domain: security
4787 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| agrinman/sift-ios Sift is an open-source iOS app that reveals real-time network traffic made by every app on your phone, using push notifications to surface … | 32 | 1135 | abandoned |
| NYAN-x-CAT/Lime-RAT LimeRAT is a remote administration tool (RAT) for Windows written in Visual Basic .NET, providing remote desktop, file management, keyloggi… | 10 | 1133 | abandoned |
| googlearchive/caja Caja is a Java-based tool for safely embedding third-party HTML, CSS, and JavaScript in a website using an object-capability security model… | 10 | 1132 | abandoned |
| Lyndir/MasterPassword Master Password is a stateless password manager that derives unique site passwords on demand from a single master secret using a cryptograp… | 32 | 1128 | abandoned |
| vesche/scanless A Python CLI utility and library that scrapes online port scanning websites to perform port scans on a target IP or domain on your behalf. … | 10 | 1121 | abandoned |
| joshhighet/ransomwatch A transparent ransomware claim tracker that monitors ransomware groups' leak sites on the dark web and records their victim claims. It aggr… | 10 | 1116 | abandoned |
| cryptocat/cryptocat Cryptocat is a desktop application providing encrypted, secure chat built on Electron with JavaScript. It packages for Windows, Linux, and … | 32 | 1115 | abandoned |
| sensepost/mana MANA is a toolkit for rogue access point (evilAP) attacks, implementing improved KARMA attacks via a modified hostapd plus MitM configurati… | 23 | 1115 | abandoned |
| BuffaloWill/Serpico Serpico is a self-hosted web application for writing and collaborating on penetration testing reports. Users assemble findings from a share… | 10 | 1115 | abandoned |
| kelseyhightower/kube-cert-manager A Kubernetes controller that automatically manages Let's Encrypt TLS certificates, storing them as Kubernetes secrets via ACME dns-01 chall… | 32 | 1111 | abandoned |
| remoteinterview/compilebox CompileBox is a Docker-based sandbox service that compiles and runs user-submitted code in isolated containers and returns the output via a… | 32 | 1107 | abandoned |
| gnosis/MultiSigWallet Gnosis MultiSigWallet is an Ethereum multisignature wallet consisting of smart contracts and a web dapp interface that requires multiple pa… | 10 | 1099 | abandoned |
| threathunterX/nebula Nebula 1.x is an open-source business risk-control (anti-fraud) platform that captures traffic out-of-band via OpenResty and analyzes it in… | 10 | 1099 | abandoned |
| kolide/fleet Kolide Fleet was an open-source osquery fleet manager written in Go, providing a control server for managing and querying osquery deploymen… | 10 | 1098 | abandoned |
| evilsocket/bleah A deprecated command-line tool for scanning and enumerating Bluetooth Low Energy (BLE) devices. It has been ported into bettercap's BLE mod… | 10 | 1093 | abandoned |
| google/keyczar Keyczar is an easy-to-use open-source cryptographic toolkit originally developed by Google, designed to simplify encryption, signing, and k… | 10 | 1093 | abandoned |
| bytebuff/JSpider JSpider is a collection of JavaScript decryption files for website-encrypted request parameters, shared weekly alongside Python snippets th… | 32 | 1092 | abandoned |
| ZenGo-X/multi-party-ecdsa A Rust library implementing {t,n}-threshold ECDSA digital signatures using multi-party computation protocols, supporting key generation and… | 23 | 1085 | abandoned |
| Teaonly/android-eye An Android app that turns an old phone into a surveillance security camera, streaming H.264 video and G.726 audio over a built-in web serve… | 10 | 1085 | abandoned |
| sdushantha/tmpsms tmpsms is a POSIX sh command-line utility for obtaining a temporary phone number and receiving SMS messages via Upmasked's temporary SMS se… | 23 | 1084 | abandoned |
| arnaucube/coffeeMiner CoffeeMiner is a Python tool that performs a man-in-the-middle attack on a WiFi/LAN network, injecting a JavaScript cryptocurrency miner in… | 32 | 1077 | abandoned |
| ZoneMinder/zmNinja zmNinja is a cross-platform ZoneMinder client app for monitoring CCTV/NVR cameras on mobile and desktop, built with Ionic and AngularJS. It… | 10 | 1077 | abandoned |
| opengs/uashield UA Cyber SHIELD is a volunteer cybersecurity tool built during the Russian invasion of Ukraine that coordinates distributed denial-of-servi… | 10 | 1077 | abandoned |
| 1n7erface/PocList A Java-based collection of proof-of-concept (PoC) tools for verifying and exploiting known vulnerabilities in products like Nacos, WebLogic… | 32 | 1075 | abandoned |
