+85 stars
from 1,077 · score 4.45
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
401–500 of 1,263 by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
+84 stars
from 5,822 · score 4.44
403.lestrrat-go / jwx
Complete implementation of JWx (Javascript Object Signing and Encryption/JOSE) technologies for Go. #golang #jwt #jws #jwk #jwe
- jwt
- jwe
- jws
- jwk
- go
- golang
- +1 more
+84 stars
from 2,360 · score 4.44
404.mufeedvh / pdfrip
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
- rust
- security
- security-tools
- password
- password-cracker
- +1 more
+84 stars
from 1,334 · score 4.44
405.microcosm-cc / bluemonday
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
+83 stars
from 3,648 · score 4.43
406.Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
- azure
- defender-for-endpoint
- dfir
- kql
- sentinel
- threat-hunting
- +9 more
+83 stars
from 1,685 · score 4.43
407.MacPass / MacPass
A native macOS KeePass client
- keepass
- kdbx
- macpass
- password-manager
- password
- objective-c
- +2 more
+82 stars
from 6,815 · score 4.42
408.den4uk / andriller
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
+82 stars
from 1,547 · score 4.42
409.animir / node-rate-limiter-flexible
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
+81 stars
from 3,518 · score 4.41
410.fox-it / dissect
Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
- dfir
- dissect
- python
+81 stars
from 1,100 · score 4.41
411.99designs / aws-vault
A vault for securely storing and accessing AWS credentials in development environments
+79 stars
from 8,922 · score 4.38
412.a0rtega / pafishArchived
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
- malware
- reverse-engineering
- virtual-machine
- malware-families
- analysis-environments
- sandbox
- +3 more
+78 stars
from 3,867 · score 4.37
413.momenbasel / keyFinder
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
- api-security
- browser-extension
- +14 more
+78 stars
from 653 · score 4.37
414.google / tsunami-security-scanner
Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
+77 stars
from 8,541 · score 4.36
+77 stars
from 4,708 · score 4.36
416.ev-flow / quark-engine
The repository host gives no description.
- defcon
- android
- blackhat
- blackbox
- malware-analysis
- malware-detection
+77 stars
from 1,661 · score 4.36
417.mushorg / conpot
ICS/SCADA honeypot
+77 stars
from 1,462 · score 4.36
418.pgrwl / pgrwl
Cloud-native continuous backup for PostgreSQL - WAL/base-backup streaming, compression, encryption, retention, and monitoring in a single binary.
- backup
- cloud-native
- golang
- postgresql
- postgres
- recovery
- +14 more
+77 stars
from 107 · score 4.36
419.lucia-auth / lucia
Authentication, simple and clean
+76 stars
from 10,374 · score 4.34
420.andresriancho / w3af
w3af: web application attack and audit framework, the open source web vulnerability scanner.
+76 stars
from 4,834 · score 4.34
421.pii-shield / pii-shield
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
- json
- kubernetes
- +7 more
+76 stars
from 102 · score 4.34
422.digitalbazaar / forge
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
- crypto
- cryptography
- x509
- message-digest
- aes
- asn1
- +14 more
+75 stars
from 5,275 · score 4.33
423.Moham3dRiahi / Th3inspector
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
- information-gathering
- reverse-phone-lookup
- mx-lookup
- whois-lookup
- geo-ip
- cloudflare
- +14 more
+75 stars
from 2,601 · score 4.33
+75 stars
from 828 · score 4.33
+74 stars
from 4,255 · score 4.32
426.aquasecurity / cloudsploit
Cloud Security Posture Management (CSPM)
- aws
- security
- security-audit
- cloud
- azure
- cspm
- +5 more
+74 stars
from 3,715 · score 4.32
427.traggo / server
self-hosted tag-based time tracking
- golang
- selfhosted
- freesoftware
- privacy
- self-hosted
- timetracking
- +2 more
+74 stars
from 1,566 · score 4.32
428.paulmillr / noble-curves
Audited & minimal JS implementation of elliptic curve cryptography.
