+18 stars
from 720 · score 2.94
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
701–800 of 1,209 by Attention Score · May 9, 2026 – Nov 4, 2026 (UTC)
+18 stars
from 543 · score 2.94
703.DFIR-ORC / dfir-orc
Forensics artefact collection tool for systems running Microsoft Windows
- dfir
- incident-response
- collection
+18 stars
from 435 · score 2.94
704.jasonish / docker-suricata
A Suricata Docker image.
+18 stars
from 320 · score 2.94
705.erlef / oidcc
OpenId Connect client library in Erlang & Elixir
- client
- elixir
- erlang
- openid
- openid-client
- openid-connect
- +1 more
+18 stars
from 227 · score 2.94
706.QuipNetwork / hashsigs-rs
Hash-based post quantum signatures in Rust
+17 stars
from 11,188 · score 2.89
+17 stars
from 3,856 · score 2.89
+17 stars
from 2,499 · score 2.89
+17 stars
from 2,482 · score 2.89
710.maliceio / maliceArchived
VirusTotal Wanna Be - Now with 100% more Hipster
- malice
- docker
- malware
- infosec
- virustotal
- elasticsearch
- +7 more
+17 stars
from 1,847 · score 2.89
711.palkan / action_policy
Authorization framework for Ruby/Rails applications
- rails
- authorization
- ruby
- hacktoberfest
+17 stars
from 1,547 · score 2.89
712.greg7mdp / sparsepp
A fast, memory efficient hash map for C++
- hash-tables
- sparse-containers
- unordered
- sparsehash
- hashmap
- hash
- +2 more
+17 stars
from 1,298 · score 2.89
713.khast3x / Redcloud
Automated Red Team Infrastructure deployement using Docker
+17 stars
from 1,263 · score 2.89
714.markets / invisible_captcha
🍯 Unobtrusive and flexible spam protection for Rails apps
+17 stars
from 1,236 · score 2.89
715.mildsunrise / protobuf-inspector
🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition
- reverse-engineering
- protocol-buffers
- serialization
+17 stars
from 1,115 · score 2.89
716.janko / rodauth-rails
Rails integration for Rodauth authentication framework
- rodauth
- authentication
- rails
- multifactor-authentication
- account-management
- jwt
- +1 more
+17 stars
from 742 · score 2.89
717.sleuthkit / scalpel
Scalpel is an open source data carving tool. It is not being actively maintained.
+17 stars
from 673 · score 2.89
718.StamusNetworks / scirius
Scirius is a web application for Suricata ruleset management and threat hunting.
- python
- security
- management
- interface
- suricata
- signatures
- +8 more
+17 stars
from 669 · score 2.89
719.eduardsui / tlse
Single C file TLS 1.2/1.3 implementation, using tomcrypt as crypto library
+17 stars
from 667 · score 2.89
+17 stars
from 650 · score 2.89
721.JHUISI / charm
Charm: A Framework for Rapidly Prototyping Cryptosystems
- python
- cryptography
- prototyping
+17 stars
from 633 · score 2.89
722.electron / osx-sign
Codesign Electron macOS apps
+17 stars
from 618 · score 2.89
723.ppomes / myanon
A mysqldump anonymizer
- mysqldump
- anonymizer
- database-anonymizer
- rgpd
- anonymization
- mysql
- +12 more
+17 stars
from 118 · score 2.89
724.Abblix / Oidc.Server
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
- authentication
- authorization
- identity-management
- oauth2
- oidc
- oidc-server
- +13 more
+17 stars
from 97 · score 2.89
725.rafosw / APKdevastate
Advanced analysis software for APK payloads created by RATs.
