Skip to content
Project categories

Security · GitHub

Protect systems, find vulnerabilities, and improve privacy.

Useful GitHub projects

2,879 projects

SignsofAI

peopleworks

31stars
SignsofAI preview

A free, privacy-first tool that flags the tells of AI-generated writing, overused vocabulary, rhetorical crutches, robotic sentence rhythm and, for every finding, tells you how to fix it.

pwndoc-ng

pwndoc-ng

462stars
pwndoc-ng preview

Pentest Report Generator

  • Collaborative editing: several users write the same audit in real time (TipTap 3, Hocuspocus/Yjs), WYSIWYG editor with tables, images with captions, bar and pie charts, spellchecker (LanguageTool) and code blocks with syntax highlighting (css, js, http, ts, html, bash, sql, json: choose the language in the menu of the code block)
  • Links between findings: with {@identifier | bookmarkCreate | p} in the template, type ::: in the editor to link another finding with a hyperlink
SecurityJavaScriptMITGitHub

search_vulns

ra1nb0rn

101stars

A modular tool to search for known vulnerabilities, exploits and more across various data sources

102stars
ashampoo-undelete-recovery preview

Ashampoo Undeleter: Windows file recovery and drive scanning security tool

  • Sector-Level Disk Scanning: Ashampoo Undeleter reads raw sectors of the target volume to locate file records that remain after deletion, rather than relying solely on the file system index.
  • Recovery Quality Ratings: Every detected file is classified from Good to Lost based on the integrity of its remaining data, so recovery priority is set by evidence rather than guesswork.
SecurityJavaScriptMITGitHub

osint-terminal

RojanSapkota

49stars
osint-terminal preview

Self-hosted OSINT dashboard: 400+ keyless recon tools, a live 3D threat globe, and batch/case investigation workflows, no API keys required.

  • 438 keyless tools spanning network, domain, email, identity, phone, image, crypto, threat-intel, academic, geo, and encoding categories.
  • Interactive 3D globe (via globe.gl) with live overlays: earthquakes (USGS), aircraft (OpenSky), C2 infrastructure (Feodo Tracker), ISS position, and animated attack arcs.

midstream

ruvnet

151stars

MidStream is a powerful platform that makes AI conversations smarter and more responsive. Instead of waiting for an AI to finish speaking before understanding what it's saying, MidStream analyzes responses as they stream in real-time—enabling instant insights, pattern detection, and intelligent decision-making.

SecurityRustApache-2.0GitHub
54stars
azure-php-scout preview

Self-hosted Azure PHP and WordPress discovery with version-based advisory triage and offline HTML reports.

48stars

Collection of IP addresses used by legitimate crawlers and services: Googlebot, Bingbot, AhrefsBot, UptimeRobot, Pingdom, Cloudflare, Bunny CDN, Stripe, Shodan, FacebookBot, TelegramBot, and more.

SecurityJavaScriptMITGitHub

bbrecon

serain

226stars

Python library and CLI for the Bug Bounty Recon API

  • Public Programs - public bug bounty programs indexed and searchable with filters
  • Domains - domains in scope across programs

IPs

ShadowWhisperer

213stars

IP lists for malware, bots, scanners, etc.

180stars

👀 Lightweight root module that disables FLAG_SECURE, enabling screenshots & screen recording in restricted apps. Hides screenshot detection. Includes a toggleable privacy mode to block screenshots system-wide. Supports Magisk, KernelSU, APatch & forks with no extra dependencies.

  • 🚫 Unlocks Screenshots & Screen Recordings Everywhere — Captures restricted screens in banking apps, financial services, WhatsApp view-once media, profile photos, and incognito tabs.
  • 🔕 Screenshot Detection & Warning Blocking — Prevents apps from detecting screenshots and suppresses all detection warnings or chat notifications (WhatsApp, Snapchat, etc.).

bb-huge

ShulkwiSEC

27stars
bb-huge preview

bb-huge 🤗 , Personal bug bounty findings hub and bug bounty orchestration for multiple agents

TeroVPN

smartworldarafath

36stars
TeroVPN preview

🛡️ Fast, secure, and private Android VPN powered by WireGuard MASQUE (HTTP/3) over Fastly edge with Proton UI & Liquid Glass design.

SecurityDartGPL-3.0GitHub

zero_password_manager

SoulNaturalist

168stars
zero_password_manager preview

Open-source self-hosted password manager built with Flutter. Store passwords and crypto seed phrases securely without cloud storage.

  • AES-256-GCM end-to-end encryption
  • PBKDF2-SHA256 (600k iterations · legacy accounts auto-migrate from 100k) key derivation
59stars
spydithreatintel preview

Spydi ThreatIntel Feed is built on open-source threat intelligence, community-maintained blocklists, and public security research.

HOneClick

superboyyy

34stars

荣耀临时 root 工具,目前仅在 Magic9 Pro Max 测试,仅用于个人研究。Experimental temporary-root research tool for Honor (tested on Magic9 Pro Max - WKL-AN20/WKL-AN80).

keylogger

suriyaa

189stars
keylogger preview

:closed_lock_with_key: Open Source Python Keylogger Collection

SecurityPythonApache-2.0GitHub
54stars
claude-windows-privacy-guard preview

Windows Claude 隐私与联网保护:定向清理本地登录痕迹、指定出口失败关闭、桌面及隔离浏览器后端、只读实时运行环境面板。含 Codex Skill、源码与离线测试。