401.heartcombo / devise
Flexible authentication solution for Rails with Warden.
- rails
- ruby
- authentication
- devise
+38 stars
from 24,315 · score 3.66
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
401–500 of 1,368 by Attention Score · Aug 6, 2026 – Nov 3, 2026 (UTC)
402.jaredhanson / passport
Simple, unobtrusive authentication for Node.js.
+38 stars
from 23,483 · score 3.66
403.ev-flow / quark-engine
The repository host gives no description.
- defcon
- android
- blackhat
- blackbox
- malware-analysis
- malware-detection
+38 stars
from 1,700 · score 3.66
404.den4uk / andriller
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
+38 stars
from 1,591 · score 3.66
405.SSLMate / certspotter
Lightweight Certificate Transparency Log Monitor
- certificate-transparency
- pki
- x509
- security
- webpki
+38 stars
from 1,159 · score 3.66
406.Luzifer / ots
One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser
- one-time-secret
- golang
- encryption
- aes256
+38 stars
from 772 · score 3.66
407.momenbasel / keyFinder
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
- api-security
- browser-extension
- +14 more
+38 stars
from 693 · score 3.66
408.fkie-cad / friTap
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
- frida
- ssl
- security
- hooking
- network-analysis
- network-forensics
- +11 more
+38 stars
from 527 · score 3.66
+37 stars
from 4,985 · score 3.64
410.epinna / tplmap
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
+37 stars
from 4,178 · score 3.64
411.lanjelot / patator
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
- pentest
- brute-force
+37 stars
from 3,905 · score 3.64
412.odedshimon / BruteShark
Network Analysis Tool
- hacking
- pcap-files
- pcap
- cyber
- network-analysis
- hashcat
- +11 more
+37 stars
from 3,377 · score 3.64
413.mushorg / conpot
ICS/SCADA honeypot
+37 stars
from 1,502 · score 3.64
414.paulmillr / noble-curves
Audited & minimal JS implementation of elliptic curve cryptography.
- crypto
- cryptography
- ecdsa
- ed25519
- ed448
- eddsa
- +14 more
+37 stars
from 933 · score 3.64
415.pret / pokegold
Disassembly of Pokémon Gold/Silver
- pokemon
- disassembly
- gameboy-color
- reverse-engineering
- gbz80
+37 stars
from 698 · score 3.64
+36 stars
from 3,765 · score 3.61
417.microcosm-cc / bluemonday
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
+36 stars
from 3,695 · score 3.61
418.0xMassi / stik_app
Instant thought capture for macOS. One shortcut, post-it appears, type, close.
+36 stars
from 232 · score 3.61
419.sorkila / lockpaw
Cover your Mac's screen with a hotkey while AI agents keep running, even with the lid closed. The covered screen glows when Claude Code, Codex or Gemini needs you. Touch ID unlock.
- ai-agents
- developer-tools
- macos
- macos-app
- open-source
- privacy
- +13 more
+36 stars
from 138 · score 3.61
420.lucia-auth / lucia
Authentication, simple and clean
+35 stars
from 10,415 · score 3.58
421.greg7mdp / parallel-hashmap
A family of header-only, very fast and memory-friendly hashmap and btree containers.
+35 stars
from 3,193 · score 3.58
422.Moham3dRiahi / Th3inspector
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
- information-gathering
- reverse-phone-lookup
- mx-lookup
- whois-lookup
- geo-ip
- cloudflare
- +14 more
+35 stars
from 2,641 · score 3.58
423.hashcat / hashcat-utils
Small utilities that are useful in advanced password cracking
+35 stars
from 1,596 · score 3.58
424.mcginty / snow
A Rust implementation of the Noise Protocol Framework
- cryptography
- crypto
- noise-protocol-framework
- noise-protocol
- noise
- rust
- +1 more
+35 stars
from 1,080 · score 3.58
425.shadawck / awesome-anti-forensic
Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.