- apk
- remoteaccesstrojan
- reverse-engineering
- aapt
- android
- security
- +1 more
+17 stars
from 48 · score 2.89
726.arthepsy / ssh-audit
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
+16 stars
from 2,979 · score 2.83
727.nccgroup / house
A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
+16 stars
from 1,454 · score 2.83
728.P3GLEG / Whaler
Program to reverse Docker images into Dockerfiles
- security-tools
- security
- docker-security
- reverse-engineering
- docker-image
- dockerfile
- +2 more
+16 stars
from 1,180 · score 2.83
+16 stars
from 1,062 · score 2.83
730.cisagov / untitledgoosetool
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
+16 stars
from 953 · score 2.83
+16 stars
from 795 · score 2.83
732.akamai-threat-research / mqtt-pwn
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- python
- mqtt
- mqtt-broker
- mqtt-client
- iot
- exploitation
- +1 more
+16 stars
from 440 · score 2.83
733.leodip / goiabada
Goiabada is an OAuth2 / OpenID Connect server written in Go.
- identity-management
- oauth2
- openid-connect
- user-management
- authentication
- authorization
- +7 more
+16 stars
from 188 · score 2.83
734.sane-apps / SaneClip
Privacy-first clipboard manager for macOS. Local-only history, snippets, smart paste, and Touch ID protection.
- clipboard
- clipboard-manager
- developer-tools
- macos
- macos-app
- pasteboard
- +6 more
+16 stars
from 17 · score 2.83
735.cleatdev / cleat
Give the agent a cage, not your keys. One-command Docker sandbox for AI coding agents: full autonomous permissions, per-project isolation, your host stays untouched.
- ai-agents
- ai-coding
- ai-safety
- autonomous-coding
- claude-code
- cli
- +13 more
+16 stars
from 2 · score 2.83
736.abraham / twitteroauth
The most popular PHP library for use with the Twitter OAuth REST API.
- twitter-oauth
- php
- twitter-api
- php-library
- twitteroauth
- +1 more
+15 stars
from 4,282 · score 2.77
+15 stars
from 4,148 · score 2.77
738.JosephSilber / bouncer
Laravel Eloquent roles and abilities.
- laravel
- authorization
- eloquent
- php
- security
- permissions
- +4 more
+15 stars
from 3,562 · score 2.77
739.bitwarden / desktopArchived
The desktop vault (Windows, macOS, & Linux).
+15 stars
from 3,512 · score 2.77
740.lexik / LexikJWTAuthenticationBundle
JWT authentication for your Symfony API
+15 stars
from 2,588 · score 2.77
741.dpnishant / appmonArchived
Documentation:
+15 stars
from 1,618 · score 2.77
742.alphasoc / flightsim
A utility to safely generate malicious network traffic patterns and evaluate controls.
+15 stars
from 1,351 · score 2.77
743.OpenIDC / mod_auth_openidc
OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd
- apache-httpd
- openid-connect
- openidconnect-client
- openidc
- c
- authentication
- +3 more
+15 stars
from 1,081 · score 2.77
744.Abacus-Group-RTO / legionArchived
Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.
+15 stars
from 1,040 · score 2.77
+15 stars
from 1,027 · score 2.77
746.nsmfoo / antivmdetection
Script to create templates to use with VirtualBox to make vm detection harder
- virtualbox
- antivm
- sandbox
- malware-analysis
+15 stars
from 766 · score 2.77
+15 stars
from 557 · score 2.77
748.hashcat / princeprocessor
Standalone password candidate generator using the PRINCE algorithm
+15 stars
from 487 · score 2.77
749.docker / scout-cli
Docker Scout CLI
+15 stars
from 441 · score 2.77
750.r3nt0n / torDDoS
DDoS attacks over Tor
- ddos
- ddos-tool
- ddos-attack
- ddos-script
- ddos-attacks
- hacking
- +5 more
+15 stars
from 392 · score 2.77
751.czs108 / Windows-PE-Packer
🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engineering（使用C和Intel x86汇编开发的Windows x86可执行文件打包工具，打包后的新文件可以阻碍逆向工程）
+15 stars
from 354 · score 2.77
752.log2timeline / dftimewolf
A framework for orchestrating forensic collection, processing and data export
+15 stars
from 347 · score 2.77
753.clem9669 / wordlists
Various wordlists FR & EN - Cracking French passwords
+15 stars
from 314 · score 2.77
754.p0w3rsh3ll / AutoRuns
🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
+15 stars
from 292 · score 2.77
755.daviddesmet / paseto-dotnet
🔑 Paseto.NET, a Paseto (Platform-Agnostic Security Tokens) implementation for .NET
- paseto
- dotnet
- netstandard
- dotnet-core
+15 stars
from 141 · score 2.77
756.google / container-explorer
The repository host gives no description.
