Topics / #blue-team

Blue-team projects on GitHub

As of , the most-starred Blue-team projects on GitHub are the-book-of-secret-knowledge (252.7K stars), h4cker (29.9K stars) and AiSOC (3.5K stars). GitHub.Locker tracks 5 Blue-team repositories with 291.8K stars combined. The fastest-growing on October 23 was AiSOC, with +286 stars in a day.

5Projects
291.8KStars in total
+652Stars in a day
Browse in the catalog →github.com/topics/blue-team ↗

Hot right now

Most stars gained in a day · Oct 23

+286

AiSOC

beenuar/AiSOC · ★ 3.5K

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

+283

the-book-of-secret-knowledge

trimstray/the-book-of-secret-knowledge · ★ 252.7K

A massive curated collection of lists, manuals, cheatsheets, blogs, hacks, one-liners and CLI/GUI/web tools that the author gathers from everyday sysadmin, DevOps and security work.

+60

artex-global

jiwoochris/artex-global · ★ 2.1K

ARTEX-KO is a Korean localization of the ARTEX (Autumn-27/ARTEX) framework: a system where multiple LLM-driven agents autonomously run a penetration test end-to-end, from reconnaissance to exploitation, with a Go backend and an embedded Next.js frontend.

+15

h4cker

The-Art-of-Hacking/h4cker · ★ 29.9K

A curated collection of thousands of cybersecurity resources — references, scripts, tools, code, labs, and training material — maintained by Omar Santos as a companion to his books, video courses, and live training.

The all-time top

5 projects · by stars

  1. #1 · trimstray/the-book-of-secret-knowledge

    the-book-of-secret-knowledge

    A massive curated collection of lists, manuals, cheatsheets, blogs, hacks, one-liners and CLI/GUI/web tools that the author gathers from everyday sysadmin, DevOps and security work.

    252.7K
  2. #2 · The-Art-of-Hacking/h4cker

    h4cker

    A curated collection of thousands of cybersecurity resources — references, scripts, tools, code, labs, and training material — maintained by Omar Santos as a companion to his books, video courses, and live training.

    29.9K
  3. #3 · beenuar/AiSOC

    AiSOC

    Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

    3.5K
  1. 4

    awesome-osint-arsenal

    3.5Krawfilejson/awesome-osint-arsenal · Shell

    A massive OSINT and security toolkit README that catalogs 753+ tools across 50 categories (usernames, emails, phone numbers, domains, dark web, forensics, red/blue team, Georgian OSINT, etc.), paired with one-command installer scripts for each category.

  2. 5

    artex-global

    2.1Kjiwoochris/artex-global · Go

    ARTEX-KO is a Korean localization of the ARTEX (Autumn-27/ARTEX) framework: a system where multiple LLM-driven agents autonomously run a penetration test end-to-end, from reconnaissance to exploitation, with a Go backend and an embedded Next.js frontend.

Often tagged together