Skip to content
Project categories

Security · GitHub

Protect systems, find vulnerabilities, and improve privacy.

Useful GitHub projects

4,289 projects

vice

Webba-Creative-Technologies

599stars

VICE is a security auditing CLI tool that finds vulnerabilities in your web applications.

SecurityJavaScriptMITGitHub

gcp-audit

webpwnized

31stars

GCP Audit checks projects in Google Cloud for compliance with CIS Benchmarks

SecurityShellGPL-3.0GitHub

trdl

werf

307stars
trdl preview

The universal solution for delivering your software updates securely from a trusted The Update Framework (TUF) repository.

SecurityGoApache-2.0GitHub
872stars
MCP-Kali-Server preview

MCP configuration to connect AI agent to a Linux machine.

  • 🧠 AI Endpoint Integration: Connect your Kali to any MCP of your liking such as Claude Desktop or 5ier.
  • 🖥️ Command Execution API: Exposes a controlled API to execute terminal commands on your Kali Linux machine.
892stars
JavaSecLab preview

JavaSecLab is a comprehensive Java vulnerability platform|​ JavaSecLab是一款综合型Java漏洞平台,提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范,覆盖多种漏洞场景,友好用户交互UI……

SecurityJavaApache-2.0GitHub

wildfly-elytron

wildfly-security

119stars

WildFly Elytron: Security, Authentication, and Authorization SPIs for the WildFly project

SecurityJavaApache-2.0GitHub

Fern

wized2

29stars
Fern preview

Offline Material You system monitor for Android — CPU, RAM, battery, thermals, per-app stats via Shizuku/root. No ads, no tracking.

  • Live dashboard — CPU, RAM, battery, storage, network with smooth history charts
  • Material You — seed colors, light / dark / system, AMOLED-friendly dark

hibp

wKovacs64

117stars

An unofficial TypeScript SDK for the 'Have I been pwned?' service.

  • All queries return a Promise
  • Provide your own AbortSignal to cancel in-flight requests
SecurityTypeScriptMITGitHub

pwned

wKovacs64

246stars

A command-line tool for querying the 'Have I been pwned?' service.

SecurityTypeScriptMITGitHub
322stars
react-native-capture-protection preview

🛡️ A React Native library to prevent and detect for screen capture, screenshots and app switcher for enhanced security. Fully compatible with both Expo and CLI.

  • 🔒 iOS: Screenshot, Screen Recording & App Switcher protection
  • 🔒 Android: Screenshot & Screen Recording protection

browser

woheller69

303stars
browser preview

A privacy oriented web browser with Greasemonkey style script support and Cookie Banner Blocker

  • AdBlocker using StevenBlack host list
  • Measures against browser fingerprinting
SecurityJavaGPL-3.0GitHub

wolfMQTT

wolfSSL

597stars

wolfMQTT is a small, fast, portable MQTT client implementation, including support for TLS 1.3.

wolfssh

wolfSSL

510stars

wolfSSH is a small, fast, portable SSH implementation, including support for SCP and SFTP.

53stars
tizen-tv-control-center preview

A clean, ad-free home screen for a rooted Samsung Tizen 9 TV: apps truly disabled, pop-ups over any app, everything survives reboots. Made with Claude Opus 5.5.

647stars

A simple shell script collection to scan your Xcode Swift project for required reason API usage to ensure privacy compliance and to simplify the creation of privacy manifests.

website

WP-Security-Checklist

127stars

A simple checklist to improve the security of your WordPress installation.

SecuritySCSSGPL-2.0GitHub

desktop-2fa

wrogistefan

30stars
desktop-2fa preview

A secure offline desktop application for generating and managing TOTP 2FA codes. Features encrypted vault storage, modern cryptography (Argon2 + AES‑GCM), modular architecture, and a local‑first approach with no cloud dependencies. Designed for reliability, extensibility, and future cross‑platform UI.

  • 🔐 Vault Security - AES-256-GCM encryption with Argon2id key derivation
  • ⏱️ TOTP Generation - RFC 6238 compliant code generation
SecurityPythonApache-2.0GitHub

ora

wuwangzhang1216

64stars
ora preview

Real-time on-device speech translation for macOS. Silero VAD + Qwen3-ASR-1.7B + Qwen3.5 (MLX) on Apple Silicon. No cloud, no API keys, no telemetry.