1.opentrap / opentrap
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
+268 stars
from 504 · score 5.59
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
13 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.projectdiscovery / nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
+217 stars
from 32,308 · score 5.38
3.hevnsnt / CVEngine
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
+211 stars
from 349 · score 5.36
4.google / osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
+83 stars
from 11,267 · score 4.43
5.future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
+23 stars
from 12,302 · score 3.18
6.FrancescoStabile / numasec
The AI Agent for Cyber Security.
+8 stars
from 821 · score 2.20
7.CERT-Polska / Artemis
A modular vulnerability scanner with automatic report generation capabilities.
+6 stars
from 1,246 · score 1.95
8.chaitin / xray
一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
+5 stars
from 11,770 · score 1.79
9.evyatarmeged / Raccoon
A high performance offensive security tool for reconnaissance and vulnerability scanning
+5 stars
from 4,059 · score 1.79
10.JoasASantos / php2shell-scanner
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
+4 stars
from 107 · score 1.61
11.commixproject / commix
Automated Αll-in-One OS command injection exploitation tool.
+2 stars
from 5,896 · score 1.10
12.fkie-cad / cwe_checker
cwe_checker finds vulnerable patterns in binary executables
+1 stars
from 1,362 · score 0.69
13.cpeoples / ansible-security-scanner
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
+1 stars
from 11 · score 0.69