401.traggo / server
self-hosted tag-based time tracking
- golang
- selfhosted
- freesoftware
- privacy
- self-hosted
- timetracking
- +2 more
+35 stars
from 1,607 · score 3.58
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
401–500 of 1,307 by Attention Score · Aug 7, 2026 – Nov 4, 2026 (UTC)
402.Rurik / Noriben
Noriben - Portable, Simple, Malware Analysis Sandbox
+35 stars
from 1,286 · score 3.58
+34 stars
from 2,930 · score 3.56
404.hashtopolis / server
Hashtopolis - distributed password cracking with Hashcat
- cracking
- distributed
- hashcat
- pentesting
- passwords
- hashtopussy
- +8 more
+34 stars
from 1,796 · score 3.56
405.hashcat / hashcat-utils
Small utilities that are useful in advanced password cracking
+34 stars
from 1,597 · score 3.56
406.paulmillr / noble-post-quantum
Auditable & minimal JS implementation of public-key post-quantum cryptography
- dilithium
- kyber
- ml-kem
- post-quantum-cryptography
- sphincs
- sphincs-plus
- +14 more
+34 stars
from 337 · score 3.56
407.lucia-auth / lucia
Authentication, simple and clean
+33 stars
from 10,416 · score 3.53
+33 stars
from 5,873 · score 3.53
409.jesseduffield / horcrux
Split your file into encrypted fragments so that you don't need to remember a passcode
+33 stars
from 5,077 · score 3.53
410.aquasecurity / cloudsploit
Cloud Security Posture Management (CSPM)
- aws
- security
- security-audit
- cloud
- azure
- cspm
- +5 more
+33 stars
from 3,756 · score 3.53
411.zlib-ng / minizip-ng
Fork of the popular zip manipulation library found in the zlib distribution.
- minizip
- zip
- zlib
- lzma
- bzip2
- winzip-aes
- +9 more
+33 stars
from 1,476 · score 3.53
412.wagga40 / Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
- detection
- auditd
- +9 more
+33 stars
from 840 · score 3.53
413.digitalbazaar / forge
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
- crypto
- cryptography
- x509
- message-digest
- aes
- asn1
- +14 more
+32 stars
from 5,317 · score 3.50
414.NextronSystems / APTSimulator
A toolset to make a system look as if it was the victim of an APT attack
+32 stars
from 2,756 · score 3.50
415.sc0tfree / mentalist
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
- wordlist
- wordlist-generator
- password
- cracking
- cracking-hashes
- wordlist-technique
+32 stars
from 2,008 · score 3.50
416.profanity-im / profanity
Ncurses based XMPP client
- xmpp-client
- c
- xmpp
- chat
- ncurses
- decentralization
- +6 more
+32 stars
from 1,520 · score 3.50
417.vanhoefm / fragattacks
The repository host gives no description.
+32 stars
from 1,304 · score 3.50
418.CaringCaribou / caringcaribou
A friendly car security exploration tool for the CAN bus
+32 stars
from 938 · score 3.50
419.krzyzanowskim / CryptoSwift
CryptoSwift is a growing collection of standard and secure cryptographic algorithms implemented in Swift
- swift
- aes
- cryptography
- commoncrypto
- cryptoswift
- md5
- +7 more
+31 stars
from 10,547 · score 3.47
420.google / tsunami-security-scanner
Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
+31 stars
from 8,586 · score 3.47
421.phpseclib / phpseclib
PHP Secure Communications Library
+31 stars
from 5,574 · score 3.47
422.padloc / padloc
A modern, open source password manager for individuals and teams.
- javascript
- lit-element
- lit-html
- password-generator
- password-manager
- progressive-web-app
- +5 more
+31 stars
from 2,909 · score 3.47
+31 stars
from 1,915 · score 3.47
424.PlumHound / PlumHound
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
- bloodhound
- bloodhoundad
- +14 more
+31 stars
from 1,304 · score 3.47
425.tklengyel / drakvuf
DRAKVUF Black-box Binary Analysis
- malware-analysis
- virtualization
- xen
- introspection
+31 stars
from 1,259 · score 3.47
426.safedep / vet
Protect against malicious open source packages 🤖
+31 stars
from 1,093 · score 3.47
427.ydkhatri / mac_apt
macOS (& ios) Artifact Parsing Tool
+31 stars
from 1,067 · score 3.47
428.sundaysec / Android-Exploits
A collection of android Exploits and Hacks
+31 stars
from 1,002 · score 3.47
429.Hexastrike / PyrsistenceSniper
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
- cybersecurity
- cybersecurity-tools
- incident-response
- security
- security-audit
- security-tools
+31 stars
from 241 · score 3.47
+30 stars
from 2,114 · score 3.43
431.Hakky54 / certificate-ripper
🔐 A CLI tool to extract server certificates
+30 stars
from 919 · score 3.43
432.panva / oauth4webapi
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
- oauth2
- openid
- openid-connect
- oidc
- authentication
- authorization
- +10 more
+30 stars
from 767 · score 3.43
433.coinpaprika / coinpaprika-api-go-client
Official CoinPaprika API Go client — coin prices, tickers, OHLCV, exchanges, and global market stats.
