Most popular security repositories and open source projects

cherrybomb blst-security Rust

Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and r...

1.2k 84 12

simple-security-toolkit nascentxyz

A collection of practical security-focused guides and checklists for smart contract development

1.2k 183 20

bane genuinetools Go

Custom & better AppArmor profile generator for Docker containers.

1.2k 90 32

BricksLLM bricks-cloud Go

🔒 Enterprise-grade API gateway that helps you monitor and impose cost or rate limits per API key. Get fine-grained access control and monitoring per...

1.2k 97 7

kingfisher mongodb Rust

Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. Hundreds of rules.

1.2k 116 5

shortscan bitquark Go

An IIS short filename enumeration tool

1.2k 116 8

herpaderping jxy-s C++

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a...

1.2k 224 31

Anti-DDOS anti-ddos Shell

🔒 Anti DDOS | Bash Script Project 🔒

1.2k 370 1.2k

csrf gorilla Go

Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒

1.2k 177 22

fuzzbench google Python

FuzzBench - Fuzzer benchmarking as a service.

1.2k 302 28

rekor sigstore Go

Software Supply Chain Transparency Log

1.2k 224 17

Web-Cache-Vulnerability-Scanner Hackmanit Go

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

1.2k 161 16

Artemis CERT-Polska Python

A modular vulnerability scanner with automatic report generation capabilities.

1.2k 139 17

ai-captcha-bypass aydinnyunus Python

AI Captcha Bypass

1.2k 130 7

Pi.Alert leiweibau PHP

Scan the devices connected to your WIFI / LAN and alert you the connection of unknown devices. It also warns if a "always connected" device disconnect...

1.2k 99 7

Newbie-Security-List findneo

网络安全学习资料，欢迎补充

1.2k 160 19

janusec Janusec Go

JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield,...

1.2k 268 38

terraform-aws-secure-baseline nozaq HCL

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational S...

1.2k 379 31

writeups httpvoid

1.2k 174 73

security symfony PHP

Provides a complete security system for your web application

1.2k 54 2

pinact suzuki-shunsuke Go

pinact is a CLI to edit GitHub Workflow and Composite action files and pin versions of Actions and Reusable Workflows. pinact can also update their ve...

1.2k 40 5

leaky-paths ayoubfathi

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could...

1.2k 171 25

FlowMeter deepfence Go

⭐ ⭐ Use ML to classify flows and packets as benign or malicious. ⭐ ⭐

1.2k 221 8

stronghold alichtman Python

Easily configure macOS security settings from the terminal.

1.2k 262 29

Whaler P3GLEG Go

Program to reverse Docker images into Dockerfiles

1.2k 103 22

sshamble runZeroInc Go

SSHamble: Unexpected Exposures in SSH

1.2k 87 19

TwoFactorAuth RobThree PHP

PHP library for Two Factor Authentication (TFA / 2FA)

1.2k 144 45

usbrip snovvcrash Python

Tracking history of USB events on GNU/Linux

1.2k 112 1

osintui wssheldon Rust

OSINT from your favorite services in a friendly terminal user interface - integrations for Virustotal, Shodan, and Censys

1.2k 87 1.2k

local-php-security-checker fabpot Go

PHP security vulnerabilities checker

1.2k 77 1

jwt-cracker lmammino JavaScript

Simple HS256, HS384 & HS512 JWT token brute force cracker.

1.2k 168 8

agentshield affaan-m TypeScript

AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plu...

1.2k 259 9

openvpn3 OpenVPN C++

OpenVPN 3 is a C++ class library that implements the functionality of an OpenVPN client, and is protocol-compatible with the OpenVPN 2.x branch.

1.2k 467 74

code6 4x99 PHP

码小六 - GitHub 代码泄露监控系统

1.2k 202 20

advisory-db rustsec

Security advisory database for Rust crates published through crates.io

1.2k 542 38

wazuh-docker wazuh Shell

Wazuh - Docker containers

1.2k 584 46

webanalyze rverton Go

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

1.2k 155 13

AppVerifier soupslurpr Kotlin

Verify apps easily.

1.2k 63 16

certspotter SSLMate Go

Lightweight Certificate Transparency Log Monitor

1.2k 104 28

cs-suite SecurityFTW Shell

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

1.2k 209 58

Offensive-Resources Zeyad-Azima

A Huge Learning Resources with Labs For Offensive Security Players

1.2k 246 38

vet vet-run Shell

vet is a command-line tool that acts as a safety net for the risky curl | bash pattern. It lets you inspect, diff against previous versions, and lint...

1.2k 22 6