1.vxcontrol / pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
+11,671 stars
from 21,272 · score 9.36
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
1–100 of 108 by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
2.NVIDIA / SkillSpector
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
+9,854 stars
from 14,009 · score 9.20
3.KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
+4,804 stars
from 46,037 · score 8.48
4.smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
+4,287 stars
from 19,934 · score 8.36
5.gitleaks / gitleaks
Find secrets with Gitleaks 🔑
+2,208 stars
from 28,367 · score 7.70
6.aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
+1,804 stars
from 37,094 · score 7.50
7.Infisical / infisical
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
+1,786 stars
from 28,415 · score 7.49
8.trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
+1,668 stars
from 27,149 · score 7.42
9.x64dbg / x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
+1,229 stars
from 48,909 · score 7.11
10.wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
+1,185 stars
from 16,348 · score 7.08
11.lissy93 / web-check
🕵️♂️ All-in-one OSINT tool for analysing any website
+1,100 stars
from 34,220 · score 7.00
12.jason5ng32 / MyIP
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
+925 stars
from 11,356 · score 6.83
13.qeeqbox / social-analyzer
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
+864 stars
from 23,560 · score 6.76
14.1N3 / Sn1per
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
+848 stars
from 10,662 · score 6.74
15.lissy93 / personal-security-checklist
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
+778 stars
from 21,901 · score 6.66
16.fail2ban / fail2ban
Daemon to ban hosts that cause multiple authentication errors
+701 stars
from 18,228 · score 6.55
17.DedSecInside / TorBot
Dark Web OSINT Tool
+688 stars
from 4,470 · score 6.54
18.google / osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
+673 stars
from 10,677 · score 6.51
19.prowler-cloud / prowler
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
+669 stars
from 14,481 · score 6.51
20.BishopFox / sliver
Adversary Emulation Framework
+643 stars
from 11,571 · score 6.47
21.shadow1ng / fscan
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
+578 stars
from 14,152 · score 6.36
22.CISOfy / lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
+558 stars
from 16,052 · score 6.33
23.edoardottt / awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
+508 stars
from 10,942 · score 6.23
24.bee-san / RustScan
🤖 The Modern Port Scanner 🤖
+503 stars
from 20,149 · score 6.22
25.authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
+287 stars
from 6,897 · score 5.66
26.jakejarvis / awesome-shodan-queries
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
+271 stars
from 7,564 · score 5.61
27.secdev / scapy
Scapy: the Python-based interactive packet manipulation program & library.
+250 stars
from 12,418 · score 5.53
28.urbanadventurer / WhatWeb
Next generation web scanner
+235 stars
from 6,740 · score 5.46
29.PyCQA / bandit
Bandit is a tool designed to find common security issues in Python code.
+197 stars
from 8,169 · score 5.29
30.Ullaakut / cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
+168 stars
from 5,118 · score 5.13
31.bountyyfi / lonkero
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
+130 stars
from 969 · score 4.88
32.future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
+120 stars
from 12,205 · score 4.80
33.decalage2 / awesome-security-hardening
A collection of awesome security hardening guides, tools and other resources
+116 stars
from 6,479 · score 4.76
34.securego / gosec
Go security checker
+115 stars
from 8,880 · score 4.75
35.pglombardo / PasswordPusher
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
+111 stars
from 3,129 · score 4.72
36.google / syzkaller
syzkaller is an unsupervised coverage-guided kernel fuzzer
+107 stars
from 6,279 · score 4.68
37.motdotla / dotenv
Loads environment variables from .env for nodejs projects.
+102 stars
from 20,454 · score 4.63
38.KuroLabs / stegcloak
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
+89 stars
from 3,843 · score 4.50
39.olafhartong / sysmon-modular
A repository of sysmon configuration modules
+86 stars
from 3,097 · score 4.47
40.Karib0u / rustinel
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
+84 stars
from 442 · score 4.44
41.openappsec / openappsec
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
+78 stars
from 1,664 · score 4.37
42.m0nad / Diamorphine
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
+77 stars
from 2,410 · score 4.36
43.in-toto / witness
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
+76 stars
from 539 · score 4.34
44.guardicore / monkey
Infection Monkey - An open-source adversary emulation platform
+75 stars
from 7,044 · score 4.33
45.Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
+75 stars
from 2,704 · score 4.33
46.goshs-labs / goshs
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
+74 stars
from 934 · score 4.32
47.GreenmaskIO / greenmask
Database anonymization and test data management
+69 stars
from 1,729 · score 4.25
48.CERT-Polska / Artemis
A modular vulnerability scanner with automatic report generation capabilities.
