domain: security
4787 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| opsdisk/pagodo pagodo is a Python CLI tool that automates passive Google dork searches by scraping the Google Hacking Database (GHDB) and running those qu… | 49 | 3387 | active |
| FairwindsOps/polaris Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration against 30+ built-in best-pract… | 98 | 3384 | active |
| google/honggfuzz Honggfuzz is a security-oriented, feedback-driven evolutionary fuzzer that uses software and hardware code coverage to discover bugs in bin… | 62 | 3376 | active |
| H4ckForJob/dirmap Dirmap is an advanced web directory and file scanning tool written in Python, designed to be more powerful than DirBuster, Dirsearch, cansi… | 44 | 3374 | stable |
| endoflife-date/endoflife.date A community-maintained website that aggregates end-of-life dates and support lifecycles for hundreds of products, including operating syste… | 77 | 3360 | active |
| RNCryptor/RNCryptor RNCryptor is a Swift (and Objective-C) library wrapping CommonCrypto AES encryption, implementing a cross-language encrypted data format (v… | 28 | 3358 | stable |
| BloodHound Community Edition BloodHound Community Edition is a free, open-source application that uses graph theory to reveal hidden relationships and attack paths in A… | 91 | 3355 | active |
| skelsec/pypykatz pypykatz is a pure Python implementation of parts of Mimikatz, the well-known Windows credential extraction tool. It parses LSASS process m… | 65 | 3352 | active |
| metorial/metorial Metorial is an open-source identity and access control plane for AI agents, providing 1200+ verified MCP integrations with centralized auth… | 64 | 3350 | active |
| curl/trurl trurl is a command line tool for parsing, manipulating, and normalizing URLs, built on libcurl's URL parser. It is designed like 'tr' but f… | 65 | 3348 | active |
| golang/crypto golang/crypto is the official supplementary cryptography library for the Go programming language, providing packages beyond the standard li… | 77 | 3343 | stable |
| django-oauth/django-oauth-toolkit Django OAuth Toolkit is an OAuth 2.0 authorization server and resource server library for Django projects, built on OAuthLib and RFC 6749 c… | 95 | 3333 | active |
| almandin/fuxploider Fuxploider is an open-source penetration testing tool that automates detection and exploitation of file upload form vulnerabilities. It ide… | 32 | 3328 | active |
| Yamato-Security/hayabusa Hayabusa is a fast, Rust-based Windows event log analysis tool that generates forensic timelines and performs threat hunting using Sigma de… | 94 | 3324 | active |
| kaifcodec/user-scanner A 2-in-1 Python CLI OSINT suite that performs email and username intelligence across 440+ scan vectors (170+ email sites, 270+ username pla… | 83 | 3319 | active |
| workos/authkit AuthKit is WorkOS's authentication UI and User Management platform, offering a fully themeable hosted login box or a headless API for build… | 70 | 3314 | active |
| randombit/botan Botan is a C++ cryptography library offering TLS 1.2/1.3, X.509 PKI, modern AEAD ciphers, post-quantum algorithms, and hardware token suppo… | 77 | 3307 | stable |
| dbisu/pico-ducky A project that turns a Raspberry Pi Pico into a USB Rubber Ducky-style HID injection device running CircuitPython. It executes Ducky Script… | 71 | 3307 | active |
| PatchMon/PatchMon PatchMon is a self-hostable, AGPL-licensed Linux patch management and server monitoring platform with a lightweight outbound-only agent and… | 84 | 3296 | active |
| chipsec/chipsec CHIPSEC is a Python framework for analyzing the security of PC platforms, including hardware, system firmware (BIOS/UEFI), and platform com… | 98 | 3295 | active |
| goodwithtech/dockle Dockle is a container image linter written in Go that checks Docker images against security best practices and CIS Benchmarks. It runs as a… | 66 | 3292 | active |
| express-rate-limit/express-rate-limit A rate-limiting middleware library for the Express web server, written in TypeScript. It limits repeated requests per IP or key over config… | 98 | 3289 | stable |
| s0md3v/Smap Smap is a passive port scanner powered by Shodan.io's free API that serves as a drop-in replacement for Nmap, accepting the same command-li… | 90 | 3287 | active |
| jsha/minica minica is a small Go CLI tool that acts as a minimal certificate authority for generating root and leaf TLS certificates with keys. It is d… | 41 | 3284 | active |
| LSPosed/CorePatch Core Patch N is an Xposed module that modifies Android's package manager service to bypass installation restrictions. It disables APK signa… | 86 | 3282 | active |
