Skip to content
Project categories

Security · GitHub

Protect systems, find vulnerabilities, and improve privacy.

Useful GitHub projects

3,704 projects

ad-lab-scripts

PentestPlaybook

91stars

Modular, checkpoint-resumable scripts that build a vulnerable Active Directory lab (ad.lab forest) for authorized pentesting practice. One PowerShell script per VM, idempotent across reboots. Authorized testing only.

  • One script per VM — compose a single host or the whole domain.
  • Reboot-resilient DC build — a checkpoint file lets DC01.ps1 resume automatically across the forced restarts of host rename and forest promotion.
SecurityPowerShellGitHub

penumbra

penumbra-zone

485stars

Penumbra is a privacy-preserving decentralized exchange for all of crypto

SecurityRustApache-2.0GitHub

chkdomain

PeterDaveHello

84stars
chkdomain preview

🔍 Discover if a domain is resolvable or blocked by secure DNS and Ad-blocking services, and experience the innovative idea of DaaS - DNS as an Intelligence Service.

SecurityShellGPL-3.0GitHub

vokuro

phalcon

366stars

Sample application for Phalcon Framework (Acl, Auth, Security)

SecurityPHPBSD-3-ClauseGitHub

namesilo-evidence

phishdestroy

153stars
namesilo-evidence preview

NameSilo registrar abuse investigation (IANA 1479): public evidence, domain history, classified IOC feeds and reproducible analytics.

phpMussel

phpMussel

433stars

PHP-based anti-virus anti-trojan anti-malware solution.

  • Licensed as GNU General Public License version 2.0 (GPLv2).
  • Easy to install, easy to customise, easy to use.

PalmNote

PickGear

29stars

PalmNote —— 本地优先(local-first)的生活记录应用:记账、物品管理、生活规划与离线密码本。数据全部保存在本机,无需注册、无需联网,支持中英文。

SecurityKotlinGPL-3.0GitHub

titus

praetorian-inc

772stars
titus preview

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

  • Passive secret scanning: automatically scans proxy traffic as it flows through Burp
  • Active secret scanning: right-click context menu to scan selected requests
SecurityGoApache-2.0GitHub
48stars

Web application vulnerability scanner with a deliberately vulnerable Flask app and its hardened counterpart. Used in Experiment 3 of PRES-EDU-SEC-101.

TweakHub

PrimeBuild-pc

56stars
TweakHub preview

🎛️ Portable Windows 11 control center: add your own tweaks, scripts and favorites, carry it on a USB stick, reach every specialist tool. Free and open source.

rules

project-codeguard

430stars

Project CodeGuard is an AI model-agnostic security framework and ruleset that embeds secure-by-default practices into AI coding workflows (generation and review). It ships core security rules, translators for popular coding agents, and validators to test rule compliance.

proof-of-stock

proofofstock

12stars

Checks if a tokenized-stock contract is on the issuer's own registry, with the issuer price and the on-chain gap.

SecurityJavaScriptMITGitHub
661stars
ironcurtain preview

A secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)

  • Filesystem - 14 - Read, write, edit, search files; directory tree; move; diff calculation
  • Git - 28 - Full git workflow: status, diff, log, commit, branch, push/pull/fetch, clone, stash, blame
SecurityTypeScriptApache-2.0GitHub