1.usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
+25,437 stars
from 47,794 · score 10.14
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
1–100 of 489 by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.trimstray / the-book-of-secret-knowledge
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
+19,271 stars
from 235,848 · score 9.87
3.mukul975 / Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
+8,447 stars
from 26,957 · score 9.04
4.Hack-with-Github / Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
+7,342 stars
from 116,997 · score 8.90
5.KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
+4,804 stars
from 46,037 · score 8.48
6.caddyserver / caddy
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
+4,247 stars
from 74,382 · score 8.35
7.goauthentik / authentik
The authentication glue you need.
+3,700 stars
from 22,492 · score 8.22
8.mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
+2,899 stars
from 12,776 · score 7.97
9.TecharoHQ / anubis
Weighs the soul of incoming HTTP requests to stop AI crawlers
+2,890 stars
from 20,993 · score 7.97
10.swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
+2,888 stars
from 79,396 · score 7.97
11.ImranR98 / Obtainium
Get Android app updates straight from the source.
+2,549 stars
from 18,578 · score 7.84
12.projectdiscovery / nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
+2,346 stars
from 30,179 · score 7.76
13.gitleaks / gitleaks
Find secrets with Gitleaks 🔑
+2,208 stars
from 28,367 · score 7.70
14.mitmproxy / mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
+2,166 stars
from 44,376 · score 7.68
15.imthenachoman / How-To-Secure-A-Linux-Server
An evolving how-to guide for securing a Linux server.
+1,944 stars
from 30,067 · score 7.57
16.Developer-Y / cs-video-courses
List of Computer Science courses with video lectures.
+1,857 stars
from 82,616 · score 7.53
17.aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
+1,804 stars
from 37,094 · score 7.50
18.Infisical / infisical
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
+1,786 stars
from 28,415 · score 7.49
19.GyulyVGC / sniffnet
Comfortably monitor your network traffic 🕵️♂️
+1,675 stars
from 40,125 · score 7.42
20.trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
+1,668 stars
from 27,149 · score 7.42
21.keepassxreboot / keepassxc
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
+1,575 stars
from 28,105 · score 7.36
22.twpayne / chezmoi
Manage your dotfiles across multiple diverse machines, securely.
+1,239 stars
from 20,891 · score 7.12
23.x64dbg / x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
+1,229 stars
from 48,909 · score 7.11
24.wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
+1,185 stars
from 16,348 · score 7.08
25.OWASP / CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
+1,133 stars
from 32,703 · score 7.03
26.authelia / authelia
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
+1,115 stars
from 28,359 · score 7.02
27.lissy93 / web-check
🕵️♂️ All-in-one OSINT tool for analysing any website
+1,100 stars
from 34,220 · score 7.00
28.crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
+1,043 stars
from 14,373 · score 6.95
29.community-scripts / ProxmoxVE
Proxmox VE Helper-Scripts (Community Edition)
+1,012 stars
from 28,985 · score 6.92
30.zoicware / RemoveWindowsAI
Force Remove Copilot, Recall and More in Windows 11
+1,012 stars
from 12,543 · score 6.92
31.chaitin / SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
+992 stars
from 22,148 · score 6.90
32.cilium / cilium
eBPF-based Networking, Security, and Observability
+957 stars
from 24,794 · score 6.86
33.getsops / sops
Simple and flexible tool for managing secrets
+950 stars
from 22,630 · score 6.86
34.Atlas-OS / Atlas
🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability.
+936 stars
from 21,052 · score 6.84
35.jason5ng32 / MyIP
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
+925 stars
from 11,356 · score 6.83
36.winsiderss / systeminformer
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com
+899 stars
from 15,494 · score 6.80
37.nginx / nginx
The official NGINX Open Source repository.
+876 stars
from 31,149 · score 6.78
38.1N3 / Sn1per
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
+848 stars
from 10,662 · score 6.74
39.radareorg / radare2
UNIX-like reverse engineering framework and command-line toolset
+822 stars
from 24,412 · score 6.71
40.lissy93 / personal-security-checklist
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
+778 stars
from 21,901 · score 6.66
41.juice-shop / juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
+769 stars
from 13,557 · score 6.65
42.rizinorg / cutter
Free and Open Source Reverse Engineering Platform powered by rizin
+752 stars
from 19,375 · score 6.62
43.hwdsl2 / setup-ipsec-vpn
Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. Supports Ubuntu, Debian, CentOS/RHEL, Alpine Linux and Raspberry Pi OS. Includes client config and management scripts.
+724 stars
from 28,203 · score 6.59
44.fail2ban / fail2ban
Daemon to ban hosts that cause multiple authentication errors
+701 stars
from 18,228 · score 6.55
45.DedSecInside / TorBot
Dark Web OSINT Tool
+688 stars
from 4,470 · score 6.54
46.cryptomator / cryptomator
Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.
+685 stars
from 15,728 · score 6.53
47.nmap / nmap
Nmap - the Network Mapper. Github mirror of official SVN repository.
+675 stars
from 13,238 · score 6.52
48.prowler-cloud / prowler
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
+669 stars
from 14,481 · score 6.51
49.eosphoros-ai / DB-GPT
open-source agentic AI data assistant for the next generation of AI + Data products.
+667 stars
from 19,567 · score 6.50
50.StevenBlack / hosts
🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
+663 stars
from 30,698 · score 6.50
51.simplex-chat / simplex-chat
SimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS, Android and desktop apps 📱!
