1.vxcontrol / pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
+7,923 stars
from 25,020 · score 8.98
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
1–100 of 101 by Attention Score · Oct 4, 2026 – Nov 2, 2026 (UTC)
2.NVIDIA / SkillSpector
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
+4,688 stars
from 19,175 · score 8.45
3.jiwoochris / artex-global
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
+2,546 stars
from 0 · score 7.84
4.KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
+2,429 stars
from 48,412 · score 7.80
5.smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
+1,522 stars
from 22,699 · score 7.33
6.openqodex / openqodex
Open source AI code review for coding agents. A separate reviewer checks every change your agent writes before you push, in Claude Code, Codex, Cursor and Cline. No account or key of its own.
+1,126 stars
from 2 · score 7.03
7.gitleaks / gitleaks
Find secrets with Gitleaks 🔑
+978 stars
from 29,597 · score 6.89
8.ZeroDayEvil / ai-security-tool
🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.
+900 stars
from 384 · score 6.80
9.aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
+741 stars
from 38,157 · score 6.61
10.Infisical / infisical
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
+664 stars
from 29,537 · score 6.50
11.trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
+608 stars
from 28,209 · score 6.41
12.x64dbg / x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
+513 stars
from 49,625 · score 6.24
13.wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
+470 stars
from 17,063 · score 6.15
14.lissy93 / web-check
🕵️♂️ All-in-one OSINT tool for analysing any website
+381 stars
from 34,939 · score 5.95
15.qeeqbox / social-analyzer
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
+296 stars
from 24,128 · score 5.69
16.jason5ng32 / MyIP
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
+281 stars
from 12,000 · score 5.64
17.BishopFox / sliver
Adversary Emulation Framework
+278 stars
from 11,936 · score 5.63
18.lissy93 / personal-security-checklist
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
+251 stars
from 22,428 · score 5.53
19.fail2ban / fail2ban
Daemon to ban hosts that cause multiple authentication errors
+246 stars
from 18,683 · score 5.51
20.prowler-cloud / prowler
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
+238 stars
from 14,912 · score 5.48
21.google / osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
+235 stars
from 11,115 · score 5.46
22.edoardottt / awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
+223 stars
from 11,227 · score 5.41
23.CISOfy / lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
+203 stars
from 16,407 · score 5.32
24.1N3 / Sn1per
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
+202 stars
from 11,308 · score 5.31
25.bee-san / RustScan
🤖 The Modern Port Scanner 🤖
+187 stars
from 20,465 · score 5.24
26.DedSecInside / TorBot
Dark Web OSINT Tool
+183 stars
from 4,975 · score 5.21
27.ZeroDayEvil / CVE-2026-75604-PoC
🛡 Official AI Security Tool module for CVE-2026-75604 (Next.js Windows Unauthenticated Remote Code Execution) with safe in-app execution, deep vulnerability validation, and DevSecOps-ready security auditing workflows.
+152 stars
from 26 · score 5.03
28.shadow1ng / fscan
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
+139 stars
from 14,591 · score 4.94
29.urbanadventurer / WhatWeb
Next generation web scanner
+110 stars
from 6,865 · score 4.71
30.secdev / scapy
Scapy: the Python-based interactive packet manipulation program & library.
+97 stars
from 12,571 · score 4.58
31.jakejarvis / awesome-shodan-queries
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
+88 stars
from 7,747 · score 4.49
32.PyCQA / bandit
Bandit is a tool designed to find common security issues in Python code.
+85 stars
from 8,281 · score 4.45
33.authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
+76 stars
from 7,108 · score 4.34
34.in-toto / witness
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
+68 stars
from 547 · score 4.23
35.Ullaakut / cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
+53 stars
from 5,233 · score 3.99
36.future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
+52 stars
from 12,273 · score 3.97
37.google / syzkaller
syzkaller is an unsupervised coverage-guided kernel fuzzer
+52 stars
from 6,334 · score 3.97
38.securego / gosec
Go security checker
+40 stars
from 8,955 · score 3.71
39.olafhartong / sysmon-modular
A repository of sysmon configuration modules
+38 stars
from 3,145 · score 3.66
40.KuroLabs / stegcloak
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
+37 stars
from 3,895 · score 3.64
41.pglombardo / PasswordPusher
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
+33 stars
from 3,207 · score 3.53
42.guardicore / monkey
Infection Monkey - An open-source adversary emulation platform
+31 stars
from 7,088 · score 3.47
43.decalage2 / awesome-security-hardening
A collection of awesome security hardening guides, tools and other resources
+29 stars
from 6,566 · score 3.40
44.Karib0u / rustinel
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
+28 stars
from 498 · score 3.37
45.GreenmaskIO / greenmask
Database anonymization and test data management
+27 stars
from 1,771 · score 3.33
46.m0nad / Diamorphine
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
+26 stars
from 2,461 · score 3.30
47.openappsec / openappsec
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
+25 stars
from 1,717 · score 3.26
48.goshs-labs / goshs
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
+25 stars
from 983 · score 3.26
49.motdotla / dotenv
Loads environment variables from .env for nodejs projects.
