Security · GitHub

Protect systems, find vulnerabilities, and improve privacy.

GitHot

Useful GitHub projects

2,879 projectsUpdated --

2857

suspicious

thalesgroup-cert

94stars

AI-powered phishing & threat-analysis platform to automatically inspect, classify, and report suspicious emails, files, URLs, IPs, and hashes built for teams and organizations

SecurityPythonApache-2.0GitHub

2858

florida-zygisk

thelok1s

27stars

A Magisk module that automatically starts anti-detection build of frida-server on boot.

SecurityPythonGPL-3.0GitHub

2859

polymarket-nonce-guard

TheOneWhoBurns

60stars

Detect and defend against the nonce race exploit on Polymarket's CTF Exchange

SecurityPythonMITGitHub

2860

pgspot

timescale

151stars

Spot vulnerabilities in postgres SQL scripts

SecurityPythonPostgreSQLGitHub

2861

mvm

tinylabscom

47stars

Manage secure microVMs — one command from zero to secure sessions, locally and remotely.

SecurityRustApache-2.0GitHub

2862

Buildware-Tools

v4lkyr0

1,633stars

Buildware-Tools is an all-in-one multitool for security research and automation.

SecurityPythonGitHub

2863

Phone-Number-Tracker

Vishal-HaCkEr1910

26stars

🔍 Advanced Phone Intelligence & OSINT Framework — Multi-API consensus voting,12 OSINT probes, case management, SHA-256 evidence chain, audit trails | Python 3.10+

1 - Phone Parsing & Validation - E.164 / international / national format, valid + possible checks, auto country-code detection
2 - Forensic Phone Active Check - Trestle Activity Score (0-100), real-time reachability, strict Line Type Fidelity (Mobile vs Non-Fixed VoIP)

SecurityPythonGitHub

2864

volkszaehler.org

volkszaehler

235stars

Open Source Smart Meter with focus on privacy - you remain the master of your data.

SecurityPHPGPL-3.0GitHub

2865

Whitebox & Blackbox AI red-teaming framework for LLMs & Agentic AI apps. It analyzes your app's source code to discover tools, roles, and guardrails, then generates new attacks chains across several categories and adapts over multiple multi turn rounds to find vulnerabilities

SecurityPythonMITGitHub

2866

whispaste

76stars

Free, open-source Whisper desktop app — 100% offline speech-to-text for Windows, macOS & Linux. No cloud, no subscription.

SecurityDartMITGitHub

2867

wildos

wildorigins

76stars

A hardened Linux desktop, rebuilt from scratch, with your Windows apps built in. Free and open source.

SecurityQMLGPL-3.0GitHub

2868

php2shell-CVE-2026-109618-109619

xuehuolll

52stars

CVE-2026-109618/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.

SecurityPythonMITGitHub

2869

hacktheweb

yashab-cyber

41stars

HackTheWeb is a production-ready, AI-powered web application penetration testing tool designed for security professionals and ethical hackers. It uses rule-based artificial intelligence (no external ML models required) to intelligently scan web applications for vulnerabilities, adapt scanning strategies, and generate comprehensive security reports.

🤖 AI-Powered: Intelligent scanning with adaptive algorithms
🚀 Production-Ready: Fully functional and battle-tested

SecurityPythonMITGitHub

2870

BugBoard

yogsec

53stars

Bugboard is a comprehensive open-source cybersecurity tool for vulnerability detection and bug hunting.

Comprehensive Vulnerability Assessment: Detect vulnerabilities like SQL Injection, XSS, CSRF, and more.
Modular Design: Organized sections for targeting specific vulnerabilities.

SecurityHTMLMITGitHub

2871

endpoints-extractor

yogsec

34stars

A powerful Bash script for extracting URLs and API endpoints from HTML, JavaScript, and JSON content of web pages. Designed for security researchers, bug bounty hunters, and developers to streamline endpoint discovery. Simple to use, supports single or multiple URLs, and offers file-saving capabilities.

Scan a single URL or a list of URLs.
Extract URLs from HTML, JavaScript, and JSON content.

SecurityShellMITGitHub

2872

krait

ZealynxSecurity

27stars

AI-assisted Solidity auditing. Recorded v8 sample: 10 matches, 0 false positives, 15.2% recall on 5 past contests (self-scored).

SecurityTypeScriptMITGitHub

2873

zentinel

zentinelproxy

122stars

A security-first reverse proxy built to guard the free web.

Service types - web, api, static, builtin and inference (LLM/AI) routes
Load balancing - 14 algorithms, including round-robin, weighted, least connections, consistent hash, Maglev, Peak EWMA and least-tokens-queued

SecurityRustApache-2.0GitHub

2874

ai-security-tool

ZeroDayEvil

1,330stars

🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.

SecurityHTMLMITGitHub

2875