401.jasmin-lang / jasmin
Language for high-assurance and high-speed cryptography
+15 stars
from 374 · score 2.77
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
401–500 of 1,134 by Attention Score · Oct 5, 2026 – Nov 3, 2026 (UTC)
402.jwtk / jjwt
Java JWT: JSON Web Token for Java and Android
- jwt
- java
- java-jwt
- jjwt
- jwt-token
- jwt-tokens
- +14 more
+14 stars
from 11,125 · score 2.71
403.pennersr / django-allauth
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/
- authentication
- django
- oauth2
- openid-connect
- python
- saml
- +8 more
+14 stars
from 10,369 · score 2.71
404.Permify / permify
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
- access-control
- authorization
- rbac
- rebac
- zanzibar
- acl
- +13 more
+14 stars
from 5,954 · score 2.71
+14 stars
from 5,708 · score 2.71
406.authpass / authpass
AuthPass - Password Manager based on Flutter for all platforms. Keepass 2.x (KDBX 3 and KDBX 4) compatible.
- flutter
- password-manager
- password-store
- android
- macos-application
- flutter-apps
- +14 more
+14 stars
from 2,795 · score 2.71
407.nil0x42 / phpsploit
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
- hacktool
- blackhat
- +12 more
+14 stars
from 2,491 · score 2.71
408.htrgouvea / nipe
An engine to make Tor network your default gateway
+14 stars
from 2,393 · score 2.71
409.jtsylve / LiME
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
+14 stars
from 2,040 · score 2.71
410.mcginty / snow
A Rust implementation of the Noise Protocol Framework
- cryptography
- crypto
- noise-protocol-framework
- noise-protocol
- noise
- rust
- +1 more
+14 stars
from 1,101 · score 2.71
411.fwdai / rowel
🔑 Local-first Secrets Manager
- password
- password-manager
- desktop
- credentials
- security
- cipher
- +11 more
+14 stars
from 947 · score 2.71
412.R74nCom / sandboxels
In-browser falling-sand simulation game with over 500 elements and thousands of reactions.
- browser-game
- cellular-automata
- cellular-automaton
- chemistry
- chemistry-lab
- falling-sand
- +14 more
+14 stars
from 463 · score 2.71
413.paulmillr / noble-post-quantum
Auditable & minimal JS implementation of public-key post-quantum cryptography
- dilithium
- kyber
- ml-kem
- post-quantum-cryptography
- sphincs
- sphincs-plus
- +14 more
+14 stars
from 356 · score 2.71
+14 stars
from 207 · score 2.71
415.helmetjs / helmet
Help secure Express apps with various HTTP headers
- javascript
- middleware
- security
- helmet
- http-headers
+13 stars
from 10,731 · score 2.64
416.google / uuid
Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.
- go
- uuid
+13 stars
from 6,138 · score 2.64
417.ory / keto
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
- authorization
- fine-grained-permissions
- +8 more
+13 stars
from 5,404 · score 2.64
418.ossec / ossec-hids
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- hids
- security
- pci-dss
- nist800-53
- ossec
- compliance
- +5 more
+13 stars
from 5,057 · score 2.64
419.lanjelot / patator
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
- pentest
- brute-force
+13 stars
from 3,929 · score 2.64
420.aquasecurity / cloudsploit
Cloud Security Posture Management (CSPM)
- aws
- security
- security-audit
- cloud
- azure
- cspm
- +5 more
+13 stars
from 3,776 · score 2.64
+13 stars
from 2,979 · score 2.64
422.christophetd / CloudFlair
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
+13 stars
from 2,972 · score 2.64
423.last-byte / PersistenceSniper
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
- incident-response
- malware-detection
- persistence
- powershell
- powershell-module
- powershell-script
- +3 more
+13 stars
from 2,138 · score 2.64
424.s0md3v / ReconDog
Reconnaissance Swiss Army Knife
- recon
- information-gathering
- honeypot-detector
- subdomain-enumeration
- cms-detector
+13 stars
from 2,114 · score 2.64
425.lukechilds / reverse-shell
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
- microservice
- security
+13 stars
from 2,059 · score 2.64
426.hashtopolis / server
Hashtopolis - distributed password cracking with Hashcat
- cracking
- distributed
- hashcat
- pentesting
- passwords
- hashtopussy
- +8 more
+13 stars
from 1,814 · score 2.64
427.den4uk / andriller
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
+13 stars
from 1,616 · score 2.64
428.uNetworking / uSockets
Miniscule cross-platform eventing, networking & crypto for async applications
+13 stars
from 1,499 · score 2.64
429.spacehuhn / esp8266_beaconSpam
Creates up to a thousand WiFi access points with custom SSIDs.