- api-client
- bitcoin
- blockchain
- coinpaprika
- crypto
- cryptocurrency
- +4 more
+30 stars
from 27 · score 3.43
434.longld / peda
PEDA - Python Exploit Development Assistance for GDB
+29 stars
from 6,133 · score 3.40
435.CalebFenton / simplify
Android virtual machine and deobfuscator
- deobfuscation
- java
- optimization
- android
- reverse-engineering
- malware-analysis
- +9 more
+29 stars
from 4,648 · score 3.40
436.animir / node-rate-limiter-flexible
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
+29 stars
from 3,570 · score 3.40
+29 stars
from 2,963 · score 3.40
438.nil0x42 / phpsploit
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
- hacktool
- blackhat
- +12 more
+29 stars
from 2,476 · score 3.40
439.david942j / one_gadget
The best tool for finding one gadget RCE in libc.so.6
+29 stars
from 2,335 · score 3.40
440.lukechilds / reverse-shell
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
- microservice
- security
+29 stars
from 2,043 · score 3.40
441.authts / oidc-client-ts
OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications
- oidc
- oidc-client
- typescript
+29 stars
from 1,939 · score 3.40
+29 stars
from 1,603 · score 3.40
443.ForensicArtifacts / artifacts
Digital Forensics artifact repository
+29 stars
from 1,255 · score 3.40
444.in-toto / in-toto
in-toto is a framework to protect supply chain integrity.
- supply-chain
- security
- new-york-university
- secure-systems-lab
+29 stars
from 1,025 · score 3.40
445.bad-antics / nullkia
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
- android-hacking
- baseband
- bootloader-unlock
- checkm8
- firmware-hacking
- ios-jailbreak
- +14 more
+29 stars
from 35 · score 3.40
446.react-cosmos / react-cosmos
Sandbox for developing and testing UI components in isolation
+28 stars
from 8,666 · score 3.37
447.deepfence / ThreatMapper
Open Source Cloud Native Application Protection Platform (CNAPP)
- cloud-native
- vulnerability-management
- threat-analysis
- devsecops
- secops
- registry-scanning
- +13 more
+28 stars
from 5,300 · score 3.37
448.erocarrera / pefile
pefile is a Python module to read and work with PE (Portable Executable) files
+28 stars
from 2,055 · score 3.37
449.yeti-platform / yeti
Your Everyday Threat Intelligence
- infosec
- threatintel
- threat-sharing
- threat-hunting
- enrichment
- intelligence
- +1 more
+28 stars
from 2,011 · score 3.37
450.cmu-sei / pharos
Automated static analysis tools for binary programs
- binary-analysis
- reverse-engineering
+28 stars
from 1,714 · score 3.37
451.agentrhq / authsome
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
+28 stars
from 75 · score 3.37
452.bombinisecurity / bombini
eBPF Security Monitoring and Sandboxing Agent Based on Aya
+28 stars
from 52 · score 3.37
453.sobolevn / git-secret
:busts_in_silhouette: A bash-tool to store your private data inside a git repository.
- git-secret
- git
- git-addons
- gpg
- encryption
- secret-management
+27 stars
from 4,029 · score 3.33
454.panda-re / panda
Platform for Architecture-Neutral Dynamic Analysis
- reverse-engineering
- dynamic-analysis
- qemu
- pandare
- pypanda
+27 stars
from 2,768 · score 3.33
455.uNetworking / uSockets
Miniscule cross-platform eventing, networking & crypto for async applications
+27 stars
from 1,486 · score 3.33
456.mufeedvh / pdfrip
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
- rust
- security
- security-tools
- password
- password-cracker
- +1 more
+27 stars
from 1,392 · score 3.33
+27 stars
from 1,128 · score 3.33
458.RustCrypto / AEADs
Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers
+27 stars
from 945 · score 3.33
459.eunomia-bpf / ActPlane
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
- ebpf
- harness
- ifc
- policy-engine
+27 stars
from 82 · score 3.33
460.vvo / iron-session
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
- nextjs
- authentication
- session
- stateless
- cookies
- expressjs
- +2 more
+26 stars
from 4,128 · score 3.30
461.linkedin / qark
Tool to look for several security related Android application vulnerabilities
+26 stars
from 3,372 · score 3.30
462.christophetd / CloudFlair
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
+26 stars
from 2,959 · score 3.30
463.flipkart-incubator / Astra
Automated Security Testing For REST API's
- security
- restapiautomation
- python
- owasp
- penetration-testing-framework
- postman-collection
- +4 more
+26 stars
from 2,648 · score 3.30
464.Storyyeller / Krakatau
Java decompiler, assembler, and disassembler
+26 stars
from 2,236 · score 3.30
465.libtom / libtomcrypt
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
- libtomcrypt
- cryptography
- c
- encryption
+26 stars
from 1,775 · score 3.30
466.HemmeligOrg / Hemmelig.appArchived
Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.
