verifin
LumiDesk
185estrellas
完全免费 · 开源 · 数据自主的极简记账工具
Seguridad · GitHub
Encuentra herramientas para detectar vulnerabilidades y proteger sistemas y privacidad.
Proyectos útiles de GitHub
2,880 proyectos
lunasec
lunasec-io
1,473estrellas
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
Opengrep-Studio
Lyfxxk
52estrellas
Local-first code audit workbench for Opengrep. Scan locally, track findings across versions, verify fixes, and produce reproducible security audit reports.
MoMo
M0M0Sec
33estrellas
🎯 Pi 5 Wardriving & Wireless Pentest Platform | WiFi/BLE/SDR Attacks | WPA3 • Evil Twin • Karma • Evilginx | GPS Mapping | Cloud Cracking | Part of MoMo Ecosystem
PentestingChecklist
m14r41
91estrellas
Comprehensive, data-driven security assessment checklists across 23 platforms web, API, mobile, cloud, Active Directory, Kubernetes, LLM, and more. Expandable hierarchy, global search, progress tracking, export.
- Hierarchical checklist — content is organised in four levels, Platform → Category → Technology → Check, so the tool works like a real assessment framework rather than a flat list. Expand/collapse categories and technologies, with item counts on every section and one-click Expand all / Collapse all.
- Global search — press ⌘K / Ctrl+K from any page to search across platforms, categories, technologies, checks, descriptions, tags, tools, and references. Selecting a result jumps to it, auto-expands the right sections, and highlights the item.
FairEmail
M66B
4,773estrellas
Aplicación de correo electrónico para Android completa, de código abierto y Fair-code, centrada en la privacidad
- 100% open source
- Privacy oriented
sopa
Macmod
64estrellas
A practical client for ADWS in Golang.
noisy
madereddy
108estrellas
Simple random DNS, HTTP/S internet traffic noise generator in a Docker container
- Crawls up to 10,000 top sites sourced from CrUX top lists, refreshed monthly.
- Fetches and rotates real User-Agent strings weekly from useragents.me.
LOLRMM
magicsword-io
417estrellas
LotL RMM
- Fast Astro-powered static site at lolrmm.io – browse the catalog, filter by platform, search by name/domain/artifact, and explore tool details. Catalog content is rendered as static HTML; interactive search and filters use JavaScript
- Catalog snapshot (2026-10-06): 358 entries classified as 261 RMM and 97 RAT, 724 distinct recorded domain patterns, and 145 tools with certificate evidence. See the live site for current totals; catalog classification alone does not establish malicious use
awesome-k8s-security
magnologan
2,009estrellas
A curated list for Awesome Kubernetes Security resources
SOC-Log-Analysis-Datasets
mahialjaber
36estrellas
Curated, simulated dataset of security logs (Windows, Web, Firewall, Cloud) with embedded attack vectors for SOC analysts to practice SIEM ingestion, threat hunting, and log analysis.
- 🎯 Targeted, not random — every file is built around specific, well-known attack techniques (SQLi, XSS, brute force, C2 beaconing, DNS tunneling, IAM abuse, and more), not random noise.
- 🌍 Five real-world domains — Applications, Cloud, Email & DLP, Endpoints, and Network, so you can practice across the environments a real SOC actually monitors.
Codex-Prompt
Mai-xiyu
99estrellas
Rational engineering system prompt for Codex and LLMs — focused on accuracy, software engineering, AI, security research, bug bounty, and reverse engineering. | 面向 Codex 与 LLM 的理性工程系统提示词：强调准确性、软件工程、AI、网络安全、漏洞研究与逆向工程。
Mailpile
mailpile
8,807estrellas
Un cliente de correo electrónico moderno, rápido, gratuito y abierto, con cifrado fácil de usar y funciones de privacidad
recheck
makenowjust-labs
306estrellas
The trustworthy ReDoS checker
malwaredb-rs
malwaredb
65estrellas
MalwareDB: bookkeeping for malware, goodware, and unknown files with relationship discovery
- Store malicious, benign, or unknown file samples.
- Labels, build your own custom hierarchical taxonomy.
Malware-Feed
MalwareSamples
364estrellas
Bringing you the best of the worst files on the Internet.
Bug-Bounty-Methodology
Maniesh-Neupane
339estrellas
Bug Bounty Methodology
mcpsec
manthanghasadiya
26estrellas
An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.
marcellelee.github.io
marcellelee
27estrellas
Cybersecurity Researcher, Consultant, Educator, Author
invisible_captcha
markets
1,253estrellas
🍯 Unobtrusive and flexible spam protection for Rails apps
email2phonenumber
martinvigo
2,829estrellas
A OSINT tool to obtain a target's phone number just by having his email address
Fenjing
Marven11
1,319estrellas
专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF
matano
matanolabs
1,708estrellas
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
- Security Data Lake: Normalize unstructured security logs into a structured realtime data lake in your AWS account.
- Collect All Your Logs: Integrates out of the box with 50+ sources for security logs and can easily be extended with custom sources.
matecloud
mateaix
1,711estrellas
🔥MateCloud是一款基于Spring Cloud Alibaba的微服务架构。目前已经整合Spring Boot 4.0.8、 SpringCloud 2025、Spring Cloud Alibaba 2025、Spring AI 2.0.1、Spring Security Oauth2、Feign、Dubbo、JetCache、RocketMQ等，支持多租户的低代码平台，Saas平台开发套件