Skip to content
Project categories

Security · GitHub

Protect systems, find vulnerabilities, and improve privacy.

Useful GitHub projects

3,724 projects

wolfssh

wolfSSL

510stars

wolfSSH is a small, fast, portable SSH implementation, including support for SCP and SFTP.

53stars
tizen-tv-control-center preview

A clean, ad-free home screen for a rooted Samsung Tizen 9 TV: apps truly disabled, pop-ups over any app, everything survives reboots. Made with Claude Opus 5.5.

647stars

A simple shell script collection to scan your Xcode Swift project for required reason API usage to ensure privacy compliance and to simplify the creation of privacy manifests.

website

WP-Security-Checklist

127stars

A simple checklist to improve the security of your WordPress installation.

SecuritySCSSGPL-2.0GitHub

desktop-2fa

wrogistefan

30stars
desktop-2fa preview

A secure offline desktop application for generating and managing TOTP 2FA codes. Features encrypted vault storage, modern cryptography (Argon2 + AES‑GCM), modular architecture, and a local‑first approach with no cloud dependencies. Designed for reliability, extensibility, and future cross‑platform UI.

  • 🔐 Vault Security - AES-256-GCM encryption with Argon2id key derivation
  • ⏱️ TOTP Generation - RFC 6238 compliant code generation
SecurityPythonApache-2.0GitHub

ora

wuwangzhang1216

64stars
ora preview

Real-time on-device speech translation for macOS. Silero VAD + Qwen3-ASR-1.7B + Qwen3.5 (MLX) on Apple Silicon. No cloud, no API keys, no telemetry.

27stars

Рабочие VPN Telegram-боты для России: актуальный список 2026 (VLESS, WireGuard, Shadowsocks)

SecurityJavaScriptMITGitHub
349stars

SecretPixel is a cutting-edge steganography tool designed to securely conceal sensitive information within images. It stands out in the realm of digital steganography by combining advanced encryption, compression, and a seeded Least Significant Bit (LSB) technique to provide a robust solution for embedding data undetectably.

  • Advanced Encryption: SecretPixel uses AES-256 encryption for the data, with a session key that is further encrypted using RSA public key cryptography. This two-tier encryption ensures that only the holder of the corresponding RSA private key can decrypt the hidden information, providing a high level of security.
  • Compression: Before encryption, the data is compressed using zlib to reduce its size. This not only makes the process more efficient but also helps in minimizing patterns that could be detected by steganalysis tools.
SecurityPythonGPL-3.0GitHub
47stars

Recursively search Hashicorp Vault

  • Recursive Search: Traverses nested paths in Vault to find secrets.
  • Multi-Target Search: Search within secret values, keys, or paths.

Spider

xdisform

22stars
Spider preview

Multi-agent AI system that turns Claude Code into an autonomous pentest red-team lead. Recon, exploitation, OSINT and submission-ready reporting with deterministic oracles and zero false positives

Echos

xdrew87

35stars

Echos is a stealthy C2 traffic emulator built in Rust for Red Teamers. It simulates adversarial beaconing patterns and custom jitter to test EDR/NDR detection logic. Ideal for validating network security signatures in a safe, modular framework.

  • 11 protocols — HTTP, HTTPS, HTTP/2, DNS, ICMP, SMB, WebSocket, SMTP, FTP, LDAP, RDP
  • 19 built-in profiles — Cobalt Strike, APT28, Lazarus, APT29, Emotet, FIN7, APT41, ICMP, SMB, WebSocket, SMTP, Sandworm, Turla, Carbanak, CS DNS Beacon, Meterpreter, FTP Beacon, LDAP Beacon, RDP Beacon

md-vault

xiangc579

19stars

A zero-dependency, local-first password dashboard built for Markdown lovers. Features native 2FA/TOTP live countdowns, compact AST card layouts, instant keyboard search (/), and 100% air-gapped plain-text storage with zero vendor lock-in. Single-file HTML.

DorkEye

xPloits3c

162stars
DorkEye preview

Automated Google Dorking tool. It generates and executes advanced search queries to locate exposed files. It also checks for vulnerabilities such as SQLi and XSS, performs metadata analysis and extraction.

XposedOrNot-API

XposedOrNot

103stars
XposedOrNot-API preview

Open-source API to check if an email has been exposed in a data breach and monitor breaches across your verified domains. Real-time alerts and breach analytics protect your online identity.

  • Check whether an email has appeared in a known data breach, with stats on where and when
  • See if an email shows up in public pastes
255stars
Project-Deep-Focus preview

Your personal 'Mini Shodan'. A high-performance network reconnaissance engine designed for massive scale asset discovery. Specializes in identifying unsecured services (Open RTSP Cameras, No-Auth VNC, Anonymous FTP) and deeply fingerprints device models with a beautiful real-time terminal dashboard.

  • Scans IP ranges for open services (HTTP, FTP, SSH, VNC, RTSP, RDP)
  • Identifies authentication requirements for discovered services

Skykeep

YashwanthKamireddi

361stars
Skykeep preview

iCloud, set free: Apple Notes, Reminders, Calendar, Contacts, iCloud Drive and Photos as native apps on Windows, Linux and Android. Works offline. Open source, Rust.

SecurityRustGPL-3.0GitHub

SindriKit

youssefnoob003

95stars
SindriKit preview

A foundational C library for building operationally credible offensive capabilities

pastoralist

yowainwright

109stars

keep your projects more secure & maintain dependency overrides with 1 command 👩🏽‍🌾

SecurityTypeScriptMITGitHub
297stars
cookie-quick-manager preview

An addon to manage (view, search, create, edit, remove, backup, restore) cookies on Firefox.

  • User friendly: Clear and structured user interface. Each parameter and functionality is described when the mouse is over the element.
  • Windowed and tab mode: Choose the opening in a tab to get a wider view.
SecurityJavaScriptGPL-3.0GitHub
663stars

Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy

tidal-app

yyan115

27stars
tidal-app preview

Unofficial open source Android music player for TIDAL.

  • Lossless streaming up to 24-bit/192 kHz where TIDAL provides it. A lossless setting never falls back to AAC. The player shows the codec, bit depth and sample rate of the source.
  • Home with your mixes, radio, new releases, genres and moods. Artist and album pages with biographies, reviews and credits. Music videos with picture-in-picture.
SecurityKotlinApache-2.0GitHub