- secret
- encryption
- onetimesecret
- password
- personal-data
- gdpr
- +9 more
+26 stars
from 1,218 · score 3.30
467.TypeError / secure
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
+26 stars
from 1,048 · score 3.30
468.D4Vinci / elpscrk
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
- elliot
- cupp
- passwords
- hacking-tool
- bruteforce
- brute-force
- +6 more
+26 stars
from 942 · score 3.30
+26 stars
from 321 · score 3.30
470.iamsopotatoe-coder / TinyLoad
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
- compression
- packer
- pe-packer
- pe-compress
- pe-protection
- pepacker
- +13 more
+26 stars
from 176 · score 3.30
471.deepfence / SecretScanner
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
- vulnerability-scanners
- k8s
- +10 more
+25 stars
from 3,372 · score 3.26
+25 stars
from 2,264 · score 3.26
473.B-Con / crypto-algorithms
Basic implementations of standard cryptography algorithms, like AES and SHA-1.
+25 stars
from 2,029 · score 3.26
474.globaleaks / globaleaks-whistleblowing-software
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
- digital-human-rights
- anonymity
- security
- python
- twisted
- sqlalchemy
- +14 more
+25 stars
from 1,500 · score 3.26
475.emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
- detection
- malware
- phishing
- cybersecurity
- misp
- +14 more
+25 stars
from 1,356 · score 3.26
+25 stars
from 1,149 · score 3.26
477.SpacehuhnTech / DeauthDetector
Detect deauthentication frames using an ESP8266
+25 stars
from 966 · score 3.26
478.doorkeeper-gem / doorkeeper
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
- doorkeeper
- oauth
- oauth2-provider
- oauth2-server
- ruby-on-rails
- grape
- +4 more
+24 stars
from 5,510 · score 3.22
479.andresriancho / w3af
w3af: web application attack and audit framework, the open source web vulnerability scanner.
+24 stars
from 4,886 · score 3.22
480.django-guardian / django-guardian
Per object permissions for Django
+24 stars
from 3,897 · score 3.22
481.x0rz / phishing_catcher
Phishing catcher using Certstream
- phishing
- threat-intelligence
- certificate-transparency
- osint
- threatintel
+24 stars
from 1,808 · score 3.22
482.SecureAuthCorp / oauth2c
User-friendly OAuth2 CLI
+24 stars
from 929 · score 3.22
483.paulmillr / noble-ciphers
Audited & minimal JS implementation of Salsa20, ChaCha and AES
- aes-siv
- chacha20
- chacha20-poly1305
- chacha20poly1305
- cipher
- cryptography
- +11 more
+24 stars
from 409 · score 3.22
484.syst3mctl / godoclive
GoDoc Live statically analyzes your Go HTTP services — extracts route definitions, request/response contracts, and authentication patterns — then generates beautiful, interactive API documentation.
- docs
- documentation
- documentation-generator
- golang
- golang-package
+24 stars
from 84 · score 3.22
485.stacklok / brood-box
CLI tool for running coding agents inside hardware-isolated microVMs
- ai-agents
- claude-code
- codex
- developer-tools
- microvm
- sandbox
- +1 more
+24 stars
from 55 · score 3.22
486.benbusby / whoogle-searchArchived
A self-hosted, ad-free, privacy-respecting metasearch engine
+23 stars
from 11,535 · score 3.18
487.volatilityfoundation / volatilityArchived
An advanced memory forensics framework
- python
- malware
- volatility-framework
- memory
- ram
+23 stars
from 8,032 · score 3.18
+23 stars
from 4,306 · score 3.18
+23 stars
from 4,090 · score 3.18
+23 stars
from 3,523 · score 3.18
491.cliffe / SecGen
Create randomly insecure VMs
- security
- security-vulnerability
- virtualization
- randomization
- provisioning
- labs
- +2 more
+23 stars
from 2,778 · score 3.18
492.eset / malware-ioc
Indicators of Compromises (IOC) of our various investigations
- ioc
- malware
- yara
- misp
+23 stars
from 1,970 · score 3.18
493.h3xduck / TripleCross
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
+23 stars
from 1,969 · score 3.18
+23 stars
from 1,425 · score 3.18
495.OpenIdentityPlatform / OpenAM
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
- openam
- sso
- oauth
- saml
- aaa
- authentication
- +14 more
+23 stars
from 879 · score 3.18
496.Mutasem-mk4 / procscope
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
- bpf
- ebpf
- forensics
- golang
- linux-security
- reverse-engineering
- +14 more
+23 stars
from 25 · score 3.18
497.pac4j / pac4j
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
- java
- security
- authentication
- authorization
- cas
- oauth
- +14 more
+22 stars
from 2,517 · score 3.14
498.wemake-services / wemake-django-template
Bleeding edge django template focused on code quality and security.
+22 stars
from 2,259 · score 3.14
499.ory / polis
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
- enterprise-software
- saml
- saml2
- saml-service-provider
- saml-authentication
- sso
- +14 more
+22 stars
from 2,249 · score 3.14
500.trustedsec / hate_crack
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
+22 stars
from 1,843 · score 3.14