learnjavabug
threedr3am
2,680estrellas
Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
Seguridad · GitHub
Encuentra herramientas para detectar vulnerabilidades y proteger sistemas y privacidad.
Proyectos útiles de GitHub
2,879 proyectos
prompt-injection-defenses
tldrsec
741estrellas
Every practical and proposed defense against prompt injection.
steampipe
turbot
8,005estrellas
Cero ETL, posibilidades infinitas. Consulta API, código y mucho más en tiempo real con SQL. No necesitas una base de datos.
mark-reader
usamaiqb
52estrellas
Offline markdown and code reader with syntax highlighting
w13scan
w-digital-scanner
1,939estrellas
Passive Security Scanner (被动式安全扫描器)
mutillidae
webpwnized
1,536estrellas
OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.
- Contains over 40 vulnerabilities and challenges, covering each of the OWASP Top Ten from 2007 to 2017
- Mutillidae is actually vulnerable, eliminating the need for users to enter a "magic" statement
fofa_viewer
wgpsec
1,813estrellas
A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.
xunfeng
ysrc
3,590estrellas
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
x-springboot
yzcheng90
2,699estrellas
X-SpringBoot是一个轻量级的Java快速开发平台，基于springboot3和jdk21，使用虚拟线程，可配置的SaaS功能具备RBAC功能、自动代码生成、多种存储系统，多种短信平台，可开放api授权。代码简洁，架构清晰，能快速开发项目并交付【接私活利器】
afrog
zan8in
4,455estrellas
A Security Tool for Bug Bounty, Pentest and Red Teaming.
vulmap
zhzyker
3,509estrellas
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
Darkument
AhmadHassan-BTed
4,029estrellas
A sleek, privacy-focused browser extension that brings a native dark mode experience to online documents. Built with clean UI/UX principles for Chromium and Opera browsers to reduce eye strain and improve readability.
- High-Fidelity Inversion: Utilizes GPU-accelerated CSS blend modes for instant color shifting without structural layout breaking.
- Native PDF Integration: Works inside the browser's native PDF viewer, supporting both local (file://) and remote document URLs.
FormFilla
AhmadHassan-BTed
4,669estrellas
About A local-first browser extension that fills job-application forms from local JSON profile data and files. Matches are computed deterministically via multi-signal scoring, structural repeated-block detection, and bipartite optimization.
- ⚡ Zero-AI & Sub-100ms SpeedUses deterministic bipartite optimization and regex heuristics instead of costly, slow, and hallucination-prone LLM API calls. No rate limits, no subscriptions, and zero cloud dependencies.
- 🧠 Globally Optimal Matching (Kuhn-Munkres)Solves field-to-value assignment as a Maximum Weight Bipartite Matching problem. Rather than using naive greedy heuristics, it optimizes confidence scores across the entire form at once.
tarteaucitron.js
AmauriC
1,060estrellas
Open-source JavaScript cookie consent manager for GDPR / RGPD. Customizable banner, service-level controls and Google Consent Mode v2 support.
- Cookie consent banner: offer visitors clear choices to accept, reject or customize their consent.
- Service-level preferences: let visitors manage individual services from a dedicated panel.
cerbos
cerbos
4,659estrellas
Cerbos es una plataforma de gestión de autorizaciones basada en un modelo open-core que autoriza cada identidad y gobierna cada acción en aplicaciones, gateways, cargas de trabajo y agentes de IA.
nginxconfig.io
digitalocean
28,245estrellas
⚙️ Generador de configuración de NGINX potenciado 💉
py_webauthn
duo-labs
1,073estrellas
Pythonic WebAuthn 🐍
express-gateway
ExpressGateway
3,026estrellas
A microservices API Gateway built on top of Express.js
- Microservices and Serverless QoS Proxy and Security
- Built Entirely on JavaScript/Node.js using Express and Express Middleware
security-guide-for-developers
FallibleInc
21,103estrellas
Guía de seguridad para desarrolladores
HackJava
HackJava
2,892estrellas
《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.
no-google
nickspaargaren
1,607estrellas
Completely block Google and its services
secguide
Tencent
13,435estrellas
面向开发人员梳理的代码安全指南
Android-PIN-Bruteforce
urbanadventurer
4,887estrellas
Desbloquea un teléfono o dispositivo Android mediante fuerza bruta contra el PIN de la pantalla de bloqueo. ¡Convierte tu teléfono Kali Nethunter en una herramienta de fuerza bruta para descifrar PIN de dispositivos Android! (sin root ni adb)
- Crack PINs of any length from 1 to 10 digits
- Use config files to support different phones
ironclaw
nearai
12,713estrellas
IronClaw is an Agent OS focused on privacy, security and extensibility