GitHub stars · StarDay

1StevenBlack / hostsA project maintaining and combining hosts rules from multiple sources.PythonMIT · Permissive31,404

2gojue / ecaptureCapture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.CApache-2.0 · Permissive15,533

3owasp-amass / amassIn-depth attack surface mapping and asset discoveryGoLicense not declared15,475

4txthinking / brookA cross-platform programmable network toolGoGPL-3.0 · Share derivative source15,191

5secdev / scapyScapy: the Python-based interactive packet manipulation program & library.PythonGPL-2.0 · Share derivative source12,676

6vanhauser-thc / thc-hydrahydraCAGPL-3.0 · Share derivative source12,472

7kubeshark / kubesharkeBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.GoApache-2.0 · Permissive12,132

8telekom-security / tpotce🍯 T-Pot - The All In One Multi Honeypot Platform 🐝ShellGPL-3.0 · Share derivative source9,700

9firezone / firezoneBlazing-fast remote accessElixirApache-2.0 · Permissive9,169

10aceberg / WatchYourLANLightweight network IP scanner written in Go. With notifications, history, export to GrafanaGoMIT · Permissive7,653

11netalertx / NetAlertXCentralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.PythonGPL-3.0 · Share derivative source7,382

12urbanadventurer / WhatWebNext generation web scannerRubyGPL-2.0 · Share derivative source6,989

13infinition / BjornBjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.PythonMIT · Permissive6,362

14OWASP / NettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability ManagementPythonApache-2.0 · Permissive5,713

153proxy / 3proxy3proxy - tiny free proxy serverCLicense not declared5,575

16Security-Onion-Solutions / securityonionSecurity Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.ShellLicense not declared4,974

17ivre / ivreNetwork recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.PythonGPL-3.0 · Share derivative source4,198

18kelvinBen / AppInfoScannerA mobile terminal (Android, iOS, WEB, H5, static website) information collection and scanning tool suitable for HW action/red team/penetration testing team scenarios. It can help penetration testing engineers, attack team members, and red team members quickly collect key asset information in mobile terminals or static WEB sites and provide basic information output, such as: Title, Domain, CDN, fingerprint information, status information, etc.PythonGPL-3.0 · Share derivative source3,580

19sergiomarotco / Network-segmentation-cheat-sheetAuthor description: Best practices for segmentation of the corporate network of any companyApache-2.0 · Permissive3,502

20s0md3v / Smapa drop-in replacement for Nmap powered by shodan.ioGoAGPL-3.0 · Share derivative source3,311