Most popular security repositories and open source projects

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

react-cool-starter

😎 🐣 A starter boilerplate for a universal web app with the best deve...

239   1311   1311  

WatchAD

AD Security Intrusion Detection System

295   1310   1310  

ScopeSentry

ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning,...

178   1310   1310  

Windows-Optimize-Harden-Debloat

Enhance the security and privacy of your Windows 10 and Windows 11 dep...

91   1309   1309  

pacbot

PacBot (Policy as Code Bot)

282   1303   1303  

SwiftyRSA

RSA public/private key encryption in Swift

355   1300   1300  

php-casbin

An authorization library that supports access control models like ACL,...

136   1298   1298  

hubcommander

A Slack bot for GitHub organization management -- and other things too

154   1296   1296  

wp2static

WordPress static site generator for security, performance and cost ben...

247   1295   1295  

BLUESPAWN

An Active Defense and EDR software to empower Blue Teams

171   1294   1294  

K8CScan

K8Ladon大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞...

339   1292   1292  

AutoBlue-MS17-010

This is just an semi-automated fully working, no-bs, non-metasploit ve...

319   1292   1292  

lanzaboote

Secure Boot for NixOS [maintainers=@blitz @raitobezarius @nikstur]

69   1292   1292  

cfn_nag

Linting tool for CloudFormation templates

210   1290   1290  

Flask-HTTPAuth

Simple extension that provides Basic, Digest and Token HTTP authentica...

231   1285   1285  

log4j-scanner

log4j-scanner is a project derived from other members of the open-sour...

213   1283   1283  

chipwhisperer

ChipWhisperer - the complete open-source toolchain for side-channel po...

312   1282   1282  

Spearmint

Testing, simplified. || An inclusive, accessibility-first GUI for gene...

181   1281   1281  

best-practices-badge

🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (form...

209   1278   1278  

spring-boot

spring-boot 项目实践总结

463   1277   1277  

notes

Some public notes

76   1275   1275  

oss-fuzz-gen

LLM powered fuzzing via OSS-Fuzz.

196   1274   1274  

clairvoyance

Obtain GraphQL API schema even if the introspection is disabled

118   1269   1269  

honeytrap

Advanced Honeypot framework.

175   1269   1269  

Passhunt

Passhunt is a simple tool for searching of default credentials for net...

183   1268   1268  

toxic

A Tox-based instant messaging and video chat client.

156   1266   1266  

CaptfEncoder

Captfencoder is opensource a rapid cross platform network security too...

193   1266   1266  

heap-exploitation

This book on heap exploitation is a guide to understanding the interna...

120   1265   1265  

Interlace

Easily turn single threaded command line applications into a fast, mul...

185   1264   1264  

intrigue-core

Discover Your Attack Surface!

271   1262   1262  

sudo_pair

Plugin for sudo that requires another human to approve and monitor pri...

47   1258   1258  

Vanadium

Privacy and security enhanced releases of Chromium for GrapheneOS. Van...

77   1257   1257  

bypass-firewalls-by-DNS-history

Firewall bypass script based on DNS history records. This script will...

262   1256   1256  

horusec

Horusec is an open source tool that improves identification of vulnera...

205   1255   1255  

topaz

Cloud-native authorization for modern applications and APIs

36   1254   1254  

cwe_checker

cwe_checker finds vulnerable patterns in binary executables

134   1252   1252  

Windows11_Hardening

a collection about Windows 11

71   1249   1249  

VHostScan

A virtual host scanner that performs reverse lookups, can be used with...

236   1247   1247  

go-dork

The fastest dork scanner written in Go.

134   1246   1246  

usbguard

USBGuard is a software framework for implementing USB device authoriza...

152   1244   1244  

pdfrip

A multi-threaded PDF password cracking utility equipped with commonly...

120   1238   1238  

otpauth

One Time Password (HOTP/TOTP) library for Node.js, Deno, Bun and brows...

67   1235   1235  

suricata-rules

Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/M...

304   1231   1231  

envchain

Environment variables meet macOS Keychain and gnome-keyring <3

35   1227   1227  

WALKOFF

A flexible, easy to use, automation framework allowing users to integr...

224   1226   1226  

TREVORspray

TREVORspray is a modular password sprayer with threading, clever proxy...

164   1226   1226  

awesome-vulnerable-apps

Awesome Vulnerable Applications

191   1225   1225  

invisible_captcha

🍯 Unobtrusive and flexible spam protection for Rails apps

67   1223   1223  

latte

☕ Latte: the safest & truly intuitive templates for PHP. Engine for t...

113   1220   1220  

bane

Custom & better AppArmor profile generator for Docker containers.

88   1218   1218