- ssid
- custom-ssids
- wifi
- esp8266
- spam
- flood
- +1 more
+13 stars
from 1,374 · score 2.64
430.vanhoefm / fragattacks
The repository host gives no description.
+13 stars
from 1,322 · score 2.64
431.Swetrix / swetrix
📈 Open source, privacy-first web analytics — a cookie-less Google Analytics alternative with built-in error tracking and performance monitoring. Self-host it or use our cloud. Get started for free!
- docker
- webanalytics
- self-hosted
- selfhosted
- privacy
- redis
- +12 more
+13 stars
from 1,198 · score 2.64
432.Luzifer / ots
One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser
- one-time-secret
- golang
- encryption
- aes256
+13 stars
from 797 · score 2.64
433.membrane / api-gateway
API Gateway bridging modern and legacy APIs with WSDL-to-OpenAPI, SOAP-to-REST, XML, OAuth2, and GraphQL.
- oauth2
- api-gateway
- api
- rest
- openapi
- soap
- +3 more
+13 stars
from 644 · score 2.64
434.fkie-cad / friTap
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
- frida
- ssl
- security
- hooking
- network-analysis
- network-forensics
- +11 more
+13 stars
from 552 · score 2.64
435.deckrun / dockadvisor
Lightweight Dockerfile linter that helps you write better Dockerfiles. Get instant feedback with quality scores, security checks, and 60+ best practice rules.
+13 stars
from 213 · score 2.64
436.OWASP / www-project-agent-memory-guard
Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.
+13 stars
from 182 · score 2.64
437.Mutasem-mk4 / procscope
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
- bpf
- ebpf
- forensics
- golang
- linux-security
- reverse-engineering
- +14 more
+13 stars
from 34 · score 2.64
438.txthinking / brook
A cross-platform programmable network tool
+12 stars
from 15,179 · score 2.56
439.doorkeeper-gem / doorkeeper
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
- doorkeeper
- oauth
- oauth2-provider
- oauth2-server
- ruby-on-rails
- grape
- +4 more
+12 stars
from 5,522 · score 2.56
+12 stars
from 5,010 · score 2.56
441.epinna / tplmap
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
+12 stars
from 4,203 · score 2.56
+12 stars
from 3,534 · score 2.56
443.greg7mdp / parallel-hashmap
A family of header-only, very fast and memory-friendly hashmap and btree containers.
+12 stars
from 3,216 · score 2.56
444.NextronSystems / APTSimulator
A toolset to make a system look as if it was the victim of an APT attack
+12 stars
from 2,775 · score 2.56
+12 stars
from 2,165 · score 2.56
446.authts / oidc-client-ts
OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications
- oidc
- oidc-client
- typescript
+12 stars
from 1,956 · score 2.56
447.profanity-im / profanity
Ncurses based XMPP client
- xmpp-client
- c
- xmpp
- chat
- ncurses
- decentralization
- +6 more
+12 stars
from 1,540 · score 2.56
448.elastic / protections-artifacts
Elastic Security detection content for Endpoint
+12 stars
from 1,496 · score 2.56
449.Zibbp / ganymede
Twitch VOD and Live Stream archiving platform. Includes a rendered and real-time chat for each archive.
- archive
- archived
- chat
- streaming
- twitch
- vod
- +4 more
+12 stars
from 1,012 · score 2.56
450.panva / oauth4webapi
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
- oauth2
- openid
- openid-connect
- oidc
- authentication
- authorization
- +10 more
+12 stars
from 785 · score 2.56
451.sane-apps / SaneBar
The privacy-first menu bar manager for macOS. Now 100% free and open source (MIT) — every feature unlocked. Native, lightweight, and scriptable.