| vouch/vouch-proxy Vouch Proxy is an SSO and OAuth/OIDC authentication proxy for Nginx that uses the auth_request module to protect upstream sites. It support… | 73 | 3280 | active |
| dafthack/MailSniper MailSniper is a PowerShell-based penetration testing tool for searching email in Microsoft Exchange environments for sensitive terms like p… | 77 | 3276 | active |
| Tunnelblick/Tunnelblick Tunnelblick is a free, open-source graphical user interface for OpenVPN on macOS, managing both client and server connections. It is a nati… | 93 | 3274 | active |
| techgaun/github-dorks A Python CLI tool that automates GitHub code searches using a curated list of dorks to find leaked secrets like credentials, private keys, … | 43 | 3271 | active |
| basil00/WinDivert WinDivert is a user-mode packet interception library for Windows that allows applications to capture, modify, drop, and re-inject network p… | 23 | 3266 | stable |
| Legrandin/pycryptodome PyCryptodome is a self-contained Python package of low-level cryptographic primitives, forked from PyCrypto with an almost drop-in compatib… | 76 | 3261 | active |
| checkedc/checkedc Checked C is an extension to the C programming language that adds bounds checking and improved type safety through opt-in annotations, impl… | 23 | 3255 | active |
| tink-crypto/tink Tink is a multi-language, cross-platform open source cryptographic library from Google that provides secure, easy-to-use APIs for encryptio… | 10 | 13537 | maintenance |
| blokadaorg/blokada Blokada is an open-source suite of mobile privacy apps for Android and iOS, including an ad blocker, VPN, and parental control app. It offe… | 67 | 3249 | active |
| homenc/HElib HElib is an open-source C++ library implementing homomorphic encryption, supporting the BGV scheme with bootstrapping and the CKKS approxim… | 23 | 3249 | stable |
| rtcatc/Packer-Fuzzer Packer Fuzzer is a Python-based security scanner that targets websites built with JavaScript module bundlers like Webpack. It automatically… | 23 | 3249 | active |
| assetnote/kiterunner Kiterunner is a fast content discovery tool written in Go that bruteforces files, folders, and API routes on web servers. It uses a dataset… | 64 | 3247 | stable |
| SteamAutoCracks/Steam-auto-crack A C# tool that automatically cracks Steam games by unpacking SteamStub-protected executables and applying the Goldberg Steam emulator. It a… | 99 | 3243 | active |
| openid/AppAuth-Android AppAuth for Android is a client SDK for communicating with OAuth 2.0 and OpenID Connect providers from Android apps. It follows RFC 8252 be… | 65 | 3238 | active |
| matter-labs/zksync-era ZKsync Era is a ZK rollup layer 2 protocol for scaling Ethereum using zero-knowledge proofs, implemented primarily in Rust. It is EVM-compa… | 92 | 3232 | active |
| the-tcpdump-group/tcpdump tcpdump is a powerful command-line packet analyzer that captures and dissects network traffic using libpcap, with BPF-based filtering and s… | 77 | 3232 | active |
| AdguardTeam/dnsproxy A DNS proxy server written in Go that supports all modern encrypted DNS protocols including DNS-over-TLS, DNS-over-HTTPS, DNSCrypt, and DNS… | 99 | 3229 | active |
| github/secure_headers A Ruby gem that manages the application of HTTP security response headers such as Content Security Policy, HSTS, and X-Frame-Options with s… | 84 | 3228 | stable |
| tellerops/teller Teller is an open-source, developer-first CLI secret manager written in Rust that fetches secrets from multiple providers (HashiCorp Vault,… | 52 | 3227 | active |
| JPCERTCC/LogonTracer LogonTracer is a self-hosted DFIR tool that visualizes Windows Active Directory logon-related event logs as a graph of hosts and accounts t… | 80 | 3221 | active |
| deltazefiro/Amarok-Hider Amarok is a lightweight Android privacy app that hides private files and apps with a single click by obfuscating file signatures or permiss… | 78 | 3213 | active |
| D3Ext/WEF WEF is a Wi-Fi Exploitation Framework written in Bash that automates a wide range of wireless attacks against WPA/WPA2/WPA3, WPS, and WEP n… | 52 | 3209 | active |
| AChep/keyguard-app Keyguard is a multiplatform password manager client for the Bitwarden platform and KeePass (KDBX) files, built with Kotlin and Jetpack Comp… | 91 | 3203 | active |
| guilhermerodz/input-otp input-otp is an accessible, unstyled React component for one-time passcode input that renders a single invisible real text input with custo… | 81 | 3203 | stable |
| GuidoBartoli/sherloq Sherloq is an open-source digital image forensic toolset providing an integrated GUI environment for analyzing images for tampering and aut… | 74 | 3193 | active |
