1.owasp-amass / amass
In-depth attack surface mapping and asset discovery
+574 stars
from 14,875 · score 6.35
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
26 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.netalertx / NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
+525 stars
from 6,823 · score 6.27
3.aceberg / WatchYourLAN
Lightweight network IP scanner written in Go. With notifications, history, export to Grafana
+524 stars
from 7,130 · score 6.26
4.vanhauser-thc / thc-hydra
hydra
+404 stars
from 12,052 · score 6.00
5.telekom-security / tpotce
🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
+324 stars
from 9,354 · score 5.78
6.secdev / scapy
Scapy: the Python-based interactive packet manipulation program & library.
+250 stars
from 12,418 · score 5.53
7.urbanadventurer / WhatWeb
Next generation web scanner
+235 stars
from 6,740 · score 5.46
8.firezone / firezone
Blazing-fast remote access
+204 stars
from 8,951 · score 5.32
9.gojue / ecapture
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.
+165 stars
from 15,359 · score 5.11
10.kubeshark / kubeshark
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
+118 stars
from 12,004 · score 4.78
11.cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+115 stars
from 2,462 · score 4.75
12.ivre / ivre
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
+105 stars
from 4,088 · score 4.66
13.emanuele-em / proxelar
Scriptable local traffic workbench for inspecting, intercepting, replaying, and rewriting HTTP/HTTPS and WebSocket traffic.
+83 stars
from 1,019 · score 4.43
14.txthinking / brook
A cross-platform programmable network tool
+78 stars
from 15,114 · score 4.37
15.jassics / cybersecurity-roadmap
Skills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelines
+61 stars
from 447 · score 4.13
16.step-security / harden-runner
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
+60 stars
from 1,235 · score 4.11
17.julioliraup / Antiphishing
Advanced Phishing Protection: Suricata rulesets open and free
+30 stars
from 13 · score 3.43
18.sergiomarotco / Network-segmentation-cheat-sheet
Best practices for segmentation of the corporate network of any company
+22 stars
from 3,480 · score 3.14
19.idaholab / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
+20 stars
from 474 · score 3.04
20.nfstream / nfstream
NFStream: a Flexible Network Data Analysis Framework.
+11 stars
from 1,212 · score 2.48
21.Flowtriq / nethawk
Real-time network traffic analysis in your terminal.
+9 stars
from 7 · score 2.30
22.StamusNetworks / scirius
Scirius is a web application for Suricata ruleset management and threat hunting.
+6 stars
from 680 · score 1.95
23.hookprobe / hookprobe
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
+6 stars
from 42 · score 1.95
24.StamusNetworks / Clear-NDR-ISO
A Suricata based NDR distribution
+5 stars
from 1,586 · score 1.79
25.google / gonids
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
+3 stars
from 196 · score 1.39
26.travisbgreen / hunting-rules
Suricata rules for network anomaly detection
+3 stars
from 181 · score 1.39