- awesome-list
- awesome
- anti-forensic
- anti-forensics
- cybersecurity
- forensic-analysis
- +2 more
+35 stars
from 1,023 · score 3.58
426.0xa3k5 / web3icons
2000+ crypto svg icons for react
+35 stars
from 257 · score 3.58
+34 stars
from 2,930 · score 3.56
+34 stars
from 2,600 · score 3.56
429.jtsylve / LiME
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
+34 stars
from 2,020 · score 3.56
430.traggo / server
self-hosted tag-based time tracking
- golang
- selfhosted
- freesoftware
- privacy
- self-hosted
- timetracking
- +2 more
+34 stars
from 1,606 · score 3.56
+33 stars
from 5,873 · score 3.53
432.digitalbazaar / forge
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
- crypto
- cryptography
- x509
- message-digest
- aes
- asn1
- +14 more
+33 stars
from 5,317 · score 3.53
433.jesseduffield / horcrux
Split your file into encrypted fragments so that you don't need to remember a passcode
+33 stars
from 5,077 · score 3.53
434.aquasecurity / cloudsploit
Cloud Security Posture Management (CSPM)
- aws
- security
- security-audit
- cloud
- azure
- cspm
- +5 more
+33 stars
from 3,756 · score 3.53
435.profanity-im / profanity
Ncurses based XMPP client
- xmpp-client
- c
- xmpp
- chat
- ncurses
- decentralization
- +6 more
+33 stars
from 1,519 · score 3.53
436.zlib-ng / minizip-ng
Fork of the popular zip manipulation library found in the zlib distribution.
- minizip
- zip
- zlib
- lzma
- bzip2
- winzip-aes
- +9 more
+33 stars
from 1,476 · score 3.53
437.paulmillr / noble-post-quantum
Auditable & minimal JS implementation of public-key post-quantum cryptography
- dilithium
- kyber
- ml-kem
- post-quantum-cryptography
- sphincs
- sphincs-plus
- +14 more
+33 stars
from 337 · score 3.53
438.krzyzanowskim / CryptoSwift
CryptoSwift is a growing collection of standard and secure cryptographic algorithms implemented in Swift
- swift
- aes
- cryptography
- commoncrypto
- cryptoswift
- md5
- +7 more
+32 stars
from 10,546 · score 3.50
439.google / tsunami-security-scanner
Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
+32 stars
from 8,586 · score 3.50
440.padloc / padloc
A modern, open source password manager for individuals and teams.
- javascript
- lit-element
- lit-html
- password-generator
- password-manager
- progressive-web-app
- +5 more
+32 stars
from 2,909 · score 3.50
441.sc0tfree / mentalist
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
- wordlist
- wordlist-generator
- password
- cracking
- cracking-hashes
- wordlist-technique
+32 stars
from 2,008 · score 3.50
442.CaringCaribou / caringcaribou
A friendly car security exploration tool for the CAN bus
+32 stars
from 936 · score 3.50
443.gravitee-io / gravitee-api-management
Gravitee.io - OpenSource API Management
- api
- api-management
- gateway
- java
- vertx
- api-gateway
- +1 more
+32 stars
from 435 · score 3.50
444.NextronSystems / APTSimulator
A toolset to make a system look as if it was the victim of an APT attack
+31 stars
from 2,756 · score 3.47
+31 stars
from 1,915 · score 3.47
446.hashtopolis / server
Hashtopolis - distributed password cracking with Hashcat
- cracking
- distributed
- hashcat
- pentesting
- passwords
- hashtopussy
- +8 more
+31 stars
from 1,796 · score 3.47
447.vanhoefm / fragattacks
The repository host gives no description.
