GitHub stars · StarDay

1smicallef / spiderfootSpiderFoot automates OSINT for threat intelligence and mapping your attack surface.PythonMIT · PermissiveInactive24,392

2crowdsecurity / crowdsecOpen-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.GoMIT · Permissive15,489

3rshipp / awesome-malware-analysisDefund the Police.License not declaredInactive14,378

4edoardottt / awesome-hacker-search-enginesA curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and moreShellMIT · Permissive11,477

5blacklanternsecurity / bbotThe recursive internet scanner for hackers. 🧡PythonAGPL-3.0 · Share derivative source10,999

6OpenCTI-Platform / openctiOpen Cyber Threat Intelligence PlatformTypeScriptLicense not declared10,273

7fastfire / deepdarkCTICollection of Cyber Threat Intelligence sources from the deep and dark webGPL-3.0 · Share derivative source7,464

8beenuar / AiSOCOpen-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.PythonMIT · Permissive6,673

9MISP / MISPMISP (core software) - Open Source Threat Intelligence and Sharing PlatformPHPAGPL-3.0 · Share derivative source6,650

10mandiant / capaThe FLARE team's open-source tool to identify capabilities in executable files.PythonApache-2.0 · Permissive6,302

11elceef / dnstwistDomain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonationPythonApache-2.0 · PermissiveInactive5,776

12kaifcodec / user-scanner🕵️‍♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.PythonMIT · Permissive5,577

13devsecops / awesome-devsecopsAn authoritative list of awesome devsecops tools with the help from community experiments and contributions.CC0-1.0 · PermissiveInactive5,512

14intelowlproject / IntelOwlIntelOwl: manage your Threat Intelligence at scalePythonAGPL-3.0 · Share derivative source4,803

15Astrosp / Awesome-OSINT-List📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.ShellGPL-3.0 · Share derivative source4,637

16Neo23x0 / signature-baseYARA signature and IOC database for my scanners and toolsYARALicense not declared3,060

17potato-security / PotatoToolThis tool is a powerful comprehensive network security tool designed to provide comprehensive network security solutions for security practitioners, red and blue countermeasures personnel and network security enthusiasts. It integrates a variety of practical functions, including decryption, analysis, scanning, source tracing, etc., providing users with a convenient operation interface and rich function choices. This tool offers robust network security solutions for professionals and enthusiasts. With features like decryption, analysis, scanning, and traceability, it provides a user-friendly interface and diverse functionality.JavaApache-2.0 · Permissive1,237

18aw-junaid / Hacking-ToolsThis Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.CLicense not declared1,087

19travisbgreen / hunting-rulesSuricata rules for network anomaly detectionGPL-3.0 · Share derivative source184