501.B-Con / crypto-algorithms
Basic implementations of standard cryptography algorithms, like AES and SHA-1.
+49 stars
from 2,005 · score 3.91
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
501–600 of 1,222 by Attention Score · May 9, 2026 – Nov 4, 2026 (UTC)
502.kmackay / micro-ecc
ECDH and ECDSA for 8-bit, 32-bit, and 64-bit processors.
+49 stars
from 1,396 · score 3.91
503.panva / oauth4webapi
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
- oauth2
- openid
- openid-connect
- oidc
- authentication
- authorization
- +10 more
+49 stars
from 748 · score 3.91
+49 stars
from 298 · score 3.91
505.pic-standard / pic-standard
Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.
- action-proposals
- agentic-ai
- agents
- ai
- cli
- crewai
- +14 more
+49 stars
from 21 · score 3.91
506.samyk / poisontap
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
+48 stars
from 6,434 · score 3.89
507.pallets / itsdangerous
Safely pass trusted data to untrusted environments and back.
- python
- security
- hmac
- serialization
- itsdangerous
- pallets
+48 stars
from 3,093 · score 3.89
508.jbevain / cecil
Cecil is a library to inspect, modify and create .NET programs and libraries.
- dotnet
- library
- bytecode
- cil
- c-sharp
- mono
+48 stars
from 2,960 · score 3.89
509.wemake-services / wemake-django-template
Bleeding edge django template focused on code quality and security.
+48 stars
from 2,233 · score 3.89
510.noraj / haiti
:key: Hash type identifier (CLI & lib)
- security-tools
- hash
- identify
- digest
- hashing
- security
- +14 more
+48 stars
from 963 · score 3.89
511.HaschekSolutions / pictshare
:camera: PictShare is an open source image, mp4, pastebin hosting service with a simple resizing and upload API that you can host yourself. :rice_scene:
- docker
- images
- selfhosted
- picture
- mp4-uploads
- image-uploader
- +1 more
+48 stars
from 903 · score 3.89
+47 stars
from 4,154 · score 3.87
513.tellerops / teller
Cloud native secrets management for developers - never leave your command line for secrets.
- secrets
- secret-management
- vault
- hashicorp
- aws
- rust
- +1 more
+47 stars
from 3,190 · score 3.87
514.baidu / openrasp
🔥Open source RASP solution
+47 stars
from 2,944 · score 3.87
515.BinaryAnalysisPlatform / bap
Binary Analysis Platform
- binary-analysis
- reverse-engineering
- program-analysis
- static-analysis
- dynamic-analysis
- program-verification
- +13 more
+47 stars
from 2,217 · score 3.87
516.h3xduck / TripleCross
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
+47 stars
from 1,945 · score 3.87
517.D4Vinci / elpscrk
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
- elliot
- cupp
- passwords
- hacking-tool
- bruteforce
- brute-force
- +6 more
+47 stars
from 921 · score 3.87
518.go-jose / go-jose
An implementation of JOSE standards (JWE, JWS, JWT) in Go
+47 stars
from 498 · score 3.87
+46 stars
from 8,473 · score 3.85
520.Neo23x0 / yarGen
yarGen is a generator for YARA rules
- python
- yara
- malware
- malware-research
- malware-analysis
- malwareanalysis
+46 stars
from 1,778 · score 3.85
521.brannondorsey / naive-hashcat
Crack password hashes without the fuss :cat2:
+46 stars
from 1,383 · score 3.85
522.Hakky54 / certificate-ripper
🔐 A CLI tool to extract server certificates
+46 stars
from 903 · score 3.85
523.Mutasem-mk4 / procscope
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
- bpf
- ebpf
- forensics
- golang
- linux-security
- reverse-engineering
- +14 more
+46 stars
from 2 · score 3.85
524.ac-pm / Inspeckage
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
- android-application
- security-analysis
- dynamic-analysis
- xposed
+45 stars
from 2,943 · score 3.83
525.dec0dOS / amazing-github-template
🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
- readme
- documentation
- docs
- docs-generator
- documentation-generator
- template
- +13 more
+45 stars
from 677 · score 3.83
526.tymondesigns / jwt-auth
🔐 JSON Web Token Authentication for Laravel & Lumen
+44 stars
from 11,442 · score 3.81
+44 stars
from 2,948 · score 3.81
528.awnumar / memguard
Software sandbox for storage of sensitive information in memory.