+12 stars
from 318 · score 2.56
452.WebDecoy / FCaptcha
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
- fingerprinting
- go
- +14 more
+12 stars
from 219 · score 2.56
453.sammargolis / OpenScribe
OpenScribe is an open-source AI scribe that records patient encounters and generates structured clinical notes automatically. You keep full control over data, workflows, and patient privacy with no vendor lock-in.
+12 stars
from 213 · score 2.56
454.digitalocean / nginxconfig.io
⚙️ NGINX config generator on steroids 💉
+11 stars
from 28,240 · score 2.48
455.auth0 / node-jsonwebtoken
JsonWebToken implementation for node.js http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html
+11 stars
from 18,171 · score 2.48
456.animir / node-rate-limiter-flexible
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
+11 stars
from 3,588 · score 2.48
457.cliffe / SecGen
Create randomly insecure VMs
- security
- security-vulnerability
- virtualization
- randomization
- provisioning
- labs
- +2 more
+11 stars
from 2,790 · score 2.48
458.panda-re / panda
Platform for Architecture-Neutral Dynamic Analysis
- reverse-engineering
- dynamic-analysis
- qemu
- pandare
- pypanda
+11 stars
from 2,783 · score 2.48
459.Moham3dRiahi / Th3inspector
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
- information-gathering
- reverse-phone-lookup
- mx-lookup
- whois-lookup
- geo-ip
- cloudflare
- +14 more
+11 stars
from 2,665 · score 2.48
460.erocarrera / pefile
pefile is a Python module to read and work with PE (Portable Executable) files
+11 stars
from 2,071 · score 2.48
461.B-Con / crypto-algorithms
Basic implementations of standard cryptography algorithms, like AES and SHA-1.
+11 stars
from 2,043 · score 2.48
462.h3xduck / TripleCross
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
+11 stars
from 1,981 · score 2.48
463.Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
- azure
- defender-for-endpoint
- dfir
- kql
- sentinel
- threat-hunting
- +9 more
+11 stars
from 1,757 · score 2.48
464.dastergon / postmortem-templates
A collection of postmortem templates
- site-reliability-engineering
- site-reliability
- devops
- postmortem
- incident-reports
- post-mortem
- +4 more
+11 stars
from 1,450 · score 2.48
465.emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
- detection
- malware
- phishing
- cybersecurity
- misp
- +14 more
+11 stars
from 1,371 · score 2.48
466.PlumHound / PlumHound
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
- bloodhound
- bloodhoundad
- +14 more
+11 stars
from 1,323 · score 2.48
467.Badgerati / Pode
Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers
- powershell
- rest
- powershell-core
- windows
- unix
- cross-platform
- +13 more
+11 stars
from 1,061 · score 2.48
468.paulmillr / noble-curves
Audited & minimal JS implementation of elliptic curve cryptography.
- crypto
- cryptography
- ecdsa
- ed25519
- ed448
- eddsa
- +14 more
+11 stars
from 959 · score 2.48
469.momenbasel / keyFinder
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
- api-security
- browser-extension
- +14 more
+11 stars
from 720 · score 2.48
470.gravitee-io / gravitee-api-management
Gravitee.io - OpenSource API Management
- api
- api-management
- gateway
- java
- vertx
- api-gateway
- +1 more
+11 stars
from 456 · score 2.48
471.NodePassProject / nodepass
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
- api-rest
- connection-pooling
- cybersecurity
- devops
- golang
- http2
- +14 more
+11 stars
from 283 · score 2.48
472.agentrhq / authsome
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
+11 stars
from 92 · score 2.48
473.tennc / webshell
This is a webshell open source project
- webshell
- webshell-sniper
- php
- jsp
- asp
- aspx
- +3 more
+10 stars
from 10,786 · score 2.40
474.phpseclib / phpseclib
PHP Secure Communications Library
+10 stars
from 5,594 · score 2.40
475.USArmyResearchLab / Dshell
Dshell is a network forensic analysis framework.
