Security · GitHub

🩵 A free, open-source app store for developers' releases on GitHub, Codeberg & Forgejo — browse, discover, and install apps with one click. Formerly GitHub Store.

• Smart discovery
• Recently Released

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Useful tool to track location or mobile number

BKN Foundry is the Ontology back-end foundation of OpenBKN. It transforms ontology-driven business semantics into runtime services: data, logic, actions, security governance, and observability.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.

• Web Console - Task Management - Vulnerability Management
• WebShell Management - MCP Management - Knowledge Base

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

• Easy configuration with the Caddyfile
• Powerful configuration with its native JSON config

Sound static analysis and LLM reasoning, in one security agent

• Dependencies, by reachability: lockfiles of 11 ecosystems plus C/C++ and vendored copies, matched against OSV offline, ranked by whether attacker data actually reaches the vulnerable function, with upgrades Frame plans, applies and verifies against your tests, plus licence policy, SBOM and VEX.
• Secrets, including git history: credential-named values and 15 providers' key formats (AWS, GitHub, Stripe, OpenAI, and more), in code and in every commit the history ever added, with optional live verification against the provider's own API so a real leak is told from a test fixture.

Debloat your Android TV, install apps, browse and transfer files on it, all from your phone. Just 3 MB, no tracking, no root, no PC.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.

🍴 OpenNutriTracker is a free and open source calorie tracker with a focus on simplicity and privacy.

• 🍎 - Food logging - Search, scan a barcode, or quick-add kcal, backed by Open Food Facts, USDA, and German BLS.
• 📓 - Food diary - Breakfast, Lunch, Dinner, and Snack on a calendar, with per-meal kcal targets.

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

• Web based UI or CLI
• Over 200 modules (see below)

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.

Cross-platform GUI written in Rust using ADB to debloat non-rooted Android devices. Improve your privacy, the security and battery life of your device.

Fair-code, open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigations, and a replayable decision ledger for every agent step. Self-hostable, runs without API keys, and licensed under MIT. Includes an MCP server for Claude, Cursor, and Continue.

Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Owned by my cybersecurity company 👇

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

• It defenses for all of web attacks, such as SQL injection, XSS, code injection, os command injection, CRLF injection, XXE, SSRF, path traversal and so on.
• Defend your web apps against DoS attacks, bruteforce attempts, traffic surges, and other types of abuse by throttling traffic that exceeds defined limits.

Open-source AI-powered offensive security harness for automated penetration testing.

💚 End-to-end encrypted cloud for everything.

Infisical is the Fair-code platform for securing secrets, certificates, access, and AI Agents.