+659 stars
from 18,965 · score 6.49
52.drduh / YubiKey-Guide
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
+653 stars
from 12,409 · score 6.48
53.zaproxy / zaproxy
The ZAP by Checkmarx Core project
+617 stars
from 15,473 · score 6.43
54.shadow1ng / fscan
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
+578 stars
from 14,152 · score 6.36
55.projectdiscovery / nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
+578 stars
from 12,689 · score 6.36
56.SigmaHQ / sigma
Main Sigma Rule Repository
+573 stars
from 10,812 · score 6.35
57.bettercap / bettercap
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
+565 stars
from 19,660 · score 6.34
58.frappe / frappe
Low code web framework for real world applications, in Python and Javascript
+559 stars
from 10,484 · score 6.33
59.openfga / openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
+550 stars
from 5,522 · score 6.31
60.maurosoria / dirsearch
Web path scanner
+529 stars
from 14,504 · score 6.27
61.digininja / DVWA
Damn Vulnerable Web Application (DVWA)
+528 stars
from 13,414 · score 6.27
62.netalertx / NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
+525 stars
from 6,823 · score 6.27
63.anchore / grype
A vulnerability scanner for container images and filesystems
+516 stars
from 12,639 · score 6.25
64.knownsec / 404StarLink
404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目
+513 stars
from 10,952 · score 6.24
65.edoardottt / awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
+508 stars
from 10,942 · score 6.23
66.bee-san / RustScan
🤖 The Modern Port Scanner 🤖
+503 stars
from 20,149 · score 6.22
67.OpenVPN / openvpn
OpenVPN is an open source VPN daemon
+482 stars
from 14,274 · score 6.18
68.bunkerity / bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
+459 stars
from 10,744 · score 6.13
69.fleetdm / fleet
Open device management
+443 stars
from 6,653 · score 6.10
70.kenryu42 / cc-safety-net
A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.
+434 stars
from 1,449 · score 6.08
71.sbilly / awesome-security
A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
+410 stars
from 14,649 · score 6.02
72.lissy93 / awesome-privacy
🦄 A curated list of privacy & security-focused software and services
+395 stars
from 9,642 · score 5.98
73.The-Vibe-Company / quivr
An open-source engine that turns continuous content streams into search and monitoring. Durable ingestion, hybrid search, alerts, and plugins for formats, models and business rules.
+381 stars
from 39,242 · score 5.95
74.qazbnm456 / awesome-web-security
🐶 A curated list of Web Security materials and resources.
+381 stars
from 13,602 · score 5.95
75.google / oss-fuzz
OSS-Fuzz - continuous fuzzing for open source software.
+372 stars
from 12,462 · score 5.92
76.bytebase / bytebase
Database governance built for humans and agents — controlling changes and access across every major database.
+364 stars
from 14,302 · score 5.90
77.rizinorg / rizin
UNIX-like reverse engineering framework and command-line toolset.
+353 stars
from 3,736 · score 5.87
78.gophish / gophish
Open-Source Phishing Toolkit
+346 stars
from 14,023 · score 5.85
79.evilsocket / opensnitch
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
+340 stars
from 13,893 · score 5.83
80.gravitational / teleport
The easiest, and most secure way to access and protect all of your infrastructure.
+339 stars
from 20,718 · score 5.83
81.matomo-org / matomo
Empowering People Ethically 🚀 — Matomo is hiring! Join us → https://matomo.org/jobs Matomo is the leading open-source alternative to Google Analytics, giving you complete control and built-in privacy. Easily collect, visualise, and analyse data from websites & apps. Star us on GitHub ⭐️ – Pull Requests welcome!
+334 stars
from 21,661 · score 5.81
82.yokoffing / Betterfox
Firefox user.js for optimal privacy and security. Your favorite browser, but better.
+333 stars
from 10,629 · score 5.81
83.falcosecurity / falco
Cloud Native Runtime Security
+331 stars
from 9,213 · score 5.81
84.tutao / tutanota
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
+330 stars
from 7,763 · score 5.80
85.hslatman / awesome-threat-intelligence
A curated list of Awesome Threat Intelligence resources
+327 stars
from 10,481 · score 5.79
86.osquery / osquery
SQL powered operating system instrumentation, monitoring, and analytics.
+324 stars
from 23,388 · score 5.78
87.telekom-security / tpotce
🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
+324 stars
from 9,354 · score 5.78
88.szTheory / exifcleaner
Cross-platform desktop GUI app to clean image metadata
+324 stars
from 2,530 · score 5.78
89.jaredthecoder / awesome-vehicle-security
🚗 A curated list of resources for learning about vehicle security and car hacking.
+320 stars
from 4,420 · score 5.77
90.kubescape / kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
+298 stars
from 11,540 · score 5.70
91.authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
+287 stars
from 6,897 · score 5.66
92.arkenfox / user.js
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
+286 stars
from 12,662 · score 5.66
93.monero-project / monero
Monero: the secure, private, untraceable cryptocurrency
+279 stars
from 10,691 · score 5.63
94.apsdehal / awesome-ctf
A curated list of CTF frameworks, libraries, resources and softwares
+276 stars
from 11,685 · score 5.62
95.BlessedRebuS / Krawl
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
+273 stars
from 552 · score 5.61
96.jakejarvis / awesome-shodan-queries
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
+271 stars
from 7,564 · score 5.61
97.PrivateBin / PrivateBin
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
+268 stars
from 8,455 · score 5.59
98.cilium / tetragon
eBPF-based Security Observability and Runtime Enforcement
+268 stars
from 4,872 · score 5.59
99.capstone-engine / capstone
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
+265 stars
from 8,895 · score 5.58
100.cure53 / DOMPurify
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
+264 stars
from 17,235 · score 5.58