Security · GitHub

Protect systems, find vulnerabilities, and improve privacy.

GitHot

Useful GitHub projects

2,034 projectsUpdated --

security-audit-skill

cloudflare

59,034stars+935in 24h

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

SecurityJavaScriptMITGitHub

the-book-of-secret-knowledge

trimstray

255,880stars+243in 24h

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

SecurityMITGitHub

Fair-code, open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigations, and a replayable decision ledger for every agent step. Self-hostable, runs without API keys, and licensed under MIT. Includes an MCP server for Claude, Cursor, and Continue.

SecurityPythonMITGitHub

awesome-reverse-engineering

morluto

1,797stars+145in 24h

Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.

SecurityPythonCC0-1.0GitHub

strix

usestrix

73,679stars+142in 24h

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

SecurityPythonApache-2.0GitHub

watermarks-remover

guillaumemeyer

26,276stars+136in 24h

A privacy-first app that strips AI watermarks from content you own.

SecurityPythonMITGitHub

blackbird

antoniaci

9,643stars+104in 24h

An OSINT tool to search for accounts by username and email in social networks.

SecurityPythonGitHub

agent-beacon

Asymptote-Labs

3,240stars+98in 24h

The cross-harness, self-improving memory layer for AI agents. Join our community: https://discord.com/invite/zdNChS2fBu

SecurityGoMITGitHub

Awesome-Hacking

Hack-with-Github

124,560stars+91in 24h

A collection of various awesome lists for hackers, pentesters and security researchers

SecurityCC0-1.0GitHub

shannon

KeygraphHQ

51,133stars+89in 24h

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

No exploit, no report: Reports only vulnerabilities confirmed with a reproducible proof of concept, reducing speculative scanner noise.
Advanced code analysis: Maps architecture, trust boundaries, interfaces, data flows, and critical assets before sending credible attack paths to live pentesting agents.

SecurityTypeScriptAGPL-3.0GitHub

tellyscope

man15h

1,414stars+83in 24h

Debloat your Android TV, install apps, browse and transfer files on it, all from your phone. Just 3 MB, no tracking, no root, no PC.

SecurityKotlinGPL-3.0GitHub

TW-Security-and-CTF-Resource

Ice1187

1,104stars+75in 24h

台灣資安 / CTF 學習資源整理

SecurityMITGitHub

Vela

PimpinPumpkin

2,406stars+70in 24h

Maps and turn-by-turn navigation for Android without Google Play Services: the best of open map data, with Google lookups by choice. Runs on degoogled phones and can avoid Flock cameras

SecurityKotlinGPL-3.0GitHub

caddy

caddyserver

78,748stars+67in 24h

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

Easy configuration with the Caddyfile
Powerful configuration with its native JSON config

SecurityGoApache-2.0GitHub

openwhispr

OpenWhispr

10,649stars+61in 24h

Voice-to-text dictation app with local (Nvidia Parakeet/Whisper) and cloud models (BYOK). Privacy-first and available cross-platform.

Voice dictation — global hotkey to dictate into any app with automatic pasting
Dictation translation — dedicated hotkey to dictate in one language and paste the text in another

SecurityJavaScriptMITGitHub

Check-Risk-WAF

2,012stars+59in 24h

Check Risk WAF is an all-in-one Web Application Firewall with Anti-Bot and Anti-DDoS protection at L3, L4, and L7. Available on-premises or as SaaS, it protects web apps against OWASP Top 10 attacks, CWE vulnerabilities, botnets, and DoS/DDoS. Free and unlimited for everyone, forever for personal, non-commercial use.

Security GitHub

OpenLogi

AprilNEA

25,078stars+56in 24h

⚡️A native, local-first alternative to Logitech Options+, written in Rust 🦀 — remap buttons, DPI, and SmartShift over HID++. No account, no telemetry.

SecurityRustApache-2.0GitHub

PentestingEverything

m14r41

2,230stars+48in 24h

SecurityTypeScriptMITGitHub

Anthropic-Cybersecurity-Skills

mukul975

35,553stars+48in 24h

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

SecurityPythonApache-2.0GitHub

komi-store

20,305stars+45in 24h

🩵 A free, open-source app store for developers' releases on GitHub, Codeberg & Forgejo — browse, discover, and install apps with one click. Formerly GitHub Store.

Smart discovery
Recently Released

SecurityKotlinApache-2.0GitHub

Cybersecurity-Projects

CarterPerez-dev

9,048stars+42in 24h

Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Owned by my cybersecurity company 👇

SecurityGoAGPL-3.0GitHub