function: security
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| ECC ECC is an open-source 'agent harness operating system' that provides 261 skills, 64 agents, and 84 commands to optimize AI coding agents li… | 81 | 243524 | active |
| Microsoft Activation Scripts (MAS) Microsoft Activation Scripts (MAS) is an open-source activator for Windows and Office that supports HWID, Ohook, TSforge, and Online KMS ac… | 88 | 188376 | active |
| v2rayN v2rayN is a free, open-source GUI proxy client for Windows, Linux, and macOS built in C#. It manages multiple proxy cores including Xray, s… | 99 | 114739 | stable |
| ventoy/Ventoy Ventoy is an open-source tool for creating bootable USB drives that can hold many ISO/WIM/IMG/VHD(x)/EFI image files at once. Users simply … | 96 | 78953 | stable |
| caddyserver/caddy Caddy is a fast, extensible, multi-platform web server written in Go that serves HTTP/1, HTTP/2, and HTTP/3 with automatic HTTPS by default… | 91 | 75231 | stable |
| NationalSecurityAgency/ghidra Ghidra is a software reverse engineering framework built by the NSA that includes a suite of tools for disassembly, decompilation, graphing… | 95 | 72873 | stable |
| gorhill/uBlock uBlock Origin is an efficient, wide-spectrum content blocker browser extension for Chromium-based browsers and Firefox. It blocks ads, trac… | 95 | 67303 | active |
| dani-garcia/vaultwarden Vaultwarden is an unofficial, lightweight Rust implementation of the Bitwarden server API that works with official Bitwarden clients. It is… | 99 | 66314 | stable |
| FiloSottile/mkcert mkcert is a zero-config Go CLI tool that creates a local certificate authority and generates locally-trusted TLS certificates for developme… | 23 | 59501 | stable |
| usestrix/strix Strix is an open-source AI penetration testing tool that deploys autonomous agents to find, validate, and fix application vulnerabilities. … | 84 | 58564 | active |
| Raphire/Win11Debloat Win11Debloat is a lightweight PowerShell script that removes pre-installed bloatware apps, disables telemetry, and applies various registry… | 99 | 56302 | active |
| sickcodes/Docker-OSX Docker-OSX is a Docker-based tool that runs macOS virtual machines with near-native performance using KVM and QEMU, built on top of OSX-KVM… | 55 | 52887 | active |
| x64dbg/x64dbg x64dbg is an open-source user-mode binary debugger for Windows supporting both 32-bit and 64-bit executables. It is optimized for reverse e… | 90 | 49306 | active |
| acmesh-official/acme.sh acme.sh is a pure POSIX shell script ACME protocol client that automates issuing and renewing SSL/TLS certificates from Let's Encrypt, Zero… | 88 | 47549 | stable |
| mitmproxy/mitmproxy mitmproxy is an interactive, SSL/TLS-capable intercepting proxy for HTTP/1, HTTP/2, HTTP/3, and WebSockets, offered as a console tool (mitm… | 89 | 44820 | stable |
| Zen Browser Zen Browser is a free, open-source, Firefox-based desktop web browser focused on privacy and productivity. It adds features like Workspaces… | 87 | 44104 | active |
| juanfont/headscale Headscale is an open-source, self-hosted implementation of the Tailscale control server written in Go. It coordinates WireGuard-based mesh … | 98 | 43205 | active |
| zbezj/HEU_KMS_Activator HEU KMS Activator is a Windows utility for activating Microsoft Windows and Office products via KMS-based license bypass. It is a closed-so… | 93 | 43193 | active |
| schollz/croc croc is a Go CLI tool that lets any two computers securely transfer files and folders peer-to-peer with end-to-end encryption via PAKE, fal… | 99 | 40107 | stable |
| Metasploit Framework Metasploit Framework is the world's most widely used open-source penetration testing framework, providing a large collection of exploit, pa… | 77 | 38886 | active |
| huiyadanli/RevokeMsgPatcher A Windows GUI tool that patches PC WeChat, QQ, and TIM binaries to prevent message recall (anti-revoke), and optionally enables WeChat mult… | 70 | 38583 | active |
| sqlmapproject/sqlmap sqlmap is an open-source penetration testing tool that automates the detection and exploitation of SQL injection flaws and the takeover of … | 75 | 38275 | stable |
| Trivy Trivy is an all-in-one open-source security scanner that finds vulnerabilities (CVEs), IaC misconfigurations, secrets, and software license… | 98 | 37636 | stable |
| pbatard/rufus Rufus is a free, portable Windows utility for formatting USB drives and creating bootable media from ISO or disk images. It supports BIOS a… | 92 | 37436 | stable |
| Keycloak Keycloak is an open-source identity and access management service providing single sign-on, user federation, and fine-grained authorization… | 99 | 36431 | stable |