+31 stars
from 1,304 · score 3.47
448.tklengyel / drakvuf
DRAKVUF Black-box Binary Analysis
- malware-analysis
- virtualization
- xen
- introspection
+31 stars
from 1,259 · score 3.47
449.ForensicArtifacts / artifacts
Digital Forensics artifact repository
+31 stars
from 1,253 · score 3.47
450.safedep / vet
Protect against malicious open source packages 🤖
+31 stars
from 1,093 · score 3.47
451.ydkhatri / mac_apt
macOS (& ios) Artifact Parsing Tool
+31 stars
from 1,067 · score 3.47
452.sundaysec / Android-Exploits
A collection of android Exploits and Hacks
+31 stars
from 1,002 · score 3.47
453.wagga40 / Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
- detection
- auditd
- +9 more
+31 stars
from 840 · score 3.47
454.Hexastrike / PyrsistenceSniper
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
- cybersecurity
- cybersecurity-tools
- incident-response
- security
- security-audit
- security-tools
+31 stars
from 241 · score 3.47
455.bad-antics / nullkia
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
- android-hacking
- baseband
- bootloader-unlock
- checkm8
- firmware-hacking
- ios-jailbreak
- +14 more
+31 stars
from 33 · score 3.47
456.phpseclib / phpseclib
PHP Secure Communications Library
+30 stars
from 5,574 · score 3.43
+30 stars
from 2,114 · score 3.43
+30 stars
from 1,602 · score 3.43
459.PlumHound / PlumHound
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
- bloodhound
- bloodhoundad
- +14 more
+30 stars
from 1,304 · score 3.43
460.kaplanelad / shellfirm
Safety guardrails for ai coding agents and human terminal commands
+30 stars
from 923 · score 3.43
461.gmh5225 / awesome-llvm-security
awesome llvm security [Welcome to PR]
+30 stars
from 860 · score 3.43
462.panva / oauth4webapi
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
- oauth2
- openid
- openid-connect
- oidc
- authentication
- authorization
- +10 more
+30 stars
from 767 · score 3.43
463.membrane / api-gateway
API Gateway bridging modern and legacy APIs with WSDL-to-OpenAPI, SOAP-to-REST, XML, OAuth2, and GraphQL.
- oauth2
- api-gateway
- api
- rest
- openapi
- soap
- +3 more
+30 stars
from 627 · score 3.43
464.sammargolis / OpenScribe
OpenScribe is an open-source AI scribe that records patient encounters and generates structured clinical notes automatically. You keep full control over data, workflows, and patient privacy with no vendor lock-in.
+30 stars
from 195 · score 3.43
465.coinpaprika / coinpaprika-api-go-client
Official CoinPaprika API Go client — coin prices, tickers, OHLCV, exchanges, and global market stats.
- api-client
- bitcoin
- blockchain
- coinpaprika
- crypto
- cryptocurrency
- +4 more
+30 stars
from 27 · score 3.43
466.react-cosmos / react-cosmos
Sandbox for developing and testing UI components in isolation
+29 stars
from 8,665 · score 3.40
467.animir / node-rate-limiter-flexible
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
+29 stars
from 3,570 · score 3.40
+29 stars
from 2,963 · score 3.40
469.nil0x42 / phpsploit
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
- hacktool
- blackhat
- +12 more
+29 stars
from 2,476 · score 3.40
470.david942j / one_gadget
The best tool for finding one gadget RCE in libc.so.6
+29 stars
from 2,335 · score 3.40
471.lukechilds / reverse-shell
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
- microservice
- security
+29 stars
from 2,043 · score 3.40
472.authts / oidc-client-ts
OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications
- oidc
- oidc-client
- typescript
+29 stars
from 1,939 · score 3.40
473.in-toto / in-toto
in-toto is a framework to protect supply chain integrity.
