Skip to content
Project categories

Security · GitHub

Protect systems, find vulnerabilities, and improve privacy.

Useful GitHub projects

2,879 projects

Tower-Hunter

Ringmast4r

99stars
Tower-Hunter preview

Cell tower logger and anomaly detector for Linux mobile devices. Monitors cellular connections, logs tower data with GPS, and detects suspicious activity.

RedSage

RISys-Lab

67stars

[ICLR 2026] RedSage: A Cybersecurity Generalist LLM

  • Cyber-Domain Intelligence: Built on CyberFineWeb, a curated 11.8B-token corpus of high-quality cybersecurity resources spanning frameworks, offensive techniques, and security tool documentation.
  • Agentic Augmentation: Trained on 266,000 multi-turn dialogues generated by a specialized agentic pipeline that simulates "User-Expert" workflows to solve multi-step security challenges.
185stars

This repository updates latest Bug Bounty medium writeups every 10 minutes, https://readmedium.com/Medium_URL, https://archive.ph/Medium_URL, https://freedium.cfd/Medium_URL

scope

rix4uni

104stars

An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms (like Hackerone/Bugcrowd/Intigriti/etc) (updates every 10 minutes)

JDBG

roger1337

333stars
JDBG preview

Java Dynamic Reverse Engineering and Debugging Tool

  • Analyse decompiled classes at runtime
  • Analyse method bytecode and field definitions at runtime
SecurityC++Apache-2.0GitHub

hawk-eye

rohitcoder

507stars
hawk-eye preview

A powerful scanner to scan your Filesystem, S3, MySQL, Redis, Google Cloud Storage and Firebase storage for PII and sensitive data.

  • Swiftly scans multiple data sources (S3, MySQL, PostgreSQL, Redis, Firebase, filesystem, and GCS) for PII data and malware exposure.
  • Advanced algorithms and deep scanning capabilities provide thorough security auditing.

rolod0x

rolod0x

54stars
rolod0x preview

Your free private onchain address book

  • Completely free and Open Source!
  • Completely private local-only web3 address book.
SecurityTypeScriptMITGitHub
750stars
Anti-Virus-Evading-Payloads preview

During the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system computers. Here is a simple way to evade anti-virus software when creating backdoors!

ScrapPY

RoseSecurity

223stars
ScrapPY preview

ScrapPY is a Python utility for scraping manuals, documents, and other sensitive PDFs to generate wordlists that can be utilized by offensive security tools to perform brute force, forced browsing, and dictionary attacks against targets. The tool dives deep to discover keywords and phrases leading to potential passwords or hidden directories.

SecurityPythonApache-2.0GitHub

PyInstaCrack

RozhakDev

192stars
PyInstaCrack preview

PyInstaCrack: Ultimate Instagram hacking suite. Python-driven, AI-enhanced, brute-force chaos. Stealth ops, ethical only. Slice through defenses like a cyber god! ☠️

oauth2

ruby-oauth

2,181stars
oauth2 preview

🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)

  • Snake Case & Indifferent Access: response.parsed returns a SnakyHash allowing access via string/symbol and snake_case keys even if the provider returns CamelCase.
  • Auto-Refresh: You can manually check token.expired? and call token.refresh.
2,763stars

Patch-level verification for Bundler

  • Checks for vulnerable versions of gems in Gemfile.lock.
  • Checks for insecure gem sources (http:// and git://).
SecurityRubyGPL-3.0GitHub

rudder-server

rudderlabs

4,516stars
rudder-server preview

Privacy and Security focused Segment-alternative, in Golang and React

  • Warehouse-first: RudderStack treats your data warehouse as a first class citizen among destinations, with advanced features and configurable, near real-time sync.
  • Developer-focused: RudderStack is built API-first. It integrates seamlessly with the tools that the developers already use and love.

rude-java

RudeCrab

1,413stars
rude-java preview

Java Practice Projects(SSM、Spring Boot、Spring Security、MinIO、Vue). 以Java语言为主的各种项目实践,涵盖各个业务、各个功能,并附上高质量文章讲解,其中一些甚至可以单开一个仓库。让你再也不用寻找各种框架demo、项目脚手架。

SecurityJavaApache-2.0GitHub

PoW-Shield

RuiSiang

408stars
PoW-Shield preview

Project dedicated to fight Layer 7 DDoS with proof of work, with an additional WAF and controller. Completed with full set of features and containerized for rapid and lightweight deployment.

  • Web Service Structure
  • Proxy Functionality
SecurityTypeScriptMITGitHub

helix

ruvnet

51stars
helix preview

Helix — a private, local-first, anti-hallucination Personal Health Intelligence platform on the ruvnet stack (Ruflo + RuVector + Cognitum Seed + MetaHarness/Darwin).

188stars
GhostIntel preview

GhostIntel is a Python-based OSINT framework for digital investigation using public data such as username, email, domain, IP address, and phone number.

  • 1 - Zero API Keys - Use immediately — no signup, no payment, no hidden costs
  • 2 - Async & Fast - Parallel scanning, 10x faster than similar tools