| AdguardTeam/AdGuardHome AdGuard Home is a free, open-source network-wide DNS server that blocks ads and trackers for every device on a home network without client-… | 99 | 36374 | stable |
| firecracker-microvm/firecracker Firecracker is an open-source virtual machine monitor (VMM) that uses Linux KVM to create and manage lightweight microVMs for secure multi-… | 92 | 36300 | stable |
| Tailscale Tailscale is a Zero Trust mesh VPN built on WireGuard that connects devices, teams, and infrastructure with identity-based access control. … | 99 | 35599 | stable |
| NginxProxyManager/nginx-proxy-manager Nginx Proxy Manager is a Docker-based application that provides a web UI for managing Nginx reverse proxy hosts, redirections, streams, and… | 95 | 33997 | active |
| SerenityOS/serenity SerenityOS is a graphical Unix-like operating system for 64-bit x86, Arm, and RISC-V computers, built from scratch in C++ with a custom ker… | 77 | 33784 | active |
| certbot/certbot Certbot is EFF's tool for obtaining TLS certificates from Let's Encrypt and optionally auto-configuring HTTPS on your server. It also works… | 97 | 33216 | active |
| Flowseal/zapret-discord-youtube A Windows batchfile-based utility bundling bol-van's zapret and WinDivert to bypass DPI-based blocking and throttling of Discord and YouTub… | 89 | 32562 | active |
| jumpserver/jumpserver JumpServer is an open-source Privileged Access Management (PAM) platform and bastion host that provides secure, audited access to SSH, RDP,… | 99 | 31455 | stable |
| mukul975/Anthropic-Cybersecurity-Skills A large open-source library of structured cybersecurity skills (Markdown files with YAML frontmatter) for AI coding agents, mapped to frame… | 78 | 31259 | active |
| projectdiscovery/nuclei Nuclei is a fast, open-source vulnerability scanner built on a simple YAML-based template DSL, maintained by ProjectDiscovery. It uses a la… | 98 | 30855 | active |
| openssl/openssl OpenSSL is a full-featured open-source toolkit implementing TLS, DTLS, and QUIC protocols on top of a general-purpose cryptographic library… | 95 | 30694 | stable |
| trailofbits/algo Algo VPN is a set of Ansible scripts that automates deploying a personal WireGuard and IPsec (IKEv2) VPN server on common cloud providers. … | 77 | 30365 | active |
| hashicorp/consul HashiCorp Consul is a distributed, highly available service networking solution providing service discovery, health checking, service mesh … | 94 | 30043 | stable |
| zhaoxuya520/reverse-skill A cybersecurity skill router pack that directs AI coding agents (Claude Code, Cursor, Cline, Kiro) to the right reverse-engineering, penetr… | 69 | 29591 | active |
| Shizuku Shizuku lets normal Android apps call system APIs with elevated ADB or root privileges by running a server process via app_process and prox… | 35 | 29367 | active |
| Signal Private Messenger Signal is a free, open-source private messenger offering end-to-end encrypted text, voice, and video communication, built on the Signal Pro… | 95 | 29262 | stable |
| Harbor Harbor is an open source cloud native container registry that stores, signs, and scans container images and other OCI artifacts. It extends… | 96 | 29236 | stable |
| ReVanced ReVanced Manager is an Android application for applying patches to other apps, continuing the legacy of Vanced. It lets users customize the… | 91 | 29232 | active |
| authelia/authelia Authelia is an open-source authentication and authorization server and portal providing single sign-on (SSO) and multi-factor authenticatio… | 95 | 28712 | active |
| netbirdio/netbird NetBird is an open-source zero-trust networking platform that builds WireGuard-based peer-to-peer overlay networks with centralized access … | 95 | 28676 | active |
| ValdikSS/GoodbyeDPI GoodbyeDPI is a Windows command-line utility that bypasses Deep Packet Inspection (DPI) systems used by ISPs to block websites. It manipula… | 62 | 28587 | active |
| keepassxreboot/keepassxc KeePassXC is a cross-platform, open-source password manager that stores passwords and other sensitive data in an offline, AES-256/Twofish-e… | 79 | 28549 | stable |
| hwdsl2/setup-ipsec-vpn A set of automated shell scripts that install and configure a self-hosted IPsec VPN server (IPsec/L2TP, Cisco IPsec, and IKEv2) on Linux us… | 77 | 28390 | active |
| deskflow/deskflow Deskflow is a free, open-source application that lets you share one keyboard and mouse across multiple nearby computers, acting like a soft… | 85 | 28356 | active |
| fingerprintjs/fingerprintjs FingerprintJS is an open-source, client-side browser fingerprinting library that queries browser attributes and computes a hashed visitor i… | 86 | 28354 | active |