| rustic-rs/rustic rustic is a fast, encrypted, deduplicated backup tool written in Rust that reads and writes the restic repository format, making it a drop-… | 94 | 3192 | active |
| jaykali/maskphish MaskPhish is a simple Bash script that masks phishing URLs under normal-looking URLs (e.g., google.com or facebook.com) as a proof of conce… | 42 | 3191 | active |
| RolifyCommunity/rolify rolify is a Ruby gem providing simple role management for Rails applications, with support for scoping roles to specific resource objects. … | 52 | 3177 | stable |
| LaurieWired/Malimite Malimite is a Java-based decompiler for iOS and macOS binaries, built on Ghidra, that analyzes IPA files and Application Bundles with direc… | 38 | 3174 | active |
| obfuscar/obfuscar Obfuscar is an open source MIT-licensed obfuscation tool for .NET assemblies that renames metadata to minimal names, making decompiled code… | 93 | 3172 | active |
| crytic/echidna Echidna is a Haskell-based fuzzer for Ethereum smart contracts that performs property-based testing by generating sequences of contract cal… | 89 | 3170 | active |
| pingc0y/URLFinder URLFinder is a fast, easy-to-use Go CLI tool that extracts JS files, URLs, and sensitive information from web pages, including hidden unaut… | 80 | 3170 | active |
| s0md3v/Photon Photon is a fast Python-based web crawler designed for OSINT (open-source intelligence) tasks. It extracts URLs, emails, social media accou… | 66 | 13146 | maintenance |
| pglombardo/PasswordPusher Password Pusher is an open-source Ruby web application for securely sharing passwords, text, files, and URLs via encrypted, self-deleting l… | 95 | 3169 | active |
| pxb1988/dex2jar dex2jar is a set of Java-based command-line tools for working with Android .dex and Java .class files. It converts Dalvik executables (e.g.… | 23 | 13135 | maintenance |
| sa7mon/S3Scanner A multi-threaded CLI tool written in Go that scans for misconfigured (open) S3 buckets across AWS and other S3-compatible providers like GC… | 77 | 3165 | active |
| the-tcpdump-group/libpcap libpcap is a system-independent C/C++ library providing a portable API for user-level network packet capture, with BPF-based filtering and … | 76 | 3163 | stable |
| NASA-SW-VnV/ikos IKOS is a static analyzer for C and C++ programs based on the theory of Abstract Interpretation, built on LLVM. It provides reusable abstra… | 64 | 3160 | active |
| devanshbatham/ParamSpider ParamSpider is a Python CLI tool that mines URLs for a domain or list of domains from web archives (Wayback Machine), filtering out uninter… | 55 | 3160 | active |
| QiuChenly/CoreInject CoreInject (successor to InjectLib) is a macOS application injection and binary-patching tool by QiuChenly, distributed alongside a communi… | 84 | 3157 | active |
| BinDiff BinDiff is an open-source comparison tool for binary files that finds differences and similarities in disassembled code using graph-theoret… | 62 | 3155 | active |
| gorilla/sessions gorilla/sessions is a Go library providing cookie and filesystem session storage with infrastructure for custom session backends. It offers… | 23 | 3151 | stable |
| DynamoRIO/dynamorio DynamoRIO is a runtime code manipulation system that supports arbitrary code transformations on executing programs, with a powerful instruc… | 95 | 3146 | active |
| Devolutions/IronRDP IronRDP is a modular Rust implementation of the Microsoft Remote Desktop Protocol (RDP), providing PDU codecs, connection/session state mac… | 97 | 3137 | active |
| The Sleuth Kit Autopsy is a Java-based digital forensics platform providing a graphical interface to The Sleuth Kit and other open-source forensic tools f… | 81 | 3137 | active |
| seladb/PcapPlusPlus PcapPlusPlus is a multiplatform C++ library for capturing, parsing, and crafting network packets. It wraps popular packet processing engine… | 86 | 3131 | stable |
| qltysh/qlty Qlty CLI is a multi-language code quality tool written in Rust that unifies linting, auto-formatting, maintainability analysis, and securit… | 95 | 3130 | active |
| Mic92/sops-nix sops-nix is a NixOS module that provides atomic, declarative secret provisioning based on Mozilla's sops. It decrypts sops-encrypted files … | 67 | 3130 | active |
| PartialVolume/shredos.x86_64 ShredOS is a small bootable Linux distribution for securely erasing disks using nwipe on x86 PCs, servers, and Intel-based Macs. It boots d… | 90 | 3128 | active |
| pallets/itsdangerous ItsDangerous is a Python library for cryptographically signing data so it can be safely passed to untrusted environments (like cookies or U… | 34 | 3127 | stable |