| ekkoo-z/Z-Godzilla_ekp A modified (second-development) fork of the Godzilla webshell management tool, customized to evade network traffic detection devices and an… | 42 | 1073 | abandoned |
| guardianproject/ChatSecureAndroid ChatSecure for Android was a free and open-source secure messaging app built on XMPP/Jabber with OTR encryption, SQLCipher local storage, a… | 10 | 1071 | abandoned |
| loft-sh/kiosk Kiosk is a multi-tenancy extension for Kubernetes that lets cluster admins securely share a single cluster among multiple tenants. It provi… | 10 | 1070 | abandoned |
| cisagov/CHIRP CHIRP is a DFIR (Digital Forensics and Incident Response) tool by CISA that dynamically queries hosts for Indicators of Compromise (IoCs) u… | 10 | 1058 | abandoned |
| EFForg/crocodilehunter Crocodile Hunter is an EFF tool that detects fake 4G/LTE cell towers (IMSI catchers/stingrays) using software-defined radios like LimeSDR, … | 10 | 1057 | abandoned |
| EquiFox/KsDumper KsDumper is a Windows tool that dumps process memory (including protected processes with stripped handles) using a kernel driver, rebuildin… | 23 | 1055 | abandoned |
| kallydev/privacy A personal data breach detection service that let users check whether their email, phone number, or identity information had been exposed i… | 10 | 1054 | abandoned |
| WyAtu/Perun Perun is a Python-based network asset vulnerability scanner and scanning framework designed for penetration testers and red teams, primaril… | 32 | 1051 | abandoned |
| xcicode/MifareOneTool MifareOneTool is a Windows GUI application for working with Mifare Classic NFC cards, including reading and cracking operations. It is writ… | 23 | 1050 | abandoned |
| Netflix-Skunkworks/sleepy-puppy Sleepy Puppy is a cross-site scripting (XSS) payload management framework from Netflix Skunkworks that captures, manages, and tracks XSS pa… | 32 | 1044 | abandoned |
| M4cs/BabySploit BabySploit is a beginner-friendly penetration testing toolkit and framework written in Python, designed to ease newcomers into using more c… | 23 | 1042 | abandoned |
| utkusen/leviathan Leviathan is a Python-based mass audit toolkit that combines masscan, ncrack, and DSSS to discover services, brute-force credentials, detec… | 10 | 1041 | abandoned |
| AndroidVTS/android-vts An on-device Android app that scans a device for known vulnerabilities such as kernel and framework bugs (e.g., Towelroot, Master Keys). It… | 23 | 1034 | abandoned |
| denandz/KeeFarce KeeFarce is a security tool that extracts passwords and other cleartext data from a running KeePass 2.x process by injecting a DLL into its… | 32 | 1030 | abandoned |
| duo-labs/webauthn A Go server library implementing the WebAuthn (FIDO2) specification for adding passwordless authentication to web applications. It handles … | 10 | 1030 | abandoned |
| halfkiss/ZjDroid ZjDroid is an Xposed framework module for dynamic reverse engineering of Android apps. It supports memory dumping of DEX files, BackSmali d… | 32 | 1021 | abandoned |
| ba0gu0/520apkhook A Java-based tool that attaches an Android remote-access APK payload to a legitimate app, producing a trojanized APK where the original app… | 32 | 1015 | abandoned |
| qwqdanchun/DcRat DcRat is an open-source remote administration tool (RAT) written in C# for Windows, providing remote desktop, file management, and remote c… | 10 | 1011 | abandoned |
| timwr/CVE-2016-5195 A proof-of-concept exploit for CVE-2016-5195 (Dirty Cow) targeting Android devices, built with the Android NDK and deployed over ADB. It de… | 32 | 1010 | abandoned |
| rhaidiz/broxy Broxy is an open-source HTTP/HTTPS intercepting proxy written in Go, built on goproxy with a Qt5-based GUI. It offers an interceptor, filte… | 23 | 1008 | abandoned |
| pplulee/appleid_auto A self-hosted PHP application that automatically detects, unlocks, and manages Apple ID accounts using security questions, including disabl… | 10 | 1008 | abandoned |
| google/rowhammer-test A userland test program that checks DRAM modules for bit flips caused by the rowhammer problem, where repeatedly accessing memory rows dist… | 10 | 1003 | abandoned |
| torvalds/linux The official source tree of the Linux kernel, the core of Linux operating systems that manages hardware, system resources, and fundamental … | 77 | 246509 | stable |
| v2rayN v2rayN is a free, open-source GUI proxy client for Windows, Linux, and macOS built in C#. It manages multiple proxy cores including Xray, s… | 100 | 115352 | stable |
| fatedier/frp frp is a fast reverse proxy written in Go that exposes local servers behind NAT or firewalls to the internet. It supports TCP, UDP, HTTP, a… | 94 | 109183 | stable |