+15 stars
from 95 · score 2.77
757.alib8b8 / aflare
Local-first automation Agent & deterministic workflow engine — the secure control layer between AI and your data. Data stays local. Connect your own LLM / files / notes / databases via Connector API. ReAct reasoning · DAG/WAL/Saga/idempotent execution · MCP · offline-capable.
- automation
- llm
- mcp
- agent
- dag
- go
- +14 more
+15 stars
from 1 · score 2.77
758.google / android-classysharkArchived
Android and Java bytecode viewer
- dex
- classyshark
- jar
- android
- java
- apk
- +4 more
+14 stars
from 7,534 · score 2.71
759.manfredsteyer / angular-oauth2-oidc
Support for OAuth 2 and OpenId Connect (OIDC) in Angular.
+14 stars
from 1,969 · score 2.71
760.ueberauth / ueberauth
An Elixir Authentication System for Plug-based Web Applications
- elixir
- authentication
- authorization
- oauth2
- oauth
- ueberauth
+14 stars
from 1,704 · score 2.71
+14 stars
from 1,701 · score 2.71
762.mikespook / gorbac
goRBAC provides a lightweight role-based access control (RBAC) implementation in Golang.
- rbac
- go
+14 stars
from 1,662 · score 2.71
+14 stars
from 1,602 · score 2.71
764.ptswarm / reFlutterArchived
Flutter Reverse Engineering Framework
- mobile-security
- reverse-engineering
- bugbounty
- ssl-pinning
+14 stars
from 1,450 · score 2.71
765.iGio90 / Dwarf
Full featured multi arch/os debugger built on top of PyQt5 and frida
- frida
- pyqt5
- reverse-engineering
- cracking
- unicorn-emulator
- capstone-engine
- +5 more
+14 stars
from 1,307 · score 2.71
766.strazzere / android-unpacker
Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
- android-unpacker
- gdb
- qemu
- reverse-engineering
- android
- unpacker
+14 stars
from 1,169 · score 2.71
767.uber-common / metta
An information security preparedness tool to do adversarial simulation.
- uber
- vagrant
- yaml
- celery
- python
- redis
- +7 more
+14 stars
from 1,134 · score 2.71
768.mxrch / penglab
🐧 Abuse of Google Colab for cracking hashes.
+14 stars
from 964 · score 2.71
+14 stars
from 690 · score 2.71
770.hashcat / kwprocessor
Advanced keyboard-walk generator with configureable basechars, keymap and routes
+14 stars
from 597 · score 2.71
771.horsicq / Nauz-File-Detector
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
- detect
- reverse-engineering
- signature
- malware-analysis
- malware-research
- malware-detection
- +2 more
+14 stars
from 572 · score 2.71
772.struppigel / PortEx
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
+14 stars
from 531 · score 2.71
773.retracedhq / retraced
🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀
- enterprise-software
- kubernetes
- audit-logs
- enterprise-ready
- javascript
- security-audit
- +1 more
+14 stars
from 437 · score 2.71
774.HightechSec / git-scanner
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
- hacking-tools
- bash
- git-dumper
- pentesting
- pentest-tool
- security-audit
- +1 more
+14 stars
from 375 · score 2.71
+14 stars
from 297 · score 2.71
776.avaneev / komihash
Very fast, high-quality hash function, discrete-incremental and streamed hashing-capable (non-cryptographic, header-only C/C++) 27GB/s + PRNG
+14 stars
from 275 · score 2.71
777.boostsecurityio / lotp
Supply Chain Security Research - Living Off The Pipeline tools
- lotp
- supply-chain-security
- living-off-the-pipeline
+14 stars
from 148 · score 2.71
778.gen0sec / jailer
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
- bpf
- ebpf
- kernel
- linux
- linux-kernel
- mac
- +1 more
+14 stars
from 48 · score 2.71
779.StackExchange / blackboxArchived
Safely store secrets in Git/Mercurial/Subversion
+13 stars
from 6,747 · score 2.64
+13 stars
from 2,101 · score 2.64
+13 stars
from 1,995 · score 2.64
782.lazaronixon / authentication-zero
An authentication system generator for Rails applications.
