GitHub stars · StarDay

1sherlock-project / sherlockFind public social-network accounts by username.PythonMIT · Permissive98,401

2WerWolv / ImHex🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.C++GPL-2.0 · Share derivative source55,762

3KeygraphHQ / shannonAn AI-assisted security tester for web applications and APIs.TypeScriptAGPL-3.0 · Share derivative source51,324

4x64dbg / x64dbgA user-mode debugger for Windows applications.C++License not declared50,217

5GyulyVGC / sniffnetA graphical tool for monitoring network traffic.RustApache-2.0 · Permissive41,939

6soxoj / maigret🕵️‍♂️ Collect a dossier on a person by username from 6K websitesPythonMIT · Permissive39,773

7mukul975 / Anthropic-Cybersecurity-Skills817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0PythonApache-2.0 · Permissive35,721

8The-Art-of-Hacking / h4ckerThis repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.orgJupyter NotebookMIT · Permissive30,073

9smicallef / spiderfootSpiderFoot automates OSINT for threat intelligence and mapping your attack surface.PythonMIT · Permissive24,392

10elder-plinius / L1B3RT4SA collection of AI jailbreak and adversarial prompts for research.AGPL-3.0 · Share derivative source23,184

11chaitin / SafeLineSafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.GoGPL-3.0 · Share derivative source23,178

12lissy93 / personal-security-checklist🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026TypeScriptLicense not declared22,720

13farhanashrafdev / 90DaysOfCyberSecurityThis repository contains a 90-day cybersecurity study plan, along with resources and materials for learning various cybersecurity concepts and technologies. The plan is organized into daily tasks, covering topics such as Network+, Security+, Linux, Python, Traffic Analysis, Git, ELK, AWS, Azure, and Hacking. The repository also includes a `LEARN.mdMIT · Permissive20,965

14SWE-agent / SWE-agentSWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]PythonMIT · Permissive20,744

15HunxByts / GhostTrackUseful tool to track location or mobile numberPythonLicense not declared20,485

16wazuh / wazuhWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.C++License not declared17,595

17crowdsecurity / crowdsecOpen-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.GoMIT · Permissive15,489

18mytechnotalent / Reverse-EngineeringA FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.AssemblyApache-2.0 · Permissive15,119

19OpenNHP / opennhpMake your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.GoApache-2.0 · Permissive13,950

20future-architect / vulsAgent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devicesGoGPL-3.0 · Share derivative source12,330