Ranked by Attention Score: stars gained over the last 180 complete days
1–100 of 1,486 by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface
Ghidra is a software reverse engineering (SRE) framework
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
🕵️♂️ Collect a dossier on a person by username from 6K websites
Hunt down social media accounts by username across social networks
Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Astrid is a portable, capability-secure operating system for composable software.
ALL IN ONE Hacking Tool For Hackers
SimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS, Android and desktop apps 📱!
Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
🩵 A free, open-source app store for developers' releases on GitHub, Codeberg & Forgejo — browse, discover, and install apps with one click. Formerly GitHub Store.
Useful tool to track location or mobile number
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
Secure, Fast, and Extensible Sandbox runtime for AI agents.
This repository contains a 90-day cybersecurity study plan, along with resources and materials for learning various cybersecurity concepts and technologies. The plan is organized into daily tasks, covering topics such as Network+, Security+, Linux, Python, Traffic Analysis, Git, ELK, AWS, Azure, and Hacking. The repository also includes a `LEARN.md
DNS-Blocklists: For a better internet - keep the internet clean!
Connect your agents & product to 1,000 APIs.
Application designed to optimize, customize and enhance your Windows experience.
The authentication glue you need.
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.
Get Android app updates straight from the source.
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.
YC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power your agents' context
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
Open Source Identity and Access Management For Modern Applications and Services
Automated Penetration Testing Agentic Framework Powered by Large Language Models
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
The Privacy First PDF Toolkit
All parts of Claude Code's system prompt, 27 builtin tool descriptions, sub agent prompts (Plan/Explore/Task), utility prompts (CLAUDE.md, compact, statusline, magic docs, WebFetch, Bash cmd, security review, agent creation). Updated for each Claude Code version.
Composio powers 1000+ toolkits, tool search, context management, authentication, and a sandboxed workbench to help you build AI agents that turn intent into action.
~95% on SimpleQA (e.g. Qwen3.6-27B on a 3090). Supports all local and cloud LLMs (llama.cpp, Ollama, Google, ...). 10+ search engines - arXiv, PubMed, your private documents. Everything Local & Encrypted.
Find, verify, and analyze leaked credentials
Trail of Bits skills for security research, vulnerability detection, and audit workflows
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
[MLsys2026 Best Paper]: https://arxiv.org/abs/2506.08276. RAG on Everything with LEANN. Enjoy 97% storage savings while running a fast, accurate, and 100% private RAG application on your personal device.
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes.
视觉小说翻译器 / Visual Novel Translator
A tool for reverse engineering Android apk files
Manage your dotfiles across multiple diverse machines, securely.
The most comprehensive authentication framework
Open source software that helps you create and deploy high-frequency crypto trading bots
🕵️♂️ All-in-one OSINT tool for analysing any website
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Socket-based TS/JavaScript API for WhatsApp Web
Disk encryption with strong security based on TrueCrypt
The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
Free implementation of Play Services
Force Remove Copilot, Recall and More in Windows 11
E-mails, subdomains and names Harvester - OSINT
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
the LLM vulnerability scanner
Information gathering framework for phone numbers
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
🍃 Organic Maps is a free Android & iOS offline maps app for more than 6M travelers, tourists, hikers, and cyclists. It uses crowd-sourced OpenStreetMap data and is developed with love by the community. No ads, no tracking, no data collection, no crapware. Please donate to support the development!
A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
Technitium DNS Server
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com
.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!
A 100% free modern JS SaaS boilerplate (React, NodeJS, Prisma). Full-featured: Auth (email, google, github, slack, MS), Email sending, Background jobs, Landing page, Payments (Stripe, Polar.sh), Shadcn UI, S3 file upload. AI-ready with tailored AGENTS.md, skills, and Claude Code plugin. One cmd deploy. Powered by Wasp full-stack framework.
Simple and flexible tool for managing secrets
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
Downloads videos and playlists from YouTube
ZITADEL - Identity infrastructure, simplified for you.
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
An Open Source YouTube app for privacy
🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability.
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
Automatic SQL injection and database takeover tool
UNIX-like reverse engineering framework and command-line toolset
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
Awesome Privacy - A curated list of services and alternatives that respect your privacy because PRIVACY MATTERS.
open-source agentic AI data assistant for the next generation of AI + Data products.
Alternative Twitter front-end
Open source agentic operating system
A pure Unix shell script ACME client for SSL / TLS certificate automation
A modern and easy to use dashboard. 80+ integrations. 20K+ icons built in. Authentication out of the box. No YAML, drag and drop configuration.
A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.
Download pictures (or videos) along with their captions and other metadata from Instagram.
🏔 Love Freedom - ❌ Block Mass Surveillance