Open-source security software
4909 open-source libraries, tools and applications tagged security, ranked by how closely security is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| Mic92/sops-nix sops-nix is a NixOS module that provides atomic, declarative secret provisioning based on Mozilla's sops. It decrypts sops-encrypted files … | 68 | 3232 | active |
| PartialVolume/shredos.x86_64 ShredOS is a small bootable Linux distribution for securely erasing disks using nwipe on x86 PCs, servers, and Intel-based Macs. It boots d… | 95 | 3231 | active |
| jaykali/maskphish MaskPhish is a simple Bash script that masks phishing URLs under normal-looking URLs (e.g., google.com or facebook.com) as a proof of conce… | 38 | 3230 | active |
| google-agentic-commerce/AP2 Agent Payments Protocol (AP2) is an open protocol and Python SDK for secure, interoperable payments initiated by AI agents, addressing auth… | 57 | 3229 | active |
| github/secure_headers A Ruby gem that manages the application of HTTP security response headers such as Content Security Policy, HSTS, and X-Frame-Options with s… | 81 | 3227 | stable |
| D3Ext/WEF WEF is a Wi-Fi Exploitation Framework written in Bash that automates a wide range of wireless attacks against WPA/WPA2/WPA3, WPS, and WEP n… | 48 | 3225 | active |
| LaurieWired/Malimite Malimite is a Java-based decompiler for iOS and macOS binaries, built on Ghidra, that analyzes IPA files and Application Bundles with direc… | 34 | 3222 | active |
| HiddenRamblings/TagMo TagMo is an Android application for managing NTAG215, Power Tag, N2 Elite, and Bluetooth NFC tags used with Nintendo amiibo figures on 3DS,… | 83 | 3218 | active |
| krille-chan/fluffychat FluffyChat is an open-source, nonprofit Matrix instant messaging client written in Flutter with a cute, easy-to-use Material You design. It… | 97 | 3212 | active |
| BinDiff BinDiff is an open-source comparison tool for binary files that finds differences and similarities in disassembled code using graph-theoret… | 62 | 3206 | active |
| Taho Taho is a community-owned Web3 cryptocurrency wallet implemented as a browser extension, positioned as an open-source alternative to MetaMa… | 82 | 3205 | active |
| pglombardo/PasswordPusher Password Pusher is an open-source Ruby web application for securely sharing passwords, text, files, and URLs via encrypted, self-deleting l… | 93 | 3201 | active |
| f-droid/fdroidclient The official Android client for F-Droid, the free and open-source software repository system. It lets users browse, install, and update FOS… | 67 | 3199 | active |
| qltysh/qlty Qlty CLI is a multi-language code quality tool written in Rust that unifies linting, auto-formatting, maintainability analysis, and securit… | 95 | 3194 | active |
| crytic/echidna Echidna is a Haskell-based fuzzer for Ethereum smart contracts that performs property-based testing by generating sequences of contract cal… | 86 | 3186 | active |
| Obfuscar Obfuscar is an open source MIT-licensed obfuscation tool for .NET assemblies that renames metadata to minimal names, making decompiled code… | 96 | 3185 | active |
| pingc0y/URLFinder URLFinder is a fast, easy-to-use Go CLI tool that extracts JS files, URLs, and sensitive information from web pages, including hidden unaut… | 73 | 3181 | active |
| jhaals/yopass Yopass is a self-hostable web application for securely sharing secrets, passwords, and files via one-time, auto-expiring links. Secrets are… | 100 | 3180 | active |
| crossutility/Quantumult-X Quantumult X is a network proxy and traffic manipulation tool for iOS, rebuilt from scratch with support for TUN-based traffic, HTTPS MitM … | 69 | 3178 | active |
| Photon OS Photon OS is an open-source, security-hardened minimal Linux distribution purpose-built as a container host for cloud-native applications, … | 66 | 3178 | active |
| sa7mon/S3Scanner A multi-threaded CLI tool written in Go that scans for misconfigured (open) S3 buckets across AWS and other S3-compatible providers like GC… | 62 | 3176 | active |
| the-tcpdump-group/libpcap libpcap is a system-independent C/C++ library providing a portable API for user-level network packet capture, with BPF-based filtering and … | 76 | 3174 | stable |
| easychen/CookieCloud CookieCloud is a browser extension plus self-hosted server that syncs browser cookies and localStorage across devices with end-to-end encry… | 87 | 3171 | active |
| NASA-SW-VnV/ikos IKOS is a static analyzer for C and C++ programs based on the theory of Abstract Interpretation, built on LLVM. It provides reusable abstra… | 57 | 3166 | active |
| aliasvault/aliasvault AliasVault is a privacy-first, end-to-end encrypted password manager with a built-in email alias server, letting users create unique identi… | 86 | 3164 | active |
| feder-cr/invisible_playwright A Python library that provides an antidetect, stealth-patched Firefox build for Playwright, with fingerprints set at the C++ engine level a… | 78 | 3160 | active |