- crypto
- cryptography
- ecdsa
- ed25519
- ed448
- eddsa
- +14 more
+74 stars
from 896 · score 4.32
429.google / grr
GRR Rapid Response: remote live forensics for incident response
+73 stars
from 5,038 · score 4.30
+73 stars
from 2,891 · score 4.30
431.authts / oidc-client-ts
OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications
- oidc
- oidc-client
- typescript
+73 stars
from 1,895 · score 4.30
432.techinz / playwright-captcha
Automating captcha solving for Playwright. Supports Cloudflare Turnstile & Interstitial, and reCAPTCHA V2 & V3 with Click-based or API (2captcha) solving. Designed for easy integration with Playwright, Patchright, and Camoufox.
- automation
- bot
- camoufox
- captcha
- detection
- patchright
- +1 more
+73 stars
from 289 · score 4.30
433.node9-ai / node9-proxy
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
- ai-safety
- ai-security
- claude-code
- llm-agent
- agent-security
- dlp
- +14 more
+73 stars
from 151 · score 4.30
434.sorkila / lockpaw
Cover your Mac's screen with a hotkey while AI agents keep running, even with the lid closed. The covered screen glows when Claude Code, Codex or Gemini needs you. Touch ID unlock.
- ai-agents
- developer-tools
- macos
- macos-app
- open-source
- privacy
- +13 more
+73 stars
from 101 · score 4.30
435.jesseduffield / horcrux
Split your file into encrypted fragments so that you don't need to remember a passcode
+72 stars
from 5,038 · score 4.29
436.fkie-cad / friTap
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
- frida
- ssl
- security
- hooking
- network-analysis
- network-forensics
- +11 more
+72 stars
from 493 · score 4.29
437.OneKeePass / desktop
A secure password manager for macOS,Linux and Windows platforms
+72 stars
from 446 · score 4.29
438.Legrandin / pycryptodome
A self-contained cryptographic library for Python
- cryptography
- security
- python
+71 stars
from 3,215 · score 4.28
439.panda-re / panda
Platform for Architecture-Neutral Dynamic Analysis
- reverse-engineering
- dynamic-analysis
- qemu
- pandare
- pypanda
+71 stars
from 2,723 · score 4.28
+70 stars
from 7,360 · score 4.26
+70 stars
from 3,731 · score 4.26
442.sc0tfree / mentalist
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
- wordlist
- wordlist-generator
- password
- cracking
- cracking-hashes
- wordlist-technique
+70 stars
from 1,970 · score 4.26
443.yunginnanet / HellPot
HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.
+70 stars
from 1,099 · score 4.26
444.longld / peda
PEDA - Python Exploit Development Assistance for GDB
+69 stars
from 6,092 · score 4.25
+69 stars
from 1,563 · score 4.25
446.gmh5225 / awesome-llvm-security
awesome llvm security [Welcome to PR]
+69 stars
from 821 · score 4.25
447.react-cosmos / react-cosmos
Sandbox for developing and testing UI components in isolation
+68 stars
from 8,626 · score 4.23
448.yeti-platform / yeti
Your Everyday Threat Intelligence
- infosec
- threatintel
- threat-sharing
- threat-hunting
- enrichment
- intelligence
- +1 more
+68 stars
from 1,971 · score 4.23
449.membrane / api-gateway
API Gateway bridging modern and legacy APIs with WSDL-to-OpenAPI, SOAP-to-REST, XML, OAuth2, and GraphQL.
- oauth2
- api-gateway
- api
- rest
- openapi
- soap
- +3 more
+68 stars
from 589 · score 4.23
450.greg7mdp / parallel-hashmap
A family of header-only, very fast and memory-friendly hashmap and btree containers.
+67 stars
from 3,161 · score 4.22
+67 stars
from 2,223 · score 4.22
452.wagga40 / Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
- detection
- auditd
- +9 more
+67 stars
from 804 · score 4.22
453.NextronSystems / APTSimulator
A toolset to make a system look as if it was the victim of an APT attack
+66 stars
from 2,721 · score 4.20
454.CaringCaribou / caringcaribou
A friendly car security exploration tool for the CAN bus
+66 stars
from 902 · score 4.20
455.doorkeeper-gem / doorkeeper
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
- doorkeeper
- oauth
- oauth2-provider
- oauth2-server
- ruby-on-rails
- grape
- +4 more
+65 stars
from 5,469 · score 4.19
456.ydkhatri / mac_apt
macOS (& ios) Artifact Parsing Tool
+65 stars
from 1,033 · score 4.19
457.pret / pokegold
Disassembly of Pokémon Gold/Silver
- pokemon
- disassembly
- gameboy-color
- reverse-engineering
- gbz80
+65 stars
from 670 · score 4.19
458.vw2x / Mira
Mobile runtime detection workbench for AI (iOS and Android)
- frida
- reverse-engineering
- android-security-tools
- frida-gadget
- ios-security-tool
- mcp-client
- +3 more
+65 stars
from 42 · score 4.19
459.krzyzanowskim / CryptoSwift
CryptoSwift is a growing collection of standard and secure cryptographic algorithms implemented in Swift
- swift
- aes
- cryptography
- commoncrypto
- cryptoswift
- md5
- +7 more
+64 stars
from 10,514 · score 4.17
460.profanity-im / profanity
Ncurses based XMPP client
- xmpp-client
- c
- xmpp
- chat
- ncurses
- decentralization
- +6 more
+64 stars
from 1,488 · score 4.17
461.uNetworking / uSockets
Miniscule cross-platform eventing, networking & crypto for async applications
+64 stars
from 1,448 · score 4.17
462.tklengyel / drakvuf
DRAKVUF Black-box Binary Analysis
- malware-analysis
- virtualization
- xen
- introspection
+64 stars
from 1,226 · score 4.17
463.GeiserX / VPN-Bypass
macOS menu-bar app for fine-grained VPN routing: bypass the VPN for chosen domains/services, force others through it, or (Custom mode) route each domain/subnet out a specific egress — direct, a specific VPN, an HTTP/SOCKS5 proxy, or a Tailscale peer. Includes a vpnb CLI.
- macos
- menu-bar-app
- networking
- split-tunneling
- vpn
- cisco
- +14 more
+64 stars
from 70 · score 4.17
464.Storyyeller / Krakatau
Java decompiler, assembler, and disassembler
+63 stars
from 2,198 · score 4.16
465.hashcat / hashcat-utils
Small utilities that are useful in advanced password cracking
+63 stars
from 1,568 · score 4.16
466.globaleaks / globaleaks-whistleblowing-software
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
- digital-human-rights
- anonymity
- security
- python
- twisted
- sqlalchemy
- +14 more
+63 stars
from 1,462 · score 4.16
467.Luzifer / ots
One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser
- one-time-secret
- golang
- encryption
- aes256
+63 stars
from 747 · score 4.16
468.gravitee-io / gravitee-api-management
Gravitee.io - OpenSource API Management
- api
- api-management
- gateway
- java
- vertx
- api-gateway
- +1 more
+63 stars
from 404 · score 4.16
469.EmpireProject / EmpireArchived
Empire is a PowerShell and Python post-exploitation agent.
+62 stars
from 7,785 · score 4.14
+62 stars
from 2,082 · score 4.14
471.zlib-ng / minizip-ng
Fork of the popular zip manipulation library found in the zlib distribution.
- minizip
- zip
- zlib
- lzma
- bzip2
- winzip-aes
- +9 more
+62 stars
from 1,447 · score 4.14
472.HemmeligOrg / Hemmelig.appArchived
Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.
- secret
- encryption
- onetimesecret
- password
- personal-data
- gdpr
- +9 more
+62 stars
from 1,183 · score 4.14
473.SSLMate / certspotter
Lightweight Certificate Transparency Log Monitor
- certificate-transparency
- pki
- x509
- security
- webpki
+62 stars
from 1,135 · score 4.14
474.TypeError / secure
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
+62 stars
from 1,012 · score 4.14
475.sammargolis / OpenScribe
OpenScribe is an open-source AI scribe that records patient encounters and generates structured clinical notes automatically. You keep full control over data, workflows, and patient privacy with no vendor lock-in.
