Skip to content
Project categories

Security · GitHub

Protect systems, find vulnerabilities, and improve privacy.

Useful GitHub projects

3,493 projects
19stars

Stop flag sharing in CTFd: every team gets its own flag and its own files, and a shared flag tells you who leaked it.

SecurityPythonApache-2.0GitHub

whats-reader

rodrigogs

275stars
whats-reader preview

Browse WhatsApp chat exports offline with AI-powered voice transcription. Privacy-first desktop/web app with bookmarks, search, and statistics. Built with SvelteKit and Electron.

  • Date-based organization with calendar navigation
  • Bulk select and download as ZIP
SecurityTypeScriptAGPL-3.0GitHub

osint-terminal

RojanSapkota

49stars
osint-terminal preview

Self-hosted OSINT dashboard: 400+ keyless recon tools, a live 3D threat globe, and batch/case investigation workflows, no API keys required.

  • 438 keyless tools spanning network, domain, email, identity, phone, image, crypto, threat-intel, academic, geo, and encoding categories.
  • Interactive 3D globe (via globe.gl) with live overlays: earthquakes (USGS), aircraft (OpenSky), C2 infrastructure (Feodo Tracker), ISS position, and animated attack arcs.

MegaV_Public

Romaxa55

107stars
MegaV_Public preview

Free VPN with VLESS Reality, Xray & V2Ray — free config & subscription support (VMess, Trojan, Shadowsocks, WireGuard). Privacy-first, no-logs, built-in ad blocker, kill switch, split tunneling + News, Radio & IPTV. Open-source client for Android, iOS, macOS, Windows. 3-day free trial, 13+ languages.

  • 🔐 VLESS Reality - Modern privacy protocol — traffic blends in with ordinary HTTPS
  • 🧩 Multi-Protocol - VLESS Reality, VMess, Trojan, Shadowsocks, WireGuard (Xray / V2Ray core)

1Key

roufsyed

31stars

A privacy-focused Android application that brings together password management, passkey management, two-factor authentication (2FA) codes, secure notes, and encrypted backups in one place. Built with security, simplicity, and offline functionality at its core.

SecurityKotlinGPL-3.0GitHub
68stars

Every uncensored and abliterated DeepSeek build — V4.1 Flash 1017 Abliterated (the pinned, reproducible build that ranks third on the AA Cyber benchmark), V4 Pro, the tuned variants, abliterated GGUF builds and a cyber red-team prompt library. Maintained by RouterHub.

rtbf.ir

rtbf-ir

217stars

Right to be forgotten - directory of direct links to delete your account from persian web services. دایرکتوری حق فراموش شدن سرویس های ایرانی

SecurityHTMLApache-2.0GitHub

surge

rule110-io

467stars
surge preview

Surge is a p2p filesharing app designed to utilize blockchain technologies to enable 100% anonymous file transfers. Surge is end-to-end encrypted, decentralized and open source.

SecurityGoApache-2.0GitHub

GhostRoute

s-r-e-e-r-a-j

195stars

GhostRoute is a powerful ethical hacking tool for anonymization, routing all your system network traffic through the Tor network, making it very hard to track your online activity, IP address, and location.

  • Sends all your internet traffic through the Tor network
  • Hides your real IP address and location
145stars
S4ntrx-Bot preview

The project is a multi-user cybersecurity education chatbot built with Flask, aimed at a school/classroom project.

57stars

Nieoficjalny czytnik starych archiwów Gadu-Gadu 6/7 (archives.dat). Działa lokalnie w przeglądarce, bez internetu.

gryph

safedep

183stars
gryph preview

Security layer for AI coding agents. Works with Claude Code, Cursor, Windsurf, Gemini CLI, OpenCode, Pi Agent and more.

SecurityGoApache-2.0GitHub

attack-surface-toolkit

SagarBiswas-MultiHAT

30stars

Passive Attack Surface Toolkit: Module-based passive OSINT recon for web domains. Runs non-destructive subdomain/DNS/WHOIS/SSL/header/wayback/tech discovery, maps depth‑1 surface, computes a 0–100 exposure score, and emits presentation-ready HTML, JSON, Markdown and an interactive graph.

awesome-cybersecurity-books

SagarBiswas-MultiHAT

74stars

A curated collection of 70+ free cybersecurity books organized by domain and difficulty (🟢 Beginner → 🟡 Intermediate → 🔴 Advanced). Structured learning paths for ethical hacking, penetration testing, exploit development, malware analysis, web security, and more. No paywall. Community maintained.

awesome-cybersecurity-paths

SagarBiswas-MultiHAT

33stars

The complete cybersecurity career roadmap and handbook. 36 roles across pentesting, red teaming, bug bounty, SOC, incident response, digital forensics, cloud security, DevSecOps, threat hunting, OSINT, and GRC. Each role covers skills, 150+ tools, 50+ certifications, and career progression paths.

IoT-IDS-Research-Proposals

SagarBiswas-MultiHAT

30stars

Behavioral Fingerprinting-Augmented Embedded IDS on Raspberry Pi 4 + ESP32. Detects zero-day attacks by learning per-device traffic profiles using Isolation Forest; no signatures needed. Features distributed MQTT nodes, real-time Flask dashboard, iptables auto-blocking, and GPIO alerts.

Multi-FA-Auth

SagarBiswas-MultiHAT

29stars

A beginner-friendly Node/Express + Vanilla JS authentication demo that implements a complete sign-up/sign-in lifecycle: email verification (4‑digit OTP), optional 2FA (email OTP, TOTP authenticator, backup codes), password reset, account settings, session handling, and deploy-ready email fallback (Brevo → SMTP → debug).

SecurityJavaScriptGitHub

osint-exposure-toolkit

SagarBiswas-MultiHAT

30stars

OSINT Exposure Toolkit: A modular, passive reconnaissance CLI that inspects emails, domains, and usernames for leaks and misconfigurations. Generates interactive HTML, JSON and Markdown reports and a visual exposure graph. Includes GitHub secret scans, HIBP/LeakCheck support, Shodan, Google dorks, JS and metadata scanning.