash
- kdf
- hashing
- sha256
- sha512
- +13 more
+94 stars
from 850 · score 4.55
364.hashtopolis / server
Hashtopolis - distributed password cracking with Hashcat
- cracking
- distributed
- hashcat
- pentesting
- passwords
- hashtopussy
- +8 more
+93 stars
from 1,737 · score 4.54
365.caddyserver / certmagic
Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal
- https
- acme
- letsencrypt
- golang
- go
- automatic-https
- +2 more
+92 stars
from 5,524 · score 4.53
366.pry0cc / axiom
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
- hacking-vps
- bug-bounty
- tmux
- axiom
- masscan
- gowitness
- +12 more
+92 stars
from 4,353 · score 4.53
367.Greenwolf / social_mapper
A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)
+92 stars
from 4,000 · score 4.53
+91 stars
from 2,545 · score 4.52
369.RustCrypto / hashes
Collection of cryptographic hash functions written in pure Rust
- cryptographic-hash-functions
- blake2
- gost
- streebog
- groestl
- md2
- +13 more
+91 stars
from 2,197 · score 4.52
370.spacehuhn / esp8266_beaconSpam
Creates up to a thousand WiFi access points with custom SSIDs.
- ssid
- custom-ssids
- wifi
- esp8266
- spam
- flood
- +1 more
+91 stars
from 1,298 · score 4.52
371.epinna / tplmap
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
+90 stars
from 4,126 · score 4.51
372.elastic / protections-artifacts
Elastic Security detection content for Endpoint
+90 stars
from 1,419 · score 4.51
373.uxmal / reko
Reko is a binary decompiler.
- decompiler
- dotnet
- decompiler-engine
- decompile
- reverse-engineering
- x86
- +7 more
+89 stars
from 2,546 · score 4.50
+88 stars
from 2,522 · score 4.49
375.lanjelot / patator
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
- pentest
- brute-force
+87 stars
from 3,855 · score 4.48
376.odedshimon / BruteShark
Network Analysis Tool
- hacking
- pcap-files
- pcap
- cyber
- network-analysis
- hashcat
- +11 more
+87 stars
from 3,328 · score 4.48
377.agentrhq / authsome
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
+87 stars
from 16 · score 4.48
378.deepfence / ThreatMapper
Open Source Cloud Native Application Protection Platform (CNAPP)
- cloud-native
- vulnerability-management
- threat-analysis
- devsecops
- secops
- registry-scanning
- +13 more
+86 stars
from 5,242 · score 4.47
379.objective-see / BlockBlock
BlockBlock provides continual protection by monitoring persistence locations.
+86 stars
from 790 · score 4.47
380.securitybunker / databunker
Secure Vault for Customer PII/PHI/PCI/KYC Records
+85 stars
from 1,410 · score 4.45
381.simsong / bulk_extractor
This is the development tree. Production downloads are at:
+85 stars
from 1,356 · score 4.45
382.jaredhanson / passport
Simple, unobtrusive authentication for Node.js.
+84 stars
from 23,436 · score 4.44
383.lestrrat-go / jwx
Complete implementation of JWx (Javascript Object Signing and Encryption/JOSE) technologies for Go. #golang #jwt #jws #jwk #jwe
- jwt
- jwe
- jws
- jwk
- go
- golang
- +1 more
+84 stars
from 2,360 · score 4.44
384.jtsylve / LiME
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
+84 stars
from 1,971 · score 4.44
385.Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
- azure
- defender-for-endpoint
- dfir
- kql
- sentinel
- threat-hunting
- +9 more
+84 stars
from 1,685 · score 4.44
386.mufeedvh / pdfrip
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
- rust
- security
- security-tools
- password
- password-cracker
- +1 more
+84 stars
from 1,335 · score 4.44
+83 stars
from 5,823 · score 4.43
388.microcosm-cc / bluemonday
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
+83 stars
from 3,648 · score 4.43
+83 stars
from 1,079 · score 4.43
390.MacPass / MacPass
A native macOS KeePass client
- keepass
- kdbx
- macpass
- password-manager
- password
- objective-c
- +2 more
+82 stars
from 6,815 · score 4.42
391.den4uk / andriller
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
+82 stars
from 1,548 · score 4.42
392.fox-it / dissect
Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
- dfir
- dissect
- python
+81 stars
from 1,100 · score 4.41
393.99designs / aws-vault
A vault for securely storing and accessing AWS credentials in development environments
+78 stars
from 8,922 · score 4.37
394.a0rtega / pafishArchived
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
- malware
- reverse-engineering
- virtual-machine
- malware-families
- analysis-environments
- sandbox
- +3 more
+78 stars
from 3,867 · score 4.37
395.animir / node-rate-limiter-flexible
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
+78 stars
from 3,521 · score 4.37
396.momenbasel / keyFinder
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
- api-security
- browser-extension
- +14 more
+78 stars
from 654 · score 4.37
+77 stars
from 4,708 · score 4.36
398.ev-flow / quark-engine
The repository host gives no description.
- defcon
- android
- blackhat
- blackbox
- malware-analysis
- malware-detection
+77 stars
from 1,661 · score 4.36
399.andresriancho / w3af
w3af: web application attack and audit framework, the open source web vulnerability scanner.
+76 stars
from 4,834 · score 4.34
400.Moham3dRiahi / Th3inspector
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
- information-gathering
- reverse-phone-lookup
- mx-lookup
- whois-lookup
- geo-ip
- cloudflare
- +14 more
+76 stars
from 2,601 · score 4.34