Skip to content
Project categories

Security · GitHub

Protect systems, find vulnerabilities, and improve privacy.

Useful GitHub projects

2,879 projects

Open-Security-Labs

ValentinTorassa

44stars

Plataforma educativa abierta en español: labs prácticos de Linux, redes, backend, cloud y ciberseguridad. Aprendé entendiendo los sistemas de verdad.

SecurityMDXApache-2.0GitHub

JobFlow

ValerianXXX

198stars
JobFlow preview

Local-first, AI-centered, evidence-gated job application workflow

FastWord

VasenevEA

35stars
FastWord preview

Local, private push-to-talk dictation for macOS. Hold a key, speak, release — your words appear in any text field. Runs entirely on-device via whisper.cpp with bundled multilingual model. No cloud, no telemetry, no paywall.

Cookie-AutoDeleteV3

VasilisPlavos

37stars

Manifest V3 fork of Cookie AutoDelete — automatically deletes unused cookies. Now on the Chrome Web Store.

  • Automatically deletes cookies from closed tabs
  • Whitelist/Greylist support for cookies
SecurityTypeScriptMITGitHub
187stars
VD-Infos preview

The VD Infos app reads several of these details and information to show you an example of what can be captured from your device in use.​ A.k.a VDInfos, VDInfo, VD Info.

SecurityKotlinAGPL-3.0GitHub
1,631stars
vscan preview

开源、轻量、快速、跨平台 的网站漏洞扫描工具,帮助您快速检测网站安全隐患。功能 端口扫描(port scan) 指纹识别(fingerprint) 漏洞检测(nday check) 智能爆破 (admin brute) 敏感文件扫描(file fuzz)

SecurityGoBSD-3-ClauseGitHub

deepsec

vercel-labs

8,399stars

Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents

SecurityTypeScriptApache-2.0GitHub

verida-js

verida

1,278stars

The Verida SDK provides several SDKs to interact with the Verida Network

SecurityTypeScriptISCGitHub
1,313stars
bypass-firewalls-by-DNS-history preview

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

sandcat

VirtusLab

204stars

A Docker & dev container setup for securely running AI agents in `--dangerous` mode. All container traffic is routed through a transparent mitmproxy, enforcing network access rules and injecting secrets.

SecurityShellApache-2.0GitHub

The-Black-Tiger

VirusZzHkP

232stars
The-Black-Tiger preview

The Black Tiger is all in one OSINT Tool, which has the best methods to collect Information about something or someone just by few mouse clicks.

SecurityPythonGPL-3.0GitHub

EnBizCard

vishnuraghavb

715stars
EnBizCard preview

EnBizCard helps you create interactive and responsive HTML-based digital business cards that can be hosted with your website.

  • Concise action buttons
  • Click to contact via Phone, WhatsApp, Email, etc
SecurityJavaScriptAGPL-3.0GitHub

ExploitFlow

vmayoral

38stars

A library to produce cybersecurity exploitation routes (exploit flows). Inspired by TensorFlow.

SecurityPythonApache-2.0GitHub
419stars

Robot Hacking Manual (RHM). From robotics to cybersecurity. Papers, notes and writeups from a journey into robot cybersecurity.

SecurityTeXApache-2.0GitHub
584stars
maltego-telegram preview

🔎 OSINT Maltego Transforms for investigating Telegram channels, groups, and users, including deanonymization via stickers, forwarded messages, similar channels, deleted posts, and more.

SecurityPythonGPL-3.0GitHub

agartha

volkandindar

412stars
agartha preview

A Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations. It supports dynamic payload generation, including BCheck syntax, and can automatically generate Bambdas scripts. Additionally, it offers "Copy as JavaScript" to convert HTTP requests for enhanced XSS testing.