+62 stars
from 163 · score 4.14
476.0xa3k5 / web3icons
2000+ crypto svg icons for react
+61 stars
from 231 · score 4.13
477.christophetd / CloudFlair
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
+60 stars
from 2,925 · score 4.11
478.dolevf / graphql-cop
Security Auditor Utility for GraphQL APIs
- security
- penetration-testing
- auditing
- graphql
- hacking
- red-team
- +2 more
+60 stars
from 638 · score 4.11
479.omniauth / omniauth
OmniAuth is a flexible authentication system utilizing Rack middleware.
- omniauth
- authentication
- hacktoberfest
- ruby
+59 stars
from 8,045 · score 4.09
480.michenriksen / gitrobArchived
Reconnaissance tool for GitHub organizations
+59 stars
from 6,137 · score 4.09
481.cliffe / SecGen
Create randomly insecure VMs
- security
- security-vulnerability
- virtualization
- randomization
- provisioning
- labs
- +2 more
+59 stars
from 2,742 · score 4.09
482.in-toto / in-toto
in-toto is a framework to protect supply chain integrity.
- supply-chain
- security
- new-york-university
- secure-systems-lab
+59 stars
from 994 · score 4.09
483.sundaysec / Android-Exploits
A collection of android Exploits and Hacks
+59 stars
from 974 · score 4.09
484.SpacehuhnTech / DeauthDetector
Detect deauthentication frames using an ESP8266
+59 stars
from 931 · score 4.09
485.RustCrypto / AEADs
Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers
+59 stars
from 913 · score 4.09
486.vvo / iron-session
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
- nextjs
- authentication
- session
- stateless
- cookies
- expressjs
- +2 more
+58 stars
from 4,096 · score 4.08
487.mcginty / snow
A Rust implementation of the Noise Protocol Framework
- cryptography
- crypto
- noise-protocol-framework
- noise-protocol
- noise
- rust
- +1 more
+58 stars
from 1,057 · score 4.08
488.tldrsec / prompt-injection-defenses
Every practical and proposed defense against prompt injection.
- ai
- cybersecurity
- prompt-injection
- security
+58 stars
from 683 · score 4.08
+57 stars
from 4,056 · score 4.06
490.nil0x42 / phpsploit
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
- hacktool
- blackhat
- +12 more
+57 stars
from 2,448 · score 4.06
491.jkroepke / helm-secrets
A helm plugin that help manage secrets with Git workflow and store them anywhere
- helm
- helm-plugin
- helm-plugins
- kubernetes
- k8s
- helm-charts
- +14 more
+57 stars
from 1,980 · score 4.06
+57 stars
from 1,075 · score 4.06
493.Juliusolsson05 / pharos-ai
Open-source OSINT intelligence dashboard tracking the Iran conflict in real time — live DeckGL/MapLibre conflict map, 30 bias-labeled feeds, actor dossiers, and daily briefs. Live at conflicts.app.
+57 stars
from 128 · score 4.06
494.ory / polis
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
- enterprise-software
- saml
- saml2
- saml-service-provider
- saml-authentication
- sso
- +14 more
+56 stars
from 2,215 · score 4.04
495.cmu-sei / pharos
Automated static analysis tools for binary programs
- binary-analysis
- reverse-engineering
+56 stars
from 1,685 · score 4.04
+56 stars
from 1,118 · score 4.04
497.pompelmi / pompelmi
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
- clamscan
- file-scanner
- virus-scan
- docker-compose
- upload-file
- virus
- +8 more
+56 stars
from 626 · score 4.04
498.phpseclib / phpseclib
PHP Secure Communications Library
+55 stars
from 5,549 · score 4.03
499.CalebFenton / simplify
Android virtual machine and deobfuscator
- deobfuscation
- java
- optimization
- android
- reverse-engineering
- malware-analysis
- +9 more
+55 stars
from 4,621 · score 4.03
500.erocarrera / pefile
pefile is a Python module to read and work with PE (Portable Executable) files
+55 stars
from 2,027 · score 4.03