- security
- golang
- go
- cryptography
- memory
- crypto
+44 stars
from 2,721 · score 3.81
529.evilsocket / xrayArchived
XRay is a tool for recon, mapping and OSINT gathering from public networks.
+44 stars
from 2,292 · score 3.81
+44 stars
from 1,404 · score 3.81
531.EnableSecurity / sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
- svcrack
- svmap
- +6 more
+44 stars
from 1,069 · score 3.81
532.SecureAuthCorp / oauth2c
User-friendly OAuth2 CLI
+44 stars
from 909 · score 3.81
533.stefanoviana / deepalpha
AI crypto trading bot with deep neural network (84.9% accuracy, 25 coins). BiLSTM + Attention trained on GPU. Bybit, Binance, OKX, Gate.io. Free cloud or self-hosted.
- algorithmic-trading
- lightgbm
- machine-learning
- trading-bot
- bybit
- crypto
- +14 more
+44 stars
from 10 · score 3.81
+43 stars
from 1,465 · score 3.78
535.OneKeePass / mobile
A secure password manager for iOS and Android platforms
+43 stars
from 201 · score 3.78
536.lukechilds / reverse-shell
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
- microservice
- security
+42 stars
from 2,030 · score 3.76
+42 stars
from 1,283 · score 3.76
538.moloch-- / RootTheBox
A Game of Hackers (CTF Scoreboard & Game Manager)
+42 stars
from 1,098 · score 3.76
539.r3nt0n / bopscrk
Generate smart and powerful wordlists
- wordlist
- password
- hacking-tool
- password-cracking
- wordlist-generator
- cracking
- +13 more
+42 stars
from 1,081 · score 3.76
540.mgeeky / ProtectMyTooling
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
+42 stars
from 1,064 · score 3.76
541.bad-antics / nullkia
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
- android-hacking
- baseband
- bootloader-unlock
- checkm8
- firmware-hacking
- ios-jailbreak
- +14 more
+42 stars
from 22 · score 3.76
542.matanolabs / matano
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
- aws
- cloud
- security
- big-data
- serverless
- apache-iceberg
- +14 more
+41 stars
from 1,667 · score 3.74
543.mstrobel / procyon
Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.
+41 stars
from 1,187 · score 3.74
544.hasherezade / mal_unpack
Dynamic unpacker based on PE-sieve
- libpeconv
- pe-sieve
- memory-forensics
- malware-unpacker
- malware-analysis
+41 stars
from 803 · score 3.74
545.tink-crypto / tinkArchived
Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.
- cryptography
- java
- cpp
- go
- objc
- crypto
- +2 more
+40 stars
from 13,496 · score 3.71
546.build-trust / ockam
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
- messaging
- authentication
- key-management
- identity
- trust
- kafka
- +12 more
+40 stars
from 4,599 · score 3.71
+40 stars
from 1,860 · score 3.71
548.ashishb / android-malware
Collection of android malware samples
+40 stars
from 1,193 · score 3.71
549.Aegrah / PANIX
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
+40 stars
from 855 · score 3.71
550.WardPearce / paaster
Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.