| xiv3r/Burpsuite-Professional A shell-based installer that deploys Burp Suite Professional (a commercial web security testing toolkit) on Linux and NixOS, bundled with a… | 60 | 3159 | active |
| mozilla/multi-account-containers A Firefox browser extension by Mozilla that separates browsing into color-coded containers with isolated cookie storage, letting users run … | 86 | 3146 | active |
| Virtual-Browser/VirtualBrowser VirtualBrowser is a free, open-source anti-fingerprint browser built on Chromium that lets users create and manage multiple isolated browse… | 87 | 3145 | active |
| pallets/itsdangerous ItsDangerous is a Python library for cryptographically signing data so it can be safely passed to untrusted environments (like cookies or U… | 31 | 3134 | stable |
| nuver-labs/vps-audit A dependency-free Bash script that audits Linux VPS security and performance, running 18 graded checks covering SSH configuration, firewall… | 80 | 3132 | active |
| SecureUxTheme SecureUxTheme is a Windows utility that removes signature verification of visual styles (themes) in memory, enabling third-party custom the… | 32 | 3132 | active |
| korcankaraokcu/PINCE PINCE is a GDB front-end and reverse engineering tool for Linux, focused on game hacking but usable for general reverse engineering. It pro… | 96 | 3130 | active |
| m0bilesecurity/RMS-Runtime-Mobile-Security Runtime Mobile Security (RMS) is a NodeJS-powered web interface built on FRIDA for manipulating Android and iOS apps at runtime. It lets us… | 82 | 3130 | active |
| tegal1337/CiLocks CiLocks is a menu-driven Linux CLI toolkit for Android and iOS security testing, bundling lockscreen brute-force/bypass, ADB data extractio… | 23 | 3123 | active |
| Common Expression Language (CEL) cel-go is a Go implementation of the Common Expression Language (CEL), a fast, portable, non-Turing complete expression language with gradu… | 96 | 3121 | stable |
| 21y4d/nmapAutomator nmapAutomator is a POSIX-compatible shell script that automates nmap-based network reconnaissance and enumeration, running scans in the bac… | 32 | 3115 | active |
| oasislinux/oasis Oasis is a small, fully statically-linked Linux system built around musl, with reproducible builds driven by Lua-generated samurai manifest… | 58 | 3114 | active |
| hardentools/hardentools Hardentools is a Windows utility that reduces the attack surface by disabling risky features in Windows 10/11, Microsoft Office, LibreOffic… | 35 | 3111 | active |
| adryfish/fingerprint-chromium A fingerprint browser built on Ungoogled Chromium that lets users spoof or control browser fingerprint characteristics to avoid detection. … | 83 | 3110 | active |
| opengrep/opengrep Opengrep is an open-source static application security testing (SAST) engine forked from Semgrep under LGPL-2.1, supporting pattern-based c… | 81 | 3106 | active |
| zegl/kube-score kube-score is a static code analysis tool for Kubernetes object definitions that scores manifests and Helm charts against reliability and s… | 57 | 3105 | active |
| Exegol Exegol is a container-based, community-driven hacking environment for offensive security professionals, managed through a Python CLI wrappe… | 97 | 3101 | active |
| InSpec Chef InSpec is an open-source testing framework for infrastructure that expresses compliance, security, and policy requirements as human- a… | 89 | 3097 | active |
| OpenSC/OpenSC OpenSC is a set of open-source libraries and command-line tools for working with smart cards, focused on cards that perform cryptographic o… | 76 | 3097 | active |
| AMD-OSX/AMD_Vanilla A collection of binary kernel patches that enable near-native AMD CPU support on macOS via the OpenCore bootloader. It supports AMD 15h, 16… | 53 | 3097 | active |
| davesc63/GeoPort GeoPort is a cross-platform desktop application that simulates GPS location on iOS devices running iOS 17 and 18, letting users spoof their… | 58 | 3094 | active |
| LukeZGD/Legacy-iOS-Kit An all-in-one shell-based tool for restoring, downgrading, jailbreaking, and saving SHSH blobs on legacy iOS devices vulnerable to bootrom … | 68 | 3092 | active |
| jasypt-spring-boot A Spring Boot integration of the Jasypt library that enables transparent encryption and decryption of property sources in Spring Boot appli… | 62 | 3086 | active |
| OdysseusYuan/LKY_OfficeTools A one-click Windows tool that automates downloading, installing, and activating the latest version of Microsoft Office, including optional … | 23 | 12726 | maintenance |
| darkoperator/dnsrecon DNSRecon is a Python-based DNS enumeration tool for security assessments and network troubleshooting. It supports zone transfer checks, gen… | 89 | 3080 | active |
| hwdsl2/wireguard-install A Bash script that automates setting up a WireGuard VPN server on various Linux distributions, with interactive and fully automatic install… | 75 | 3076 | active |
| 0xCUB3/wBlock wBlock is an open-source, next-generation ad blocker built as Safari content-blocking extensions for macOS, iOS, iPadOS, