Skip to content
Project categories

Security · GitHub

Protect systems, find vulnerabilities, and improve privacy.

Useful GitHub projects

2,781 projects

openfga

openfga

6,135stars+5in 24h

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

  • ⚡ High-performance, developer-friendly APIs (HTTP & gRPC)
  • 🔌 Flexible storage backends (In-Memory, PostgreSQL, MySQL, SQLite beta)
SecurityGoApache-2.0GitHub

interactsh

projectdiscovery

4,632stars+5in 24h
interactsh preview

An OOB interaction collection server and client library

  • DNS/HTTP(S)/SMTP(S)/LDAP Interaction
  • IPv4 and IPv6 support
14,062stars+5in 24h
portmaster preview

🏔 Love Freedom - ❌ Block Mass Surveillance

  • Monitor All Network Activity
  • Full Control: Block Anything

certificates

smallstep

9,065stars+5in 24h

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

SecurityGoApache-2.0GitHub

columba

torlando-tech

1,295stars+5in 24h
columba preview

Native Android messaging app using Bluetooth LE, TCP, or RNode (LoRa) over LXMF and Reticulum

  • Message without infrastructure - Send messages even when the internet is down or unavailable
  • Connect multiple ways - Use Bluetooth LE to connect to those around you anywhere, Wifi for those at home, LoRa radio via RNode for those at a distance, or use TCP to connect to any Reticulum server around the world
SecurityKotlinMPL-2.0GitHub
8,157stars+5in 24h

Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.

SecurityTypeScriptGPL-3.0GitHub

wgcf

ViRb3

8,896stars+5in 24h

🚤 Cross-platform, unofficial CLI for Cloudflare Warp

  • Register new account
  • Change license key to use existing Warp+ subscription

systeminformer

winsiderss

16,478stars+5in 24h
systeminformer preview

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com

  • A detailed overview of system activity with highlighting.
  • Graphs and statistics allow you quickly to track down resource hogs and runaway processes.

Betterfox

yokoffing

10,987stars+5in 24h

Firefox user.js for optimal privacy and security. Your favorite browser, but better.

SecurityJavaScriptMITGitHub
1,736stars+5in 24h

Awesome-Jailbreak-on-LLMs is a collection of state-of-the-art, novel, exciting jailbreak methods on LLMs. It contains papers, codes, datasets, evaluations, and analyses.

zeek

zeek

8,224stars+5in 24h

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

  • In-depth Analysis Zeek ships with analyzers for many protocols, enabling high-level semantic analysis at the application layer.
  • Adaptable and Flexible Zeek's domain-specific scripting language enables site-specific monitoring policies and means that it is not restricted to any particular detection approach.

Cybermes

Zyrexnn

1,022stars+5in 24h
Cybermes preview

Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.

  • Native Go Toolchain: Zero-overhead compiled utilities for output stream filtering (smart_pipe), credential scanning (secret_scan), offline knowledge retrieval (search_knowledge), and report aggregation (aggregate_reports).
  • Model Context Protocol (MCP): Native Go MCP server (cybermes-mcp) exposing security tools and context providers to AI assistants like Claude Desktop, Cursor, Windsurf, and VS Code / Cline.
SecurityPythonApache-2.0GitHub
2,437stars+4in 24h

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.

Snitch

aixisstudio

793stars+4in 24h
Snitch preview

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.

  • Force Graph - Live node graph — your machine at the center, every connection as a node
  • World Map - Geolocated IPs with animated arcs on an interactive globe
SecurityPythonAGPL-3.0GitHub

ai-jailbreaks

Alejandros17487

439stars+4in 24h
ai-jailbreaks preview

AI jailbreaks: 35 paste-ready AI jailbreak prompts for 25+ frontier and open-weight models - system prompts, AGENTS.md specs, and Ollama Modelfiles. Built for AI security research and red-team testing.

paranoia

Altumptic

59stars+4in 24h
paranoia preview

Open reverse engineering — PE/ELF/Mach-O, x86/x64/AArch64, graphs, pseudocode. Rust engine, no network. Desktop · CLI · browser.

  • Formats - PE / PE32+ (.NET detection, forwarders, TLS callbacks, .pdata with chained unwind info), ELF (PIE, PLT/GOT imports, symbol versions), Mach-O (universal binaries, dyld bind opcodes, chained fixups, export trie)
  • Architectures - x86 and x86-64 (iced-x86), AArch64, ARM32 and Thumb-2 (yaxpeax-arm), RISC-V RV32/RV64GC, MIPS32/64 and PowerPC 32/64 (own decoders)
SecurityRustApache-2.0GitHub

SlimBrave-Neo

ChaoticSi1ence

836stars+4in 24h
SlimBrave-Neo preview

Debloat and harden Brave Browser on Linux, macOS, and Windows using Chromium enterprise policies. Curses TUI on Linux/macOS, native GUI on Windows. 79 policies, 6 presets, zero dependencies.

  • Disable Metrics Reporting (crash reports; Brave sends no usage statistics through it. On by default in Beta and Nightly, and pre-ticked on Release's first-run welcome page; needs a restart)
  • Disable URL Data Collection (Brave already ships "Make searches and browsing better" off; this locks it and overrides an earlier opt-in in the hidden Privacy Guide)
SecurityPythonGPL-3.0GitHub

kics

Checkmarx

2,739stars+4in 24h
kics preview

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

SecurityOpen Policy AgentApache-2.0GitHub

tetragon

cilium

5,178stars+4in 24h
tetragon preview

eBPF-based security observability and runtime enforcement

SecurityCApache-2.0GitHub

cloud-hypervisor

cloud-hypervisor

6,513stars+4in 24h

A Virtual Machine Monitor for modern Cloud workloads. Features include CPU, memory and device hotplug, support for running Windows and Linux guests, device offload with vhost-user and a minimal compact footprint. Written in Rust with a strong focus on security.

commix

commixproject

5,908stars+4in 24h
commix preview

Automated Αll-in-One OS command injection exploitation tool.

  • Four injection techniques - results-based, boolean-based, time-based and file-based, chosen with --technique or by the type they report with --type - see techniques for what each one asks of a target.
  • Out-of-band, when nothing comes back at all - --oob proves execution and carries the command's output over HTTP/S or DNS, reaching the server through whichever client the target happens to have - see out-of-band client for the ones it tries and how to pin one.

cowrie

cowrie

6,674stars+4in 24h

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/