| digitalocean/nginxconfig.io A web-based NGINX configuration generator that produces optimized, secure nginx.conf files from user-selected options. It supports HTTPS, H… | 32 | 28270 | stable |
| OpenWrt OpenWrt is a Linux-based operating system (firmware distribution) for embedded devices, primarily wireless routers, providing a fully writa… | 98 | 28113 | stable |
| trufflesecurity/trufflehog TruffleHog is an open-source secrets scanning tool that discovers, classifies, validates, and analyzes leaked credentials across Git reposi… | 95 | 27599 | active |
| ungoogled-software/ungoogled-chromium A set of patches, scripts, and configuration that builds Google Chromium without dependency on Google web services or prebuilt binaries. It… | 94 | 27528 | active |
| vernesong/OpenClash OpenClash is a LuCI plugin that runs the Mihomo (Clash) proxy client on OpenWrt routers. It supports protocols like Shadowsocks, VMess, Tro… | 98 | 27258 | active |
| OpenZeppelin Contracts OpenZeppelin Contracts is a library of secure, community-vetted Solidity smart contracts for Ethereum and other EVM blockchains. It provide… | 89 | 27234 | stable |
| hashcat Hashcat is the world's fastest and most advanced password recovery utility, supporting over 300 highly-optimized hashing algorithms across … | 80 | 26631 | active |
| robertdavidgraham/masscan Masscan is an Internet-scale TCP port scanner written in C that transmits 10 million SYN packets per second, capable of scanning the entire… | 58 | 25955 | active |
| goauthentik/authentik authentik is an open-source Identity Provider (IdP) and Single Sign-On (SSO) platform supporting SAML, OAuth2/OIDC, LDAP, SCIM, RADIUS, and… | 95 | 25178 | active |
| cilium/cilium Cilium is an open-source networking, security, and observability solution for Kubernetes and container workloads built on an eBPF-based dat… | 95 | 25014 | stable |
| zama-ai/fhevm FHEVM is a full-stack framework from Zama that enables confidential smart contracts on EVM-compatible blockchains using Fully Homomorphic E… | 86 | 24825 | active |
| chromium/chromium Chromium is the open-source web browser project behind Google Chrome, Microsoft Edge, and many other browsers. This repository is the offic… | 77 | 24628 | active |
| LSPosed/LSPosed LSPosed is an ART hooking framework implemented as a Riru/Zygisk Magisk module that provides Xposed-compatible APIs for Android 8.1-14. It … | 67 | 24507 | active |
| docmirror/dev-sidecar Dev-sidecar is an Electron desktop proxy tool that accelerates access to GitHub, Stack Overflow, and npm for developers in China by interce… | 96 | 23831 | active |
| validatorjs/validator.js A JavaScript library of string validators and sanitizers for Node.js and browsers. It provides dozens of checks like isEmail, isURL, and is… | 86 | 23737 | stable |
| osquery/osquery osquery is a SQL-powered operating system instrumentation, monitoring, and analytics framework that exposes OS data as a high-performance r… | 92 | 23524 | active |
| slimtoolkit/slim SlimToolkit is a CLI tool that inspects, optimizes, and debugs container images, minifying them by up to 30x without changing the applicati… | 66 | 23408 | active |
| FiloSottile/age age is a simple, modern, and secure file encryption tool, format, and Go library with small explicit keys, no config options, and UNIX-styl… | 64 | 23335 | stable |
| getsops/sops SOPS is a CLI tool for encrypting and decrypting configuration files (YAML, JSON, ENV, INI, and binary) while keeping keys and structure vi… | 97 | 22932 | stable |
| Magic Wormhole Magic Wormhole is a Python library and command-line tool for securely transferring arbitrary-sized files, directories, or short text betwee… | 77 | 22880 | stable |
| chaitin/SafeLine SafeLine is a self-hosted web application firewall (WAF) that acts as an Nginx-based reverse proxy to protect web apps from attacks like SQ… | 96 | 22445 | active |
| NVIDIA/NemoClaw NVIDIA NemoClaw is an open-source reference stack for running AI coding agents such as OpenClaw, Hermes, and LangChain Deep Agents Code sec… | 59 | 22287 | active |
| PHPMailer/PHPMailer PHPMailer is a full-featured PHP library for creating and sending email, with integrated SMTP support, authentication, attachments, HTML/mu… | 89 | 22280 | stable |
| SpotX SpotX is a PowerShell-based patcher that modifies the official Spotify desktop client on Windows to block ads, hide podcasts/audiobooks, di… | 67 | 22161 | active |
| DarkFlippers/unleashed-firmware Unleashed Firmware is an unofficial custom firmware (CFW) for the Flipper Zero multitool device, written in C. It extends the stock firmwar… | 95 | 22122 | active |