+24 stars
from 20,532 · score 3.22
50.Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
+24 stars
from 2,755 · score 3.22
51.presidentbeef / brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
+19 stars
from 7,273 · score 3.00
52.activecm / rita
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
+19 stars
from 648 · score 3.00
53.Checkmarx / kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
+17 stars
from 2,711 · score 2.89
54.CERT-Polska / Artemis
A modular vulnerability scanner with automatic report generation capabilities.
+17 stars
from 1,235 · score 2.89
55.codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
+16 stars
from 3,354 · score 2.83
56.jassics / cybersecurity-roadmap
Skills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelines
+16 stars
from 492 · score 2.83
57.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+15 stars
from 2,549 · score 2.77
58.agentrhq / authsome
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
+11 stars
from 92 · score 2.48
59.Mutasem-mk4 / procscope
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
+11 stars
from 34 · score 2.48
60.gabrie30 / ghorg
Quickly clone or backup massive amounts of org/users repositories into one directory - Supports GitHub, GitLab, Bitbucket, and more 🐇🥚
+10 stars
from 2,153 · score 2.40
61.matanolabs / matano
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
+9 stars
from 1,698 · score 2.30
62.thehappydinoa / awesome-censys-queries
A collection of fascinating and bizarre Censys Search Queries
+9 stars
from 1,241 · score 2.30
63.noraj / haiti
:key: Hash type identifier (CLI & lib)
+9 stars
from 1,001 · score 2.30
64.deepfence / SecretScanner
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
+8 stars
from 3,390 · score 2.20
65.mufeedvh / pdfrip
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
+7 stars
from 1,409 · score 2.08
66.node9-ai / node9-proxy
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
+7 stars
from 216 · score 2.08
67.doyensec / inql
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
+6 stars
from 1,808 · score 1.95
68.rfunix / Pompem
Find exploit tool
+6 stars
from 1,037 · score 1.95
69.0x4D31 / galah
Galah: An LLM-powered web honeypot.
+5 stars
from 670 · score 1.79
70.deepfence / ThreatMapper
Open Source Cloud Native Application Protection Platform (CNAPP)
+4 stars
from 5,323 · score 1.61
71.wireghoul / graudit
grep rough audit - source code auditing tool
+4 stars
from 1,688 · score 1.61
72.WangYihang / Webshell-Sniper
:hammer: Manage your website via terminal
+4 stars
from 422 · score 1.61
73.Hexastrike / PyrsistenceSniper
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
+4 stars
from 268 · score 1.61
74.lunasec-io / lunasec
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
+3 stars
from 1,470 · score 1.39
75.nascentxyz / simple-security-toolkit
A collection of practical security-focused guides and checklists for smart contract development
+3 stars
from 1,235 · score 1.39
76.EnableSecurity / sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
+3 stars
from 1,107 · score 1.39
77.rubysec / bundler-audit
Patch-level verification for Bundler
+2 stars
from 2,762 · score 1.10
78.Nekmo / dirhunt
Find web directories without bruteforce
+2 stars
from 2,006 · score 1.10
79.dpnishant / appmonArchived
Documentation:
+2 stars
from 1,632 · score 1.10
80.codingo / VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+2 stars
from 1,312 · score 1.10
81.fportantier / habu
Hacking Toolkit
+2 stars
from 990 · score 1.10
82.pedramamini / ThreatIngestor
Extract and aggregate threat intelligence.
+2 stars
from 930 · score 1.10
83.johnnykv / heralding
Credentials catching honeypot
+2 stars
from 396 · score 1.10
84.designsecurity / progpilot
A static analysis tool for security
+2 stars
from 369 · score 1.10
85.dogoncouch / LogESP
Open Source SIEM (Security Information and Event Management system).
+2 stars
from 224 · score 1.10
86.google / gonids
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
+2 stars
from 197 · score 1.10
87.djadmin / fort
Audit and fix your Mac's security in one command. No agent, no signup, open source.
+2 stars
from 79 · score 1.10
88.cpeoples / ansible-security-scanner
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
+2 stars
from 10 · score 1.10
89.byt3bl33d3r / SILENTTRINITYArchived
An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
+1 stars
from 2,346 · score 0.69
90.deepfence / PacketStreamerArchived
:star: :star: Distributed tcpdump for cloud native environments :star: :star:
+1 stars
from 1,930 · score 0.69
91.P3GLEG / Whaler
Program to reverse Docker images into Dockerfiles
+1 stars
from 1,194 · score 0.69
92.bountyyfi / lonkero
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
+1 stars
from 1,098 · score 0.69
93.buffer / thug
Python low-interaction honeyclient
+1 stars
from 1,045 · score 0.69
94.TryCatchHCF / DumpsterFire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
+1 stars
from 1,042 · score 0.69
95.ronin-rb / ronin
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
+1 stars
from 760 · score 0.69
96.Escape-Technologies / graphql-armor
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
+1 stars
from 588 · score 0.69
97.insidersec / insider
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
+1 stars
from 553 · score 0.69
98.teler-sh / teler-waf
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
+1 stars
from 406 · score 0.69
99.hegusung / WebHashcat
Hashcat web interface
+1 stars
from 326 · score 0.69
100.SentryPeer / SentryPeer
Protect your SIP Servers from bad actors at https://sentrypeer.org
+1 stars
from 211 · score 0.69