Skip to content
Project categories

Security · GitHub

Protect systems, find vulnerabilities, and improve privacy.

Useful GitHub projects

3,720 projects
2,441stars+3in 24h

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.

jaaz

11cafe

6,742stars+3in 24h
jaaz preview

The world's first open-source multimodal creative assistant This is a substitute for Canva and Manus that prioritizes privacy and is usable locally.

SecurityTypeScriptGitHub

AFLplusplus

AFLplusplus

6,872stars+3in 24h

AFL++ is a state-of-the-art fuzzer and ranks #1 in benchmarks. Originally based on AFL, it now includes QEMU 5.1, collision-free coverage, enhanced laf-intel and Redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and much more!

16,187stars+3in 24h

Set up your own OpenVPN server on Debian, Ubuntu, Fedora, CentOS, Arch Linux and more

  • Installs and configures a ready-to-use OpenVPN server
  • CLI interface for automation and scripting (non-interactive mode with JSON output)

awesome-ctf

apsdehal

11,994stars+3in 24h

A curated list of CTF frameworks, libraries, resources and softwares

SecurityJavaScriptCC0-1.0GitHub

tracee

aquasecurity

4,669stars+3in 24h

Linux Runtime Security and Forensics using eBPF

SecurityGoApache-2.0GitHub
4,662stars+3in 24h
Awesome-OSINT-List preview

📡 Comprehensive collection of OSINT tools for cybersecurity professionals, researchers, and bug bounty hunters. Topics: information gathering, reverse search, red team, trust & safety, AI.

SecurityShellGPL-3.0GitHub

OxiCloud

AtalayaLabs

3,704stars+3in 24h
OxiCloud preview

☁️ Ultra-fast, secure & lightweight self-hosted cloud storage — your files, photos, calendars & contacts, all in one place. Built in Rust.

pyWhat

bee-san

7,352stars+3in 24h
pyWhat preview

🐸 Identify anything. pyWhat makes it easy to identify emails, IP addresses, and more. Feed it a .pcap file or some text, and it will tell you what it is! 🧙‍♀️

VulnHunter

capitalone

1,170stars+3in 24h

Agentic AI security tool that applies proactive, attacker-first analysis directly to source code.

SecurityPythonApache-2.0GitHub

cyber-harness

chainreactors

415stars+3in 24h

AI-driven pi-like agent for cyber security — single binary for pentest, red team, bug bounty

SecurityGoAGPL-3.0GitHub

gogo

chainreactors

2,162stars+3in 24h

面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams

  • 关键信息提取, 如title, cert 以及自定义提取信息的正则
  • 支持nuclei poc, 引擎: https://github.com/chainreactors/neutron

tetragon

cilium

5,182stars+3in 24h
tetragon preview

eBPF-based security observability and runtime enforcement

SecurityCApache-2.0GitHub
2,656stars+3in 24h
API-s-for-OSINT preview

List of API's for gathering information about phone numbers, addresses, domains etc

content

ComplianceAsCode

2,843stars+3in 24h
content preview

Security automation content in SCAP, Bash, Ansible, and other formats

cowrie

cowrie

6,678stars+3in 24h

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/