| opa334/TrollStore TrollStore is a permanently signed jailed iOS app that exploits an AMFI/CoreTrust bug to install any IPA with arbitrary entitlements and ro… | 70 | 22070 | active |
| vxcontrol/pentagi PentAGI is a self-hosted, fully autonomous multi-agent AI system for performing complex penetration testing tasks, built in Go with a React… | 78 | 22033 | active |
| gentilkiwi/mimikatz mimikatz is a well-known Windows security tool written in C that extracts plaintext passwords, hashes, PINs, and Kerberos tickets from memo… | 57 | 21799 | active |
| Frida Frida is a dynamic instrumentation toolkit that lets developers, reverse-engineers, and security researchers inject JavaScript or native li… | 94 | 21752 | active |
| TecharoHQ/anubis Anubis is a Go-based web proxy middleware that weighs the 'soul' of incoming HTTP requests using proof-of-work challenges to block AI crawl… | 86 | 21742 | active |
| mack-a/v2ray-agent An all-in-one shell script that installs and manages proxy servers (Xray-core and sing-box) on a VPS, supporting protocols like VLESS, VMes… | 93 | 21741 | active |
| MobSF/Mobile-Security-Framework-MobSF MobSF is an automated all-in-one mobile application security testing framework for Android, iOS, and Windows Mobile apps. It performs stati… | 94 | 21650 | active |
| smicallef/spiderfoot SpiderFoot is an open-source OSINT automation tool that integrates with over 200 data sources to gather and analyze intelligence about targ… | 57 | 21441 | active |
| Atlas-OS/Atlas AtlasOS is an open-source modification to Windows that applies privacy, usability, and performance optimizations via an AME Wizard playbook… | 71 | 21375 | active |
| gravitational/teleport Teleport is an identity-aware access proxy and certificate authority that provides unified, credential-free access to SSH servers, Kubernet… | 93 | 20852 | stable |
| apache/shardingsphere Apache ShardingSphere is an enterprise distributed database ecosystem that turns heterogeneous databases (MySQL, PostgreSQL, etc.) into a d… | 79 | 20788 | stable |
| Nyr/openvpn-install A Bash script that installs and configures an OpenVPN server on Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, and Fedora in about a minut… | 73 | 20616 | active |
| peass-ng/PEASS-ng PEASS-ng is a suite of privilege escalation enumeration scripts (LinPEAS for Linux/Unix/macOS and WinPEAS for Windows) that scan local syst… | 95 | 20381 | active |
| apache/casbin Apache Casbin is an open-source authorization library that enforces access control using models such as ACL, RBAC, ABAC, ReBAC, and MAC, de… | 98 | 20349 | stable |
| bee-san/RustScan RustScan is a fast, modern port scanner written in Rust that can scan all 65k ports in seconds. It includes a scripting engine (Python, Lua… | 67 | 20331 | active |
| Helium Browser Helium is a privacy-first, Chromium-based web browser that blocks ads, trackers, cookie banners, and fingerprinting by default with no data… | 83 | 19892 | active |
| bettercap/bettercap bettercap is a Go-based, all-in-one framework for network reconnaissance and man-in-the-middle attacks across WiFi, Bluetooth Low Energy, w… | 88 | 19865 | active |
| 0x192/universal-android-debloater A cross-platform desktop GUI application written in Rust that uses ADB to remove bloatware from non-rooted Android devices. It ships curate… | 23 | 19820 | active |
| Atmosphere-NX/Atmosphere Atmosphère is a customized firmware (CFW) for the Nintendo Switch, composed of components that replace and patch the console's bootloader, … | 91 | 19473 | active |
| TGSAN/CMWTAT_Digital_Edition A Windows 10/11 digital license activation toolkit written in C#. It activates Windows using digital rights licenses via a GUI application. | 85 | 19348 | active |
| simplex-chat/simplex-chat SimpleX Chat is a private messaging platform and set of mobile/desktop apps that operate without any user identifiers, delivering end-to-en… | 99 | 19316 | active |
| sandboxie-plus/Sandboxie Sandboxie Plus and Classic are open-source sandbox-based isolation applications for Windows that run programs in isolated environments with… | 99 | 19260 | active |
| gVisor gVisor is an application kernel written in Go that implements a Linux-compatible syscall interface in userspace, providing strong isolation… | 88 | 19163 | stable |
| cheat-engine/cheat-engine Cheat Engine is a desktop development environment for modding games and applications, centered on a memory scanner that finds and edits pro… | 30 | 19055 | active |
| docker-mailserver/docker-mailserver A production-ready, containerized fullstack mail server bundling Postfix (SMTP), Dovecot (IMAP/POP3), Rspamd, SpamAssassin, ClamAV, Fail2ba… | 79 | 18803 | active |
page 1 / 50 next →