+10 stars
from 5,495 · score 2.40
476.Greenwolf / social_mapper
A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)
+10 stars
from 4,081 · score 2.40
+10 stars
from 2,954 · score 2.40
478.libtom / libtomcrypt
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
- libtomcrypt
- cryptography
- c
- encryption
+10 stars
from 1,791 · score 2.40
479.ev-flow / quark-engine
The repository host gives no description.
- defcon
- android
- blackhat
- blackbox
- malware-analysis
- malware-detection
+10 stars
from 1,728 · score 2.40
480.globaleaks / globaleaks-whistleblowing-software
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
- digital-human-rights
- anonymity
- security
- python
- twisted
- sqlalchemy
- +14 more
+10 stars
from 1,515 · score 2.40
481.tklengyel / drakvuf
DRAKVUF Black-box Binary Analysis
- malware-analysis
- virtualization
- xen
- introspection
+10 stars
from 1,280 · score 2.40
482.ydkhatri / mac_apt
macOS (& ios) Artifact Parsing Tool
+10 stars
from 1,088 · score 2.40
483.vsys-host / shkeeper.io
SHKeeper is a self-hosted and open-source cryptocurrency gateway payment processor. It's integrate with popular CMS, any e-commerce, your own code or product
- accept-crypto
- accept-crypto-payments
- crypto
- crypto-gateway
- crypto-payment
- crypto-payment-api
- +14 more
+10 stars
from 628 · score 2.40
484.cynicsketch / nix-mineral
Conveniently and reasonably harden NixOS.
+10 stars
from 566 · score 2.40
485.techinz / playwright-captcha
Automating captcha solving for Playwright. Supports Cloudflare Turnstile & Interstitial, and reCAPTCHA V2 & V3 with Click-based or API (2captcha) solving. Designed for easy integration with Playwright, Patchright, and Camoufox.
- automation
- bot
- camoufox
- captcha
- detection
- patchright
- +1 more
+10 stars
from 352 · score 2.40
486.brix / crypto-js
JavaScript library of crypto standards.
+9 stars
from 16,390 · score 2.30
487.nginx-proxy / acme-companion
Automated ACME SSL certificate generation for nginx-proxy
+9 stars
from 7,719 · score 2.30
488.longld / peda
PEDA - Python Exploit Development Assistance for GDB
+9 stars
from 6,152 · score 2.30
489.jesseduffield / horcrux
Split your file into encrypted fragments so that you don't need to remember a passcode
+9 stars
from 5,101 · score 2.30
490.CalebFenton / simplify
Android virtual machine and deobfuscator
- deobfuscation
- java
- optimization
- android
- reverse-engineering
- malware-analysis
- +9 more
+9 stars
from 4,667 · score 2.30
491.sobolevn / git-secret
:busts_in_silhouette: A bash-tool to store your private data inside a git repository.
- git-secret
- git
- git-addons
- gpg
- encryption
- secret-management
+9 stars
from 4,047 · score 2.30
492.flipkart-incubator / Astra
Automated Security Testing For REST API's
- security
- restapiautomation
- python
- owasp
- penetration-testing-framework
- postman-collection
- +4 more
+9 stars
from 2,665 · score 2.30
493.pac4j / pac4j
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
- java
- security
- authentication
- authorization
- cas
- oauth
- +14 more
+9 stars
from 2,530 · score 2.30
494.sc0tfree / mentalist
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
- wordlist
- wordlist-generator
- password
- cracking
- cracking-hashes
- wordlist-technique
+9 stars
from 2,031 · score 2.30
495.matanolabs / matano
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
- aws
- cloud
- security
- big-data
- serverless
- apache-iceberg
- +14 more
+9 stars
from 1,698 · score 2.30
496.hashcat / hashcat-utils
Small utilities that are useful in advanced password cracking
+9 stars
from 1,622 · score 2.30
497.mushorg / conpot
ICS/SCADA honeypot
+9 stars
from 1,530 · score 2.30
498.Rurik / Noriben
Noriben - Portable, Simple, Malware Analysis Sandbox
+9 stars
from 1,305 · score 2.30
499.thehappydinoa / awesome-censys-queries
A collection of fascinating and bizarre Censys Search Queries
+9 stars
from 1,241 · score 2.30
+9 stars
from 1,219 · score 2.30