Skip to content
Project categories

Security · GitHub

Protect systems, find vulnerabilities, and improve privacy.

Useful GitHub projects

3,324 projects

xssmaze

hahwul

40stars

XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnerabilities.

SecurityCrystalMITGitHub

cyber-neo

Hainrixz

297stars
cyber-neo preview

Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabilities across all OWASP 2025 Top 10 and CWE Top 25 categories. 11 security domains, 60+ secret patterns, parallel subagent analysis, professional report generation. Built by tododeia.com

  • 1 - Code Security (SAST) - SQL injection, XSS, command injection, code injection, path traversal, SSRF, deserialization, prototype pollution - Semgrep (optional) + Claude-native pattern analysis
  • 2 - Authentication & Authorization - Missing auth middleware, JWT misconfigurations, broken access control, IDOR, session management flaws, missing RBAC - Claude-native analysis using auth-authz-patterns.md

securify

Hamidooh

64stars

High-speed web security auditor & DevSecOps dashboard for SSL, HTTP headers, DNS defenses, and port exposure.

SecurityTypeScriptMITGitHub
19stars

Umbrella Spoofer v2.0.4 scans hwid reset beside hwid checker. hwid ban tally, smbios board, volume label, nic oui, snapshot pair, disk serial, caller id, device fingerprint, webgl canvases.

ghostline

hashcott

123stars

One-click encrypted DNS (DoH/DoT/DoQ/DNSCrypt), protection against DPI interference with zapret2 (or GoodbyeDPI on Windows), a local HTTP/SOCKS proxy with TLS fragmentation, and domain rules for Windows and Linux. ~30 MB RAM, no telemetry, always restores your original DNS. For privacy, security research and education.

144stars

High-performance open-source anti-DPI / anti-censorship tunnel in Go. Hides VLESS/Trojan traffic behind a 16-mimic arsenal (SSH, TLS, mail, databases, cPanel/WHM/DirectAdmin/Grafana/Prometheus) in coherent personas. Real Let's Encrypt certs, full UDP/QUIC, TUN + transparent gateway mode, runs on MikroTik/RouterOS & Docker.

  • Chaos Mesh Dynamic Balancing: Replaces traditional Round-Robin with a smart "Least Loaded" distribution algorithm. The system actively monitors real-time bandwidth (Mbps) and scales physical connections up or down based on actual traffic volume, not just stream count.
  • DPI Evasion (Fluctuating Caps): Implements dynamic bandwidth jitter. Each physical connection operates under a randomized, fluctuating bandwidth limit (e.g., 8 Mbps ± 2 Mbps) to break static patterns, making the tunnel indistinguishable from organic, noisy internet traffic.

earshot

HellzYeahh

45stars

One Android app for any Bluetooth headset: Bose, Sony, Sennheiser, Soundcore, Skullcandy and more. No account, no internet permission.

dtpr

Helpful-Places

27stars

A wayfinding system and visual language for urban tech that helps people see and understand how data, sensors and AI shapes the places we live, work and play.

SecurityTypeScriptApache-2.0GitHub
251stars
whoishere.py preview

WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request.

Tella-Android

Horizontal-org

117stars
Tella-Android preview

The Android version of our app Tella. Tella is a mobile app designed to protect human rights defenders, advocates, and journalists by encrypting and hiding their sensitive data and safely uploading it to their organization's server.

286stars

A privacy protection tool for screenshots with strong anti-detection capabilities.

  • Comprehensively block malicious detection by specific appsBypass malicious app detection of user screenshots and screen recordings.Supports independently blocking apps' floating window detection, focus detection, and window integrity detection.Supports more aggressive detection and filtering against “unruly” malware.
  • Enables stealthy screen capture, recording, and sharingThe screenshot and screen recording feature bypasses malicious application-layer detection through direct low-level system calls.Screen sharing supports not only local network sharing but also remote sharing over SSH. It also supports receiving screen sharing and remote control efficiently.
SecurityKotlinGPL-3.0GitHub

techo5-dot

HuskerMinion

252stars
techo5-dot preview

Linux firmware for the Echo Dot (2nd gen): no Fire OS, no Alexa. A local Home Assistant voice satellite with all seven mics, Bluetooth speaker mode, signed A/B updates and SSH.

37stars

Docker image to run an OpenVPN server with automatic PKI setup and client config generation. Managed via a helper script. Based on Alpine Linux with OpenVPN and EasyRSA. Supports amd64, arm64 and arm/v7.

33stars

Docker image to run a WireGuard VPN server. Auto-generates server and client configs on first start, with QR code for easy mobile setup. Client management via a helper script. Supports amd64, arm64 and arm/v7.

fabric

hyperledger

16,768stars

Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. Its modular and versatile design satisfies a broad range of industry use cases. It offers a unique approach to consensus that enables performance at scale while preserving privacy.

SecurityGoApache-2.0GitHub

IAV_quantumSAR

iavofficial

56stars

IAV quantumSAR - "Quantum-proof your data with our state of the art cryptographic implementation"

SecurityCApache-2.0GitHub

playlet

iBicha

812stars
playlet preview

The unofficial, privacy driven, YouTube client for Roku

  • 🔥 No Ads (Not now, not ever)
  • 🕵️ No Tracking
SecurityBrighterScriptAGPL-3.0GitHub

otforge

iburres

31stars

Free, open-source ICS/SCADA cybersecurity training platform — Electron + Docker. Real protocol traffic, PLC IDE, Kali attack terminal, Suricata/Zeek monitoring.

SecurityTypeScriptGitHub

ghostgram

ichmagmaus111

45stars

Unofficial Telegram client for iOS on Telegram 13.0: ghost mode, deleted & edited messages, chat protection, voice changer, VLESS VPN

SecuritySwiftGPL-2.0GitHub

MILLIE

IDEAGREY

27stars

Android Wi-Fi/BLE radar terminal with camera-maker, tracker, Flock and public safety signatures. Works alone or with an optional CYD over USB.