Skip to content
Project categories

Security · GitHub

Protect systems, find vulnerabilities, and improve privacy.

Useful GitHub projects

3,034 projects

ppmap

kleiton0x00

521stars
ppmap preview

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

XSScope

kleiton0x00

313stars
XSScope preview

XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.

  • Perform XSS botnet attack(s). Every victim who is affected by XSS payload (in the webserver), will contantly bind the payload and wait for commands from attacker. A bind payload is one that waits for a connection from its controller.
  • HTTP Flood (DDos) via XSS botnets
SecurityHTMLGPL-3.0GitHub
557stars
ImpulsiveDLLHijack preview

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.

OpenAnt

knostic

806stars
OpenAnt preview

OpenAnt from Knostic is the leading open source LLM-based vulnerability discovery and remediation product, helping defenders proactively find and patch verified security flaws while minimizing both false positives and negatives. Stage 1 detects. Stage 2 attacks. What survives is real.

SecurityPythonApache-2.0GitHub

NetGuard

KOKosaaaa

31stars

Android VPN client built for privacy, security, and stealth. Powered by xray-core.

  • Connection Map - Animated world map showing user-to-server connection arc
  • Speed Test - Download/upload/ping through VPN tunnel (OkHttp + raw SOCKS5)
SecurityKotlinApache-2.0GitHub

Auto_XDP

Kookiejarz

143stars

Lightweight eBPF/XDP stateful firewall that auto-syncs listening ports and preserves return traffic. Zero-config, maximum defense.

SecurityPythonMPL-2.0GitHub
75stars
IKONA-Security preview

🛡️ Comprehensive Cybersecurity Arsenal, Bug Bounty Payloads & Security Audit Tools by IKONA ONI

  • 🗂️ IKONA Arsenal & Master Modules: Automated and manual web security testing scripts.
  • 💥 Web Exploitation & Payloads: Payloads for XSS, SQLi, SSRF, SSTI, JWT, IDOR, Race Conditions, CRLF, and Command Injection.

lethe

Kostassoid

157stars

Secure drive wipe

  • Cross-platform — Windows (x86-64 and ARM64; WSL is not supported), macOS (Apple Silicon) and Linux (x86-64 and ARM64).
  • Verified wiping — reads the data back and compares it with the expected pattern.
SecurityRustApache-2.0GitHub

venom

kraloveckey

46stars

👽 The collection of awesome software, tools, libraries, documents, books, resources and cool stuff about information security, penetration testing and offensive cybersecurity.

boopkit

krisnova

1,685stars
boopkit preview

Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.

SecurityCApache-2.0GitHub

KubeArmor

kubearmor

2,644stars
KubeArmor preview

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

SecurityGoApache-2.0GitHub

node-agent

kubescape

39stars

Kubescape eBPF agent 🥷🏻

  • Zero-Config Threat Detection: Automatically detects command injection, privilege escalation, crypto miners, and more
  • Behavioral Learning: Learns your application's normal behavior and alerts on anomalies
SecurityGoApache-2.0GitHub

regolibrary

kubescape

135stars

The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.

SecurityOpen Policy AgentApache-2.0GitHub

stegcloak

KuroLabs

3,936stars
stegcloak preview

Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

  • Protect your invisible secret using passwords and HMAC integrity
  • Cryptographically secure by encrypting the invisible secret using AES-256-CTR.
SecurityJavaScriptGitHub

Trail-Sense

kylecorry31

3,027stars
Trail-Sense preview

An offline multi-tool Android app for hiking, backpacking, camping, wilderness survival, foraging, and hunting.

  • Navigate using beacons (waypoints), paths, and bearings
  • Retrace your steps with backtrack

github-vps

l0n3m4n

174stars
github-vps preview

You can get a lifetime of FREE VPS using GitHub Codespaces with Kali Linux Docker image installed on github workspace terminal. (beginner, friendly useful for bughunter and pentester)