- pastebin
- paaster
- e2ee
- paste
- store
- python
- +8 more
+40 stars
from 528 · score 3.71
551.zama-ai / bounty-programArchived
Zama Bounty Program: Contribute to the FHE space and Zama's open source libraries and get rewarded 💰
- bounty-program
- cryptography
- fully-homomorphic-encryption
- zama
+39 stars
from 15,180 · score 3.69
+39 stars
from 6,586 · score 3.69
553.apache / casbin-node-casbin
An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser
+39 stars
from 2,882 · score 3.69
554.ErikEJ / EFCorePowerTools
Entity Framework Core Power Tools - reverse engineering, migrations and model visualization in Visual Studio & CLI
- entity-framework-core
- visual-studio
- entity-framework
- model-visualization
- sql-server
- hacktoberfest
- +3 more
+39 stars
from 2,477 · score 3.69
555.airbus-seclab / bincat
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
- ida-plugin
- taint-analysis
- reverse-engineering
- disassembly
+39 stars
from 1,843 · score 3.69
556.Thalhammer / jwt-cpp
A header only library for creating and validating json web tokens in c++
- cpp
- header-only
- jwt
- json-web-token
+39 stars
from 1,130 · score 3.69
+39 stars
from 839 · score 3.69
558.counteractive / incident-response-plan-template
A concise, directive, specific, flexible, and free incident response plan template
- incident-response
- incident
- incident-management
- infosec
- information-security
- cybersecurity
+39 stars
from 772 · score 3.69
559.Revadike / InternalSteamWebAPI
Documenting the unofficial and internal Steam Web API
- documentation
- docs
- wiki
- api-documentation
- api
- steam
- +9 more
+39 stars
from 614 · score 3.69
560.ramosbugs / openidconnect-rs
OpenID Connect Library for Rust
- oauth2-client
- oauth2-authentication
- openid-connect
- openid-client
- openidconnect-client
- security
- +4 more
+39 stars
from 610 · score 3.69
561.AristoChen / usb-proxy
A USB proxy based on raw-gadget and libusb
- usb
- proxy
- libusb
- otg
- raspberry-pi
- usb-otg
- +7 more
+39 stars
from 251 · score 3.69
562.x0rz / phishing_catcher
Phishing catcher using Certstream
- phishing
- threat-intelligence
- certificate-transparency
- osint
- threatintel
+38 stars
from 1,794 · score 3.66
563.fkie-cad / cwe_checker
cwe_checker finds vulnerable patterns in binary executables
- cwe
- binary-analysis
- static-analyzer
- vulnerability-scanner
- reverse-engineering
- program-analysis
- +4 more
+38 stars
from 1,326 · score 3.66
+38 stars
from 1,117 · score 3.66
+38 stars
from 879 · score 3.66
566.jedisct1 / libhydrogen
A lightweight, secure, easy-to-use crypto library suitable for constrained environments.
+38 stars
from 757 · score 3.66
567.RustCrypto / signatures
Cryptographic signature algorithms: DSA, ECDSA, Ed25519
- ecdsa
- ed25519
- signatures
- dsa
- rust
+38 stars
from 632 · score 3.66
568.l4rm4nd / VoucherVault
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
- coupons
- vouchers
- conventional-commits
- apprise
- asset-manager
- coupon-management-system
- +14 more
+38 stars
from 476 · score 3.66
569.RaffaDNDM / HacknDroid
Automation of some MAPT activities and interaction with the mobile Android device.
- android-analysis
- frida
- mobile-hacking
- mobile-penetration-testing
- mobile-pentest
- mobile-pentest-toolkit
- +3 more
+38 stars
from 146 · score 3.66
570.django-guardian / django-guardian
Per object permissions for Django
+37 stars
from 3,884 · score 3.64
571.RustCrypto / elliptic-curves
Collection of pure Rust elliptic curve implementations: NIST P-224, P-256, P-384, P-521, secp256k1, SM2
- ecdsa
- nist
- rust
- schnorr
- taproot
+37 stars
from 844 · score 3.64
572.bombinisecurity / bombini
eBPF Security Monitoring and Sandboxing Agent Based on Aya
+37 stars
from 43 · score 3.64
573.kOaDT / oss-oopssec-store
Security training for the apps you actually ship. Open your browser and start hacking.
- appsec
- ctf
- cybersecurity
- nextjs
- typescript
- owasp-top10
- +8 more
+37 stars
from 17 · score 3.64
574.travist / jsencrypt
A tiny (18.5 kB gzip), zero-dependency, Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
+36 stars
from 6,770 · score 3.61
575.NotSoSecure / password_cracking_rules
One rule to crack all passwords. or atleast we hope so.
