1.sherlock-project / sherlock
Hunt down social media accounts by username across social networks
+474 stars
from 94,913 · score 6.16
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
38 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
+411 stars
from 23,810 · score 6.02
3.mukul975 / Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
+392 stars
from 35,012 · score 5.97
4.opentrap / opentrap
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
+268 stars
from 504 · score 5.59
5.soxoj / maigret
🕵️♂️ Collect a dossier on a person by username from 6K websites
+245 stars
from 39,361 · score 5.51
6.wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
+115 stars
from 17,418 · score 4.75
7.digininja / DVWA
Damn Vulnerable Web Application (DVWA)
+38 stars
from 13,904 · score 3.66
8.maurosoria / dirsearch
Web path scanner
+25 stars
from 15,008 · score 3.26
+23 stars
from 16,942 · score 3.18
10.rmusser01 / Infosec_Reference
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
+22 stars
from 6,008 · score 3.14
11.infosecn1nja / Red-Teaming-Toolkit
This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
+19 stars
from 10,808 · score 3.00
12.jakejarvis / awesome-shodan-queries
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
+18 stars
from 7,817 · score 2.94
13.Ullaakut / cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
+15 stars
from 5,271 · score 2.77
14.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+14 stars
from 2,563 · score 2.71
15.momenbasel / htb-writeups
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
+11 stars
from 292 · score 2.48
16.decalage2 / awesome-security-hardening
A collection of awesome security hardening guides, tools and other resources
+9 stars
from 6,586 · score 2.30
17.EdOverflow / bugbounty-cheatsheet
A list of interesting payloads, tips and tricks for bug bounty hunters.
+7 stars
from 6,571 · score 2.08
18.onlurking / awesome-infosec
A curated list of awesome infosec courses and training resources.
+7 stars
from 5,765 · score 2.08
19.threat9 / routersploit
Exploitation Framework for Embedded Devices
+6 stars
from 13,274 · score 1.95
20.drduh / macOS-Security-and-Privacy-Guide
Community guide to securing and improving privacy on macOS.
+4 stars
from 22,569 · score 1.61
21.KuroLabs / stegcloak
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
+4 stars
from 3,928 · score 1.61
22.idaholab / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+4 stars
from 490 · score 1.61
23.dstotijn / hetty
An HTTP toolkit for security research.
+3 stars
from 12,525 · score 1.39
24.Roave / SecurityAdvisories
:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily
+3 stars
from 2,924 · score 1.39
25.PlumHound / PlumHound
Bloodhound Reporting for Blue and Purple Teams
+3 stars
from 1,331 · score 1.39
26.noraj / haiti
:key: Hash type identifier (CLI & lib)
+3 stars
from 1,007 · score 1.39
27.momenbasel / keyFinder
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
+3 stars
from 727 · score 1.39
28.bad-antics / nullkia
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
+3 stars
from 61 · score 1.39
29.bad-antics / blackflag-ecu
Professional ECU Diagnostics & Tuning Suite
+3 stars
from 44 · score 1.39
30.PaulSec / awesome-sec-talks
A collected list of awesome security talks
+2 stars
from 4,244 · score 1.10
31.cider-security-research / cicd-goat
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
+2 stars
from 2,325 · score 1.10
32.andreiverse / gorilla
tool for generating wordlists or extending an existing one using mutations.
+2 stars
from 389 · score 1.10
33.maliceio / maliceArchived
VirusTotal Wanna Be - Now with 100% more Hipster
+1 stars
from 1,863 · score 0.69
34.Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
+1 stars
from 1,763 · score 0.69
35.B3nac / Android-Reports-and-Resources
A big list of Android Hackerone disclosed reports and other resources.
+1 stars
from 1,717 · score 0.69
36.counteractive / incident-response-plan-template
A concise, directive, specific, flexible, and free incident response plan template
+1 stars
from 809 · score 0.69
37.securityfirst / Umbrella_android
Open source Android, iOS and Web app for learning about and managing digital and physical security. From how to send a secure message to dealing with a kidnap. Umbrella has best practice guides in over 40 topics in multiple languages. Used daily by people working in high risk countries - journalists, activists, diplomats, business travelers etc.
+1 stars
from 294 · score 0.69
38.SAP / cloud-active-defense
Add a layer of active defense to your cloud applications.
+1 stars
from 110 · score 0.69