Most popular security repositories and open source projects

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)doma...

631   3838   3838  

passbolt_api

Passbolt CE Backend, a JSON API written with CakePHP

278   3816   3816  

Ladon

Ladon大型内网渗透工具，可PowerShell模块化、可CS插件化、可内存加载，无...

797   3802   3802  

awesome-sec-talks

A collected list of awesome security talks

489   3792   3792  

aircrack-ng

WiFi security auditing tools suite

771   3762   3762  

vm2

Advanced vm/sandbox for Node.js

267   3731   3731  

Free-Security-eBooks

Free Security and Hacking eBooks

1031   3695   3695  

shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHu...

474   3673   3673  

MifareClassicTool

An Android NFC app for reading, writing, analyzing, etc. MIFARE Classi...

831   3650   3650  

cerbos

Cerbos is the open core, language-agnostic, scalable authorization sol...

151   3637   3637  

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

373   3600   3600  

boundary

Boundary enables identity-based access management for dynamic infrastr...

236   3587   3587  

AFLplusplus

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, coll...

716   3567   3567  

pspy

Monitor linux processes without root permissions

422   3563   3563  

frontend-tech-list

📝 Frontend Tech List for Developers 💡

500   3544   3544  

rudder-server

Privacy and Security focused Segment-alternative, in Golang and React...

249   3527   3527  

hint

💡 A hinting engine for the web

557   3501   3501  

Addon

ClearURLs is an add-on based on the new WebExtensions technology and w...

91   3495   3495  

pacu

The AWS exploitation framework, designed for testing the security of A...

590   3494   3494  

manticore

Symbolic execution tool

481   3486   3486  

meshbird

Distributed private networking

218   3465   3465  

opencti

Open Cyber Threat Intelligence Platform

619   3433   3433  

kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to lea...

529   3416   3416  

twofactorauth

List of sites with two factor auth support which includes SMS, email,...

1792   3404   3404  

xunfeng

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

1304   3363   3363  

spicedb

Open Source, Google Zanzibar-inspired fine-grained permissions databas...

178   3361   3361  

wgcf

🚤 Cross-platform, unofficial CLI for Cloudflare Warp

385   3352   3352  

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabi...

424   3312   3312  

openfga

A high performance and flexible authorization/permission engine built...

236   3301   3301  

bluemonday

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java H...

181   3296   3296  

awesome-vehicle-security

🚗 A curated list of resources for learning about vehicle security an...

621   3287   3287  

bouncer

Laravel Eloquent roles and abilities.

323   3277   3277  

Learn-Web-Hacking

Study Notes For Web Hacking / Web安全学习笔记

713   3266   3266  

cameradar

Cameradar hacks its way into RTSP videosurveillance cameras

458   3254   3254  

kata-containers

Kata Containers is an open source project and community working to bui...

634   3211   3211  

google-ctf

Google CTF

462   3209   3209  

wire-ios

📱 Wire for iOS (iPhone and iPad)

571   3194   3194  

awesome-cybersecurity-blueteam

:computer:🛡️ A curated collection of awesome resources, tools, and oth...

566   3188   3188  

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework de...

754   3170   3170  

backend-cheats

📃 White paper for Backend developers

301   3153   3153  

kanidm

Kanidm: A simple, secure, and fast identity management platform

202   3153   3153  

command-injection-payload-list

🎯 Command Injection Payload List

673   3143   3143  

Awesome-CobaltStrike

CobaltStrike的相关资源汇总 / List of Awesome CobaltStrike Resources

638   3140   3140  

TorBot

Dark Web OSINT Tool

554   3135   3135  

oso

Oso is a batteries-included framework for building authorization in yo...

156   3121   3121  

ssl-kill-switch2

Blackbox tool to disable SSL certificate validation - including certif...

471   3106   3106  

sso

sso, aka S.S.Octopus, aka octoboi, is a single sign-on solution for se...

189   3102   3102  

mythril

Security analysis tool for EVM bytecode. Supports smart contracts buil...

627   3100   3100  

Security-PPT

Security-related Slide Presentation & Security Research Report（大安全...

806   3099   3099  

Android-PIN-Bruteforce

Unlock an Android phone (or device) by bruteforcing the lockscreen PIN...

579   3095   3095