+36 stars
from 1,609 · score 3.61
576.ValvePython / steam
☁️ Python package for interacting with Steam
- steam
- valve
- steamworks
- webapi
- authentication
- authenticator
- +6 more
+36 stars
from 1,254 · score 3.61
577.EmilStenstrom / justhtml
A pure Python HTML5 parser that just works. No C extensions to compile. No system dependencies to install. No complex API to learn.
+36 stars
from 1,125 · score 3.61
578.certtools / intelmq
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- cybersecurity
- threat
- ioc
- malware
- phishing
- cert
- +10 more
+36 stars
from 1,106 · score 3.61
579.DFIRKuiper / Kuiper
Digital Forensics Investigation Platform
+36 stars
from 880 · score 3.61
580.stealthsploit / OneRuleToRuleThemStill
A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule
+36 stars
from 632 · score 3.61
581.chronicle / detection-rules
Collection of example YARA-L rules for use within Google Security Operations
+36 stars
from 487 · score 3.61
582.tink-crypto / tink-java
Java implementation of Tink
+36 stars
from 275 · score 3.61
583.RoganDawes / P4wnP1
P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
+35 stars
from 4,352 · score 3.58
584.404labfr / laravel-impersonate
Laravel Impersonate is a plugin that allows you to authenticate as your users.
- laravel-package
- impersonate
- php
- user-management
- laravel
+35 stars
from 2,309 · score 3.58
585.ahmedkhlief / APT-Hunter
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
- threat-hunting
- purpleteam
- python3
- windows-eventlog
- apt-attacks
- incident-response
- +2 more
+35 stars
from 1,397 · score 3.58
586.0xInfection / XSRFProbe
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
- csrf-scanner
- crafted-tokens
- +5 more
+35 stars
from 1,273 · score 3.58
587.viaduct-ai / kustomize-sops
KSOPS - A Flexible Kustomize Plugin for SOPS Encrypted Resources
+35 stars
from 818 · score 3.58
588.unipacker / unipacker
Automatic and platform-independent unpacker for Windows binaries based on emulation
- reverse-engineering
- unpacker
- pefile
- windows
- python
- security
- +5 more
+35 stars
from 749 · score 3.58
589.cuckoosandbox / cuckooArchived
Cuckoo Sandbox is an automated dynamic malware analysis system
+34 stars
from 5,925 · score 3.56
590.pac4j / pac4j
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
- java
- security
- authentication
- authorization
- cas
- oauth
- +14 more
+34 stars
from 2,505 · score 3.56
+34 stars
from 1,897 · score 3.56
592.cr-marcstevens / sha1collisiondetection
Library and command line tool to detect SHA-1 collision in a file
+34 stars
from 1,389 · score 3.56
593.apache / casbin-Casbin.NET
An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)
- casbin
- access-control
- authorization
- rbac
- abac
- acl
- +4 more
+34 stars
from 1,309 · score 3.56
594.kspearrin / Otp.NET
A .NET implementation of TOTP and HOTP for things like two-factor authentication codes.
+34 stars
from 1,291 · score 3.56
595.openxpki / openxpki
OpenXPKI Code
- pki
- enterprise-software
- workflow-based
- x509
- hsm-support
- opensource-pki
- +1 more
+34 stars
from 668 · score 3.56
596.0x4D31 / galah
Galah: An LLM-powered web honeypot.
- golang
- honeypot
- llm
- openai
- openai-api
- security
- +1 more
+34 stars
from 641 · score 3.56
597.openwall / johnny
GUI frontend to John the Ripper password cracker
+34 stars
from 614 · score 3.56
598.ByteSnipers / mobile-pentest-toolkit
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
- android
- android-pentesting
- mobile
- mobile-pentest
- pentest-tool
- mobile-pentest-toolkit
- +2 more
+34 stars
from 66 · score 3.56
599.django-oauth / django-oauth-toolkit
OAuth2 goodies for the Djangonauts!
+33 stars
from 3,310 · score 3.53
600.dastergon / postmortem-templates
A collection of postmortem templates
- site-reliability-engineering
- site-reliability
- devops
- postmortem
- incident-reports
- post-mortem
- +4 more
+33 stars
from 1,428 · score 3.53