- supply-chain
- security
- new-york-university
- secure-systems-lab
+29 stars
from 1,024 · score 3.40
474.Hakky54 / certificate-ripper
🔐 A CLI tool to extract server certificates
+29 stars
from 919 · score 3.40
475.zladx / LADX-Disassembly
Disassembly of Legend of Zelda: Link's Awakening DX
- gameboy
- hacktoberfest
- reverse-engineering
- z80
+29 stars
from 890 · score 3.40
476.longld / peda
PEDA - Python Exploit Development Assistance for GDB
+28 stars
from 6,133 · score 3.37
477.deepfence / ThreatMapper
Open Source Cloud Native Application Protection Platform (CNAPP)
- cloud-native
- vulnerability-management
- threat-analysis
- devsecops
- secops
- registry-scanning
- +13 more
+28 stars
from 5,300 · score 3.37
478.CalebFenton / simplify
Android virtual machine and deobfuscator
- deobfuscation
- java
- optimization
- android
- reverse-engineering
- malware-analysis
- +9 more
+28 stars
from 4,648 · score 3.37
479.erocarrera / pefile
pefile is a Python module to read and work with PE (Portable Executable) files
+28 stars
from 2,054 · score 3.37
480.yeti-platform / yeti
Your Everyday Threat Intelligence
- infosec
- threatintel
- threat-sharing
- threat-hunting
- enrichment
- intelligence
- +1 more
+28 stars
from 2,011 · score 3.37
481.Rurik / Noriben
Noriben - Portable, Simple, Malware Analysis Sandbox
+28 stars
from 1,286 · score 3.37
482.jasmin-lang / jasmin
Language for high-assurance and high-speed cryptography
+28 stars
from 361 · score 3.37
483.agentrhq / authsome
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
+28 stars
from 75 · score 3.37
484.bombinisecurity / bombini
eBPF Security Monitoring and Sandboxing Agent Based on Aya
+28 stars
from 52 · score 3.37
485.sobolevn / git-secret
:busts_in_silhouette: A bash-tool to store your private data inside a git repository.
- git-secret
- git
- git-addons
- gpg
- encryption
- secret-management
+27 stars
from 4,029 · score 3.33
486.panda-re / panda
Platform for Architecture-Neutral Dynamic Analysis
- reverse-engineering
- dynamic-analysis
- qemu
- pandare
- pypanda
+27 stars
from 2,767 · score 3.33
487.libtom / libtomcrypt
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
- libtomcrypt
- cryptography
- c
- encryption
+27 stars
from 1,774 · score 3.33
488.cmu-sei / pharos
Automated static analysis tools for binary programs
- binary-analysis
- reverse-engineering
+27 stars
from 1,714 · score 3.33
489.mufeedvh / pdfrip
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
- rust
- security
- security-tools
- password
- password-cracker
- +1 more
+27 stars
from 1,391 · score 3.33
490.HemmeligOrg / Hemmelig.appArchived
Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.
- secret
- encryption
- onetimesecret
- password
- personal-data
- gdpr
- +9 more
+27 stars
from 1,218 · score 3.33
491.RustCrypto / AEADs
Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers
+27 stars
from 945 · score 3.33
492.NodePassProject / nodepass
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
- api-rest
- connection-pooling
- cybersecurity
- devops
- golang
- http2
- +14 more
+27 stars
from 267 · score 3.33
+27 stars
from 194 · score 3.33
494.eunomia-bpf / ActPlane
eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness
- ebpf
- harness
- ifc
- policy-engine
+27 stars
from 82 · score 3.33
495.benbusby / whoogle-searchArchived
A self-hosted, ad-free, privacy-respecting metasearch engine
+26 stars
from 11,534 · score 3.30
496.vvo / iron-session
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
- nextjs
- authentication
- session
- stateless
- cookies
- expressjs
- +2 more
+26 stars
from 4,128 · score 3.30
497.linkedin / qark
Tool to look for several security related Android application vulnerabilities
+26 stars
from 3,371 · score 3.30
498.christophetd / CloudFlair
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
+26 stars
from 2,959 · score 3.30
499.flipkart-incubator / Astra
Automated Security Testing For REST API's
- security
- restapiautomation
- python
- owasp
- penetration-testing-framework
- postman-collection
- +4 more
+26 stars
from 2,648 · score 3.30
+26 stars
from 2,264 · score 3.30