GitHub repo leaderboard by stars, growth rate and activity.

• x64dbg

  #1x64dbg/x64dbg

  An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

  C++49,462 starslast pushed 3 days ago
• KeygraphHQ

  #2KeygraphHQ/shannon

  Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

  TypeScript47,886 starslast pushed 2 days ago
• aquasecurity

  #3aquasecurity/trivy

  Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

  Go37,850 starslast pushed 2 days ago
• lissy93

  #4lissy93/web-check

  🕵️‍♂️ All-in-one OSINT tool for analysing any website

  TypeScript34,717 starslast pushed 2 weeks ago
• Infisical

  #5Infisical/infisical

  Infisical is the open-source platform for secrets, certificates, and privileged access management.

  TypeScript29,196 starslast pushed 22 hours ago
• gitleaks

  #6gitleaks/gitleaks

  Find secrets with Gitleaks 🔑

  Go29,191 starslast pushed 2 days ago
• trufflesecurity

  #7trufflesecurity/trufflehog

  Find, verify, and analyze leaked credentials

  Go27,738 starslast pushed Yesterday
• qeeqbox

  #8qeeqbox/social-analyzer

  API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

  JavaScript23,985 starslast pushed 8 months ago
• vxcontrol

  #9vxcontrol/pentagi

  Fully autonomous AI Agents system capable of performing complex penetration testing tasks

  Go22,635 starslast pushed 1 week ago
• lissy93

  #10lissy93/personal-security-checklist

  🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026

  TypeScript22,291 starslast pushed 4 days ago

#	Repo	Language	Stars	30-day trend	Last updated
1	x64dbg x64dbg/x64dbg An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.	C++	49,462		last pushed 3 days ago
2	KeygraphHQ KeygraphHQ/shannon Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.	TypeScript	47,886		last pushed 2 days ago
3	aquasecurity aquasecurity/trivy Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more	Go	37,850		last pushed 2 days ago
4	lissy93 lissy93/web-check 🕵️‍♂️ All-in-one OSINT tool for analysing any website	TypeScript	34,717		last pushed 2 weeks ago
5	Infisical Infisical/infisical Infisical is the open-source platform for secrets, certificates, and privileged access management.	TypeScript	29,196		last pushed 22 hours ago
6	gitleaks gitleaks/gitleaks Find secrets with Gitleaks 🔑	Go	29,191		last pushed 2 days ago
7	trufflesecurity trufflesecurity/trufflehog Find, verify, and analyze leaked credentials	Go	27,738		last pushed Yesterday
8	qeeqbox qeeqbox/social-analyzer API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites	JavaScript	23,985		last pushed 8 months ago
9	vxcontrol vxcontrol/pentagi Fully autonomous AI Agents system capable of performing complex penetration testing tasks	Go	22,635		last pushed 1 week ago
10	lissy93 lissy93/personal-security-checklist 🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026	TypeScript	22,291		last pushed 4 days ago

All · 11,474