Most popular security repositories and open source projects

awesome-iot-hacks nebgnahz

A Collection of Hacks in IoT Space so that we can address them (hopefully).

2.4k 416 137

go-captcha wenlng Go

🖖 GoCaptcha: A high-performance, interactive behavior captcha library for Go. Supporting click, slide, drag-drop, and rotation modes to secure your a...

2.4k 221 11

InternalAllTheThings swisskyrepo HTML

Active Directory and Internal Pentest Cheatsheets

2.4k 451 30

android-inline-hook bytedance C

通用的Android inline hook库，支持thumb，arm32，arm64

2.4k 412 51

stratus-red-team DataDog Go

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

2.4k 324 38

nfcgate nfcgate Java

An NFC research toolkit application for Android

2.4k 274 48

solo1 solokeys C

Solo 1 firmware in C

2.4k 290 94

burpgpt aress31 Java

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables r...

2.4k 289 39

ipsum stamparm

Daily feed of bad IPs (with blacklist hit scores)

2.4k 177 80

API-Security OWASP Dockerfile

OWASP API Security Project

2.4k 419 166

boofuzz jtpereyda Python

A fork and successor of the Sulley Fuzzing Framework

2.4k 381 47

secure unrolled Go

HTTP middleware for Go that facilitates some quick security wins.

2.4k 145 29

SpringBoot-Scan AabyssZG Python

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

2.3k 179 14

SSH-Snake MegaManSec Shell

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

2.3k 222 24

noseyparker praetorian-inc Rust

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

2.3k 133 13

cargo-crev crev-dev Rust

A cryptographically verifiable code review system for the cargo (Rust) package manager.

2.3k 96 22

boxlite boxlite-ai TypeScript

The micro-VM for AI agents — light enough to embed on your laptop, elastic enough to power an agentic cloud.

2.3k 180 20

xray evilsocket Go

XRay is a tool for recon, mapping and OSINT gathering from public networks.

2.3k 296 1

accesscontrol onury TypeScript

Role and Attribute based Access Control for Node.js

2.3k 181 46

xiu harlanc Rust

A simple,high performance and secure live media server in pure Rust (RTMP[cluster]/RTSP/WebRTC[whip/whep]/HTTP-FLV/HLS).🦀

2.3k 239 29

alternative-frontends digitalblossom

🔐🌐 Privacy-respecting web frontends for popular services

2.3k 43 23

cicd-goat cider-security-research Python

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

2.3k 424 32

landrun Zouuup Go

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

2.3k 53 19

nothing-private gautamkrishnar JavaScript

Do you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at nothingpr...

2.3k 166 43

bank-vaults bank-vaults Go

A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).

2.3k 489 38

accrescent accrescent Kotlin

A novel Android app store focused on security, privacy, and usability

2.3k 57 31

awesome-iam kdeldycke

👤 Identity and Access Management knowledge for cloud platforms

2.3k 189 30

alarmo nielsfaber Python

Easy to use alarm system integration for Home Assistant

2.3k 164 25

tag-security cncf HTML

🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

2.3k 580 154

bap BinaryAnalysisPlatform OCaml

Binary Analysis Platform

2.3k 285 88

itext-java itext Java

iText for Java represents the next level of SDKs for developers that want to take advantage of the benefits PDF can bring. Equipped with a better docu...

2.3k 474 81

cloudsplaining salesforce JavaScript

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

2.2k 222 31

31-days-of-API-Security-Tips inonshk

This challenge is Inon Shkedy's 31 days API Security Tips.

2.2k 349 64

immich-public-proxy alangrainger TypeScript

Share your Immich photos and albums in a safe way without exposing your Immich instance to the public.

2.2k 82 8

caddy-security greenpau Go

🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAut...

2.2k 103 15

1Hosts badmojr HTML

Advanced DNS filter/blocklists for privacy, security, and clean browsing.

2.2k 122 23

OWASP-Web-Checklist 0xRadi

OWASP Web Application Security Testing Checklist

2.2k 416 46

pyt python-security Python

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

2.2k 246 65

ghostunnel ghostunnel Go

A simple TLS proxy with mutual authentication for securing non-TLS services.

2.2k 288 45

IPBan DigitalRuby C#

Since 2011, IPBan is the worlds most trusted, free security software to block hackers and botnets. With both Windows and Linux support, IPBan has your...

2.2k 400 76

Reconnoitre codingo Python

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writ...

2.2k 450 83