learnjavabug
threedr3am
2,680Sterne
Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
Sicherheit · GitHub
Finde Werkzeuge zur Schwachstellensuche, Systemsicherheit und zum Datenschutz.
Nützliche GitHub-Projekte
2,879 Projekte
prompt-injection-defenses
tldrsec
741Sterne
Every practical and proposed defense against prompt injection.
steampipe
turbot
8,005Sterne
Zero-ETL, unendliche Möglichkeiten. APIs, Code und mehr mit SQL live abfragen – ganz ohne Datenbank.
mark-reader
usamaiqb
52Sterne
Offline markdown and code reader with syntax highlighting
w13scan
w-digital-scanner
1,939Sterne
Passive Security Scanner (被动式安全扫描器)
mutillidae
webpwnized
1,536Sterne
OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.
- Contains over 40 vulnerabilities and challenges, covering each of the OWASP Top Ten from 2007 to 2017
- Mutillidae is actually vulnerable, eliminating the need for users to enter a "magic" statement
fofa_viewer
wgpsec
1,813Sterne
A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.
xunfeng
ysrc
3,590Sterne
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
x-springboot
yzcheng90
2,699Sterne
X-SpringBoot是一个轻量级的Java快速开发平台，基于springboot3和jdk21，使用虚拟线程，可配置的SaaS功能具备RBAC功能、自动代码生成、多种存储系统，多种短信平台，可开放api授权。代码简洁，架构清晰，能快速开发项目并交付【接私活利器】
afrog
zan8in
4,455Sterne
A Security Tool for Bug Bounty, Pentest and Red Teaming.
vulmap
zhzyker
3,509Sterne
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
Darkument
AhmadHassan-BTed
4,029Sterne
A sleek, privacy-focused browser extension that brings a native dark mode experience to online documents. Built with clean UI/UX principles for Chromium and Opera browsers to reduce eye strain and improve readability.
- High-Fidelity Inversion: Utilizes GPU-accelerated CSS blend modes for instant color shifting without structural layout breaking.
- Native PDF Integration: Works inside the browser's native PDF viewer, supporting both local (file://) and remote document URLs.
FormFilla
AhmadHassan-BTed
4,669Sterne
About A local-first browser extension that fills job-application forms from local JSON profile data and files. Matches are computed deterministically via multi-signal scoring, structural repeated-block detection, and bipartite optimization.
- ⚡ Zero-AI & Sub-100ms SpeedUses deterministic bipartite optimization and regex heuristics instead of costly, slow, and hallucination-prone LLM API calls. No rate limits, no subscriptions, and zero cloud dependencies.
- 🧠 Globally Optimal Matching (Kuhn-Munkres)Solves field-to-value assignment as a Maximum Weight Bipartite Matching problem. Rather than using naive greedy heuristics, it optimizes confidence scores across the entire form at once.
tarteaucitron.js
AmauriC
1,060Sterne
Open-source JavaScript cookie consent manager for GDPR / RGPD. Customizable banner, service-level controls and Google Consent Mode v2 support.
- Cookie consent banner: offer visitors clear choices to accept, reject or customize their consent.
- Service-level preferences: let visitors manage individual services from a dedicated panel.
cerbos
cerbos
4,659Sterne
Cerbos ist eine Open-Core-Plattform für das Berechtigungsmanagement, die jede Identität autorisiert und jede Aktion in Anwendungen, Gateways, Workloads und KI-Agenten steuert.
nginxconfig.io
digitalocean
28,245Sterne
⚙️ NGINX-Konfigurationsgenerator mit Extra-Power 💉
py_webauthn
duo-labs
1,073Sterne
Pythonic WebAuthn 🐍
express-gateway
ExpressGateway
3,026Sterne
A microservices API Gateway built on top of Express.js
- Microservices and Serverless QoS Proxy and Security
- Built Entirely on JavaScript/Node.js using Express and Express Middleware
security-guide-for-developers
FallibleInc
21,103Sterne
Sicherheitsleitfaden für Entwickler
HackJava
HackJava
2,892Sterne
《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.
no-google
nickspaargaren
1,607Sterne
Completely block Google and its services
secguide
Tencent
13,435Sterne
面向开发人员梳理的代码安全指南
Android-PIN-Bruteforce
urbanadventurer
4,887Sterne
Entsperre ein Android-Smartphone oder -Gerät durch Brute-Force des Sperrbildschirm-PINs. Verwandle dein Kali-Nethunter-Smartphone in ein Brute-Force-Tool zum Knacken von PINs auf Android-Geräten! (kein Root, kein adb)
- Crack PINs of any length from 1 to 10 digits
- Use config files to support different phones
ironclaw
nearai
12,713Sterne
IronClaw is an Agent OS focused on privacy, security and extensibility