zaproxy
zaproxy
16,168stars+7in 24h
The ZAP by Checkmarx Core project
Security · GitHub
Protect systems, find vulnerabilities, and improve privacy.
Useful GitHub projects
2,781 projects
wBlock
0xCUB3
3,227stars+6in 24h
Free, open-source Safari ad blocker for macOS, iOS, iPadOS and visionOS. Up to 750,000 rules, custom filter lists, userscripts and userstyles. No subscription.
awesome-ctf
apsdehal
11,990stars+6in 24h
A curated list of CTF frameworks, libraries, resources and softwares
artifact-keeper
artifact-keeper
1,279stars+6in 24h
Open-source universal artifact registry. Drop-in Artifactory/Nexus alternative with 40+ package formats, security scanning, WASM plugins, and edge replication.
- 45+ Package Formats - Native protocol support for Maven, PyPI, NPM, Docker/OCI, Cargo, Go, Helm, and 38 more
- WASM Plugin System - Extend with custom format handlers via WebAssembly (WIT-based, Wasmtime runtime)
RustScan
bee-san
20,703stars+6in 24h
🤖 The Modern Port Scanner 🤖
- Scans all 65k ports in 3 seconds.
- Full scripting engine support. Automatically pipe results into Nmap, or use our scripts (or write your own) to do whatever you want.
bunkerweb
bunkerity
11,253stars+6in 24h
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
- HTTPS support with transparent Let's Encrypt automation
- State-of-the-art web security: HTTP security headers, prevent leaks, TLS hardening, ...
lynis
CISOfy
16,673stars+6in 24h
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
TorBot
DedSecInside
5,191stars+6in 24h
Dark Web OSINT Tool
- Onion Crawler (.onion)
- Returns page title or host name if no page title is available and address with a short description of the site.
opensnitch
evilsocket
14,286stars+6in 24h
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
- Interactive outbound connections filtering.
- Block ads, trackers or malware domains system wide.
raptor
gadievron
4,001stars+6in 24h
Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.
- Take a codebase from first look to candidate fixes. Map its attack surface, investigate suspicious code, assess scanner findings, test exploitability, and generate PoCs and patches for review. Start with /agentic; use /understand or standalone /audit when you need a focused investigation.
- Check what your software ships with. Inspect application dependencies, container packages, and workflow components; identify advisory and supply-chain risks, produce an SBOM, and plan fixes or upgrades with /sca.
hol-guard
hashgraph-online
1,095stars+6in 24h
Open-source antivirus and firewall for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
- Manifest validation - Required fields, versions, declared paths, interface metadata, links, and assets.
- Security - Hardcoded secrets, unsafe MCP commands and transports, and risky approval defaults.
HeliBoard
HeliBorg
6,560stars+6in 24h
Customizable and privacy-conscious open-source keyboard
- Add dictionaries for suggestions and spell check
- build your own, or get them here (quality may vary)
CVEngine
hevnsnt
711stars+6in 24h
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
gosearch
ibnaleem
3,898stars+6in 24h
🔍 Search anyone's digital footprint across 300+ websites
MyIP
jason5ng32
12,353stars+6in 24h
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
opensidian
jpzk
382stars+6in 24h
A privacy-first, open-source, markdown PKM tool with graphs, canvas and community plugins
kata-containers
kata-containers
9,125stars+6in 24h
Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/
voidaccess
KatrielMoses
1,055stars+6in 24h
Self-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and Flare.
404StarLink
knownsec
11,511stars+6in 24h
404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目
ctf-skills
ljagiello
3,686stars+6in 24h
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
monero
monero-project
10,996stars+6in 24h
Monero: the secure, private, untraceable cryptocurrency
nanoclaw
nanocoai
31,110stars+6in 24h
A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK
suricata
OISF
6,877stars+6in 24h
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
opengrep
opengrep
3,323stars+6in 24h
🔎 Static code analysis engine to find security issues in code.