| 21y4d/nmapAutomator nmapAutomator is a POSIX-compatible shell script that automates nmap-based network reconnaissance and enumeration, running scans in the bac… | 32 | 3109 | active |
| hardentools/hardentools Hardentools is a Windows utility that reduces the attack surface by disabling risky features in Windows 10/11, Microsoft Office, LibreOffic… | 40 | 3105 | active |
| zegl/kube-score kube-score is a static code analysis tool for Kubernetes object definitions that scores manifests and Helm charts against reliability and s… | 60 | 3102 | active |
| FStarLang/FStar F* is a general-purpose proof-oriented programming language combining dependent types with SMT-based proof automation and interactive theor… | 99 | 3100 | active |
| biggerstar/wedecode Wedecode is a fully automated tool that decompiles WeChat mini-program and mini-game wxapkg packages back into readable source code (JS, WX… | 60 | 3091 | active |
| ulisesbocchio/jasypt-spring-boot A Spring Boot integration of the Jasypt library that enables transparent encryption and decryption of property sources in Spring Boot appli… | 68 | 3088 | active |
| jhaals/yopass Yopass is a self-hostable web application for securely sharing secrets, passwords, and files via one-time, auto-expiring links. Secrets are… | 99 | 3087 | active |
| cel-expr/cel-go cel-go is a Go implementation of the Common Expression Language (CEL), a fast, portable, non-Turing complete expression language with gradu… | 99 | 3085 | stable |
| wgtunnel/android WG Tunnel is a free and open-source Android client for WireGuard and AmneziaWG VPN tunnels, built in Kotlin with Jetpack Compose. It adds a… | 96 | 3085 | active |
| inspec/inspec Chef InSpec is an open-source testing framework for infrastructure that expresses compliance, security, and policy requirements as human- a… | 92 | 3085 | active |
| OpenSC/OpenSC OpenSC is a set of open-source libraries and command-line tools for working with smart cards, focused on cards that perform cryptographic o… | 80 | 3078 | active |
| Virtual-Browser/VirtualBrowser VirtualBrowser is a free, open-source anti-fingerprint browser built on Chromium that lets users create and manage multiple isolated browse… | 93 | 3077 | active |
| cloudflare/security-audit-skill A coding-agent skill from Cloudflare that turns an LLM coding agent into a security auditor via a six-phase pipeline (recon, hunting, valid… | 54 | 3077 | active |
| outroll/vesta Vesta is an open-source (GPLv3) hosting control panel for Linux servers that manages websites, DNS, mail, databases, cron jobs, backups, an… | 66 | 3076 | active |
| m0bilesecurity/RMS-Runtime-Mobile-Security Runtime Mobile Security (RMS) is a NodeJS-powered web interface built on FRIDA for manipulating Android and iOS apps at runtime. It lets us… | 83 | 3075 | active |
| ContainerSSH/ContainerSSH ContainerSSH is an SSH server written in Go that launches on-demand containers in Docker or Kubernetes for each connecting user. It support… | 80 | 3073 | active |
| ThePorgs/Exegol Exegol is a container-based, community-driven hacking environment for offensive security professionals, managed through a Python CLI wrappe… | 97 | 3072 | active |
| squid-cache/squid Squid is a mature, full-featured caching web proxy supporting HTTP, HTTPS, and FTP, with extensive access controls, content adaptation via … | 95 | 3071 | stable |
| korcankaraokcu/PINCE PINCE is a GDB front-end and reverse engineering tool for Linux, focused on game hacking but usable for general reverse engineering. It pro… | 98 | 3069 | active |
| projectdiscovery/proxify Proxify is a portable MITM proxy written in Go for capturing, filtering, manipulating, and replaying HTTP/HTTPS and non-HTTP traffic. It su… | 68 | 3064 | active |
| Stacks The reference Rust implementation of the Stacks blockchain, a layer-2 network secured by Bitcoin via Proof of Transfer (PoX) mining. It run… | 94 | 3062 | active |
| darkoperator/dnsrecon DNSRecon is a Python-based DNS enumeration tool for security assessments and network troubleshooting. It supports zone transfer checks, gen… | 91 | 3061 | active |
| aliasvault/aliasvault AliasVault is a privacy-first, end-to-end encrypted password manager with a built-in email alias server, letting users create unique identi… | 86 | 3051 | active |
| jeremykenedy/laravel-auth A complete Laravel 12 starter application with email registration verification, social authentication via Socialite, user roles and permiss… | 78 | 3045 | active |
| open-quantum-safe/liboqs liboqs is an open source C library providing implementations of quantum-resistant (post-quantum) key encapsulation mechanisms and digital s… | 88 | 3044 | active |