- rails
- ruby
- authentication
- generator
- rails-authentication
- api
- +3 more
+13 stars
from 1,859 · score 2.64
783.vbuterin / pybitcointools
SImple, common-sense Bitcoin-themed Python ECC library
+13 stars
from 1,324 · score 2.64
784.nccgroup / featherduster
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
- crypto
- cryptography
- encryption
- security
- python
- cryptanalysis
- +4 more
+13 stars
from 1,128 · score 2.64
785.ReversecLabs / leonidas
Automated Attack Simulation in the Cloud, complete with detection use cases.
+13 stars
from 607 · score 2.64
786.Escape-Technologies / graphql-armor
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
- apollo
- apollo-server
- graphql
- security
- typescript
- middleware
- +5 more
+13 stars
from 576 · score 2.64
787.java-decompiler / jd-core
JD-Core is a JAVA decompiler written in JAVA.
+13 stars
from 576 · score 2.64
788.Hakky54 / ayza
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
+13 stars
from 567 · score 2.64
789.NSAKEY / nsa-rules
Password cracking rules and masks for hashcat that I generated from cracked passwords.
+13 stars
from 561 · score 2.64
790.orlikoski / Skadi
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
+13 stars
from 506 · score 2.64
791.OWASP / Python-Honeypot
OWASP Honeypot, Automated Deception Framework.
- owasp
- honeypot
- honeynet
- deception
- security
- cybersecurity
- +2 more
+13 stars
from 470 · score 2.64
792.clem9669 / hashcat-rule
Rule for hashcat or john. Aiming to crack how people generate their password
- hashcat
- hashcat-rules
- john
- john-rules
- hashcat-rule
+13 stars
from 460 · score 2.64
793.ektrah / nsec
A modern and easy-to-use cryptographic library for .NET based on libsodium
- aead
- aes-gcm
- blake2b
- chacha20-poly1305
- crypto
- cryptography
- +14 more
+13 stars
from 439 · score 2.64
794.spieglt / Cloaker
Simple, drag-and-drop, password-based file encryption
- encryption-utility
- cross-platform
- encryption
- gui
- drag-and-drop
- simple
- +2 more
+13 stars
from 429 · score 2.64
795.drego85 / JoomlaScan
A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.
+13 stars
from 253 · score 2.64
796.QuipNetwork / hashsigs-solidity
Solidity contracts implementing hash based post quantum signatures
+12 stars
from 11,192 · score 2.56
797.dgrijalva / jwt-goArchived
ARCHIVE - Golang implementation of JSON Web Tokens (JWT). This project is now maintained at:
+12 stars
from 10,709 · score 2.56
798.maticzav / graphql-shield
🛡 A GraphQL tool to ease the creation of permission layer.
- graphql
- permissions
- server
- shield
- graphql-yoga
- apollo
- +1 more
+12 stars
from 3,565 · score 2.56
799.kjur / jsrsasign
CAUTION: END OF SUPPORT ON 14 AUG 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.
- asn1
- x509
- certificate
- crl
- ocsp
- timestamp
- +11 more
+12 stars
from 3,357 · score 2.56
800.plasma-disassembler / plasma
Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
- reverse-engineering
- disassembler
- capstone
- x86
- x86-64
- mips
- +1 more
+12 stars
from 3,058 · score 2.56