| elastic/elasticsearch Elasticsearch is a free and open source, distributed, RESTful search and analytics engine built on Apache Lucene. It stores structured, uns… | 96 | 77887 | stable |
| Pi-hole Pi-hole is a network-wide DNS sinkhole application that blocks advertisements and trackers for every device on a network without client-sid… | 96 | 60738 | stable |
| V2Ray V2Ray (Project V) is a network proxy platform written in Go for building proxies to bypass network restrictions and censorship. It supports… | 67 | 46939 | active |
| MHSanaei/3x-ui 3X-UI is an open-source web control panel for managing Xray-core proxy and VPN servers, supporting many protocols including VLESS, VMess, T… | 98 | 45831 | active |
| Kong Gateway Kong Gateway is a cloud-native, high-performance API gateway that proxies, routes, load-balances, and secures API, LLM, and MCP traffic, ex… | 92 | 44080 | stable |
| Xray-core Xray-core is a network proxy platform written in Go, best known as the successor to v2ray-core and the home of the XTLS/REALITY anti-censor… | 92 | 41380 | active |
| Mattermost Mattermost is an open-core, self-hosted collaboration platform offering team chat channels, voice calling, screen sharing, workflow automat… | 95 | 38978 | stable |
| 1Panel-dev/1Panel 1Panel is an open-source web-based Linux server management panel and lightweight AI management platform, offering a graphical interface for… | 99 | 36794 | active |
| AdguardTeam/AdGuardHome AdGuard Home is a free, open-source network-wide DNS server that blocks ads and trackers for every device on a home network without client-… | 99 | 36661 | stable |
| V2Ray V2Ray (Project V) is a Go-based network proxy platform for building tunnels that bypass network restrictions and protect privacy. It suppor… | 97 | 34543 | active |
| NginxProxyManager/nginx-proxy-manager Nginx Proxy Manager is a Docker-based application that provides a web UI for managing Nginx reverse proxy hosts, redirections, streams, and… | 95 | 34057 | active |
| SerenityOS/serenity SerenityOS is a graphical Unix-like operating system for 64-bit x86, Arm, and RISC-V computers, built from scratch in C++ with a custom ker… | 77 | 33812 | active |
| anoma/anoma Anoma is the reference implementation of the Anoma protocol, a distributed operating system that abstracts existing blockchains into config… | 84 | 33622 | active |
| hiddify/hiddify-app Hiddify is an open-source, ad-free multi-platform proxy/VPN client built on the Sing-box toolchain, supporting protocols like VLESS, VMess,… | 86 | 32531 | active |
| hashicorp/consul HashiCorp Consul is a distributed, highly available service networking solution providing service discovery, health checking, service mesh … | 94 | 30055 | stable |
| ComposioHQ/composio Composio is an SDK platform (TypeScript and Python SDKs plus a CLI) that gives AI agents access to 1000+ pre-built app toolkits with per-us… | 89 | 30035 | active |
| envoyproxy/envoy Envoy is a CNCF-hosted, high-performance C++ edge, middle, and service proxy designed for cloud-native and AI-native applications. It provi… | 95 | 28856 | stable |
| ValdikSS/GoodbyeDPI GoodbyeDPI is a Windows command-line utility that bypasses Deep Packet Inspection (DPI) systems used by ISPs to block websites. It manipula… | 62 | 28612 | active |
| OpenWrt OpenWrt is a Linux-based operating system (firmware distribution) for embedded devices, primarily wireless routers, providing a fully writa… | 98 | 28249 | stable |
| yamadashy/repomix Repomix is a CLI tool (and web service) that packs an entire repository into a single AI-friendly file in XML, Markdown, or plain text form… | 86 | 28182 | active |
| vernesong/OpenClash OpenClash is a LuCI plugin that runs the Mihomo (Clash) proxy client on OpenWrt routers. It supports protocols like Shadowsocks, VMess, Tro… | 99 | 27334 | active |
| chromium/chromium Chromium is the open-source web browser project behind Google Chrome, Microsoft Edge, and many other browsers. This repository is the offic… | 77 | 24699 | active |
| HyNetworks/hysteria Hysteria is a fast, censorship-resistant proxy built on a customized QUIC protocol that masquerades as standard HTTP/3 traffic. It supports… | 99 | 22426 | active |
| elastic/kibana Kibana is the open source web interface for querying, analyzing, visualizing, and managing data stored in Elasticsearch. It provides intera… | 96 | 21278 | active |
| allinurl/goaccess GoAccess is an open-source, real-time web log analyzer and interactive viewer written in C that runs in a terminal (ncurses TUI) or generat… | 77 | 20901 | stable |
| apache/shardingsphere Apache ShardingSphere is an enterprise distributed database ecosystem that turns heterogeneous databases (MySQL, PostgreSQL, etc.) into a d… | 79 | 20791 | stable |