+64 stars
from 1,188 · score 4.17
49.jassics / cybersecurity-roadmap
Skills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelines
+61 stars
from 447 · score 4.13
50.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+60 stars
from 2,504 · score 4.11
51.gabrie30 / ghorg
Quickly clone or backup massive amounts of org/users repositories into one directory - Supports GitHub, GitLab, Bitbucket, and more 🐇🥚
+59 stars
from 2,104 · score 4.09
52.activecm / rita
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
+58 stars
from 609 · score 4.08
53.codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
+56 stars
from 3,314 · score 4.04
54.Checkmarx / kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
+55 stars
from 2,673 · score 4.03
55.presidentbeef / brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
+40 stars
from 7,252 · score 3.71
56.Hexastrike / PyrsistenceSniper
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
+31 stars
from 241 · score 3.47
57.agentrhq / authsome
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
+29 stars
from 74 · score 3.40
58.deepfence / SecretScanner
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
+28 stars
from 3,370 · score 3.37
59.deepfence / ThreatMapper
Open Source Cloud Native Application Protection Platform (CNAPP)
+27 stars
from 5,300 · score 3.33
60.mufeedvh / pdfrip
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
+25 stars
from 1,391 · score 3.26
61.thehappydinoa / awesome-censys-queries
A collection of fascinating and bizarre Censys Search Queries
+23 stars
from 1,227 · score 3.18
62.doyensec / inql
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
+22 stars
from 1,792 · score 3.14
63.Mutasem-mk4 / procscope
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
+21 stars
from 24 · score 3.09
64.matanolabs / matano
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
+20 stars
from 1,687 · score 3.04
65.0x4D31 / galah
Galah: An LLM-powered web honeypot.
+20 stars
from 655 · score 3.04
66.EnableSecurity / sipvicious
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
+19 stars
from 1,091 · score 3.00
67.noraj / haiti
:key: Hash type identifier (CLI & lib)
+19 stars
from 991 · score 3.00
68.nikivdev / privacy-respecting
Curated List of Privacy Respecting Services and Software
+17 stars
from 2,042 · score 2.89
69.node9-ai / node9-proxy
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
+15 stars
from 208 · score 2.77
70.Nekmo / dirhunt
Find web directories without bruteforce
+12 stars
from 1,996 · score 2.56
71.wireghoul / graudit
grep rough audit - source code auditing tool
+12 stars
from 1,680 · score 2.56
72.nascentxyz / simple-security-toolkit
A collection of practical security-focused guides and checklists for smart contract development
+12 stars
from 1,226 · score 2.56
73.pedramamini / ThreatIngestor
Extract and aggregate threat intelligence.
+12 stars
from 920 · score 2.56
74.byt3bl33d3r / SILENTTRINITYArchived
An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
+11 stars
from 2,336 · score 2.48
75.codingo / VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
+11 stars
from 1,303 · score 2.48
76.rubysec / bundler-audit
Patch-level verification for Bundler
+10 stars
from 2,754 · score 2.40
77.buffer / thug
Python low-interaction honeyclient
+10 stars
from 1,036 · score 2.40
78.fportantier / habu
Hacking Toolkit
+10 stars
from 982 · score 2.40
79.ronin-rb / ronin
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
+9 stars
from 752 · score 2.30
80.rfunix / Pompem
Find exploit tool
+8 stars
from 1,035 · score 2.20
81.djadmin / fort
Audit and fix your Mac's security in one command. No agent, no signup, open source.
+8 stars
from 73 · score 2.20
82.deepfence / PacketStreamerArchived
:star: :star: Distributed tcpdump for cloud native environments :star: :star:
+7 stars
from 1,924 · score 2.08
83.P3GLEG / Whaler
Program to reverse Docker images into Dockerfiles
+7 stars
from 1,188 · score 2.08
84.TryCatchHCF / DumpsterFire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
+7 stars
from 1,036 · score 2.08
85.designsecurity / progpilot
A static analysis tool for security
+7 stars
from 364 · score 2.08
86.lunasec-io / lunasec
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
+6 stars
from 1,467 · score 1.95
87.dpnishant / appmonArchived
Documentation:
+5 stars
from 1,629 · score 1.79
88.Escape-Technologies / graphql-armor
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
+5 stars
from 584 · score 1.79
89.teler-sh / teler-waf
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
+5 stars
from 402 · score 1.79
90.johnnykv / heralding
Credentials catching honeypot
+5 stars
from 393 · score 1.79
91.insidersec / insider
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
+4 stars
from 550 · score 1.61
92.WangYihang / Webshell-Sniper
:hammer: Manage your website via terminal
+4 stars
from 422 · score 1.61
93.FenkoHQ / dnsmonster
Passive DNS Capture and Monitoring Toolkit
+4 stars
from 356 · score 1.61
94.PalindromeLabs / awesome-websocket-security
Awesome information for WebSockets security research
+4 stars
from 311 · score 1.61
95.dogoncouch / LogESP
Open Source SIEM (Security Information and Event Management system).
+4 stars
from 222 · score 1.61
96.hegusung / WebHashcat
Hashcat web interface
+3 stars
from 324 · score 1.39
97.google / gonids
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
+3 stars
from 196 · score 1.39
98.cpeoples / ansible-security-scanner
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
+3 stars
from 9 · score 1.39
99.hexsecs / canarchy
Stream-first CAN & J1939 toolkit for security research and AI agents — typed JSONL events, CLI, TUI, fuzzing, MCP server.
+3 stars
from 1 · score 1.39
100.vincentcox / StaCoAn
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
+2 stars
from 868 · score 1.10