| lionsoul2014/ip2region ip2region is an offline IP-to-region localization library and IP data management framework supporting both IPv4 and IPv6 with city-level re… | 97 | 19500 | stable |
| netchx/netch Netch is a Windows GUI proxy client supporting protocols like Shadowsocks, ShadowsocksR, VMess, VLESS, Trojan, WireGuard, and SOCKS5. It of… | 67 | 17695 | active |
| Shadowsocks Shadowsocks is a family of encrypted SOCKS5 proxy clients and servers for circumventing internet censorship, with implementations in C#, Ru… | 77 | 16180 | active |
| acidanthera/OpenCorePkg OpenCore is a UEFI bootloader for booting macOS (Hackintosh) and other operating systems on PC hardware, with an accompanying UEFI developm… | 82 | 15426 | active |
| stalwartlabs/stalwart Stalwart is an open-source, all-in-one mail and collaboration server written in Rust, supporting JMAP, IMAP4, POP3, SMTP, CalDAV, CardDAV a… | 98 | 14512 | active |
| rathole-org/rathole rathole is a lightweight, high-performance reverse proxy for NAT traversal written in Rust, exposing services behind NAT to the internet vi… | 85 | 14107 | stable |
| FreeRDP/FreeRDP FreeRDP is a free, open-source implementation of Microsoft's Remote Desktop Protocol (RDP), provided as a C library plus client application… | 100 | 13637 | stable |
| EasyTier/EasyTier EasyTier is a decentralized mesh VPN written in Rust that connects devices into one virtual network with peer-to-peer links, NAT traversal,… | 89 | 13481 | active |
| alibaba/tengine Tengine is a high-performance web server and reverse proxy forked from nginx, developed by Taobao/Alibaba since 2011. It is 100% nginx-comp… | 86 | 13346 | active |
| bia-pain-bache/BPB-Worker-Panel A self-hosted GUI panel deployed on Cloudflare Workers/Pages that generates VLESS, Trojan, and Warp proxy configurations with a private DoH… | 88 | 13333 | active |
| ultrafunkamsterdam/undetected-chromedriver A Python library that patches Selenium's ChromeDriver binary so automated Chrome sessions avoid detection by anti-bot systems like Cloudfla… | 45 | 12821 | active |
| ubicloud/ubicloud Ubicloud is an open-source IaaS cloud platform that provides elastic compute (VMs), block storage, networking, load balancing, managed Post… | 76 | 12254 | active |
| Tencent/wcdb WCDB is a cross-platform mobile database framework developed by WeChat, built on SQLite and SQLCipher. It provides ORM and a native query l… | 77 | 11634 | active |
| jhy/jsoup jsoup is a Java library for parsing, manipulating, and cleaning real-world HTML and XML, implementing the WHATWG HTML5 specification to pro… | 95 | 11386 | stable |
| Lakr233/vphone-cli A Swift CLI tool that boots virtual iPhone instances on Apple Silicon Macs using Apple's Virtualization.framework and PCC research VM infra… | 82 | 10368 | active |
| OpenMined/PySyft PySyft is a Python library that lets data scientists run computations on private data that stays on the data owner's server, with results s… | 75 | 10025 | active |
| alireza0/s-ui S-UI is an advanced web panel for managing SagerNet/Sing-Box proxy servers, supporting multiple protocols like VLESS, VMess, Trojan, Hyster… | 93 | 9822 | active |
| GetBindu/Bindu Bindu is an open-source Python framework that provides the identity, communication, and payments layer for AI agents, implementing the A2A … | 82 | 9712 | active |
| sparkle-project/Sparkle Sparkle is a secure and reliable software update framework for macOS applications, serving as the de-facto standard used by thousands of ap… | 94 | 9633 | stable |
| klzgrad/naiveproxy NaïveProxy is a censorship-resistant proxy that uses Chromium's network stack to make proxy traffic indistinguishable from regular Chrome b… | 92 | 9419 | active |
| tonyantony300/dashbeam DashBeam (formerly AltSendme) is an open-source peer-to-peer file transfer application that sends files and folders of any size directly be… | 84 | 9370 | active |
| berty/berty Berty is an open-source, peer-to-peer messaging app with end-to-end encryption that works with or without internet access, using libp2p, IP… | 96 | 9290 | active |
| higress-group/higress Higress is a CNCF Sandbox, cloud-native AI-native API gateway built on Istio and Envoy, extensible with Wasm plugins written in Go, Rust, o… | 99 | 9282 | active |
| ermaozi/get_subscribe A Python project that automatically aggregates and republishes free proxy subscription links (Clash, V2Ray, Trojan, SSR/SR formats) that re… | 77 | 9252 | active |
| hiddify/Hiddify-Manager Hiddify-Manager is a self-hosted, multi-user proxy/VPN management panel that installs on a dedicated Ubuntu server with a one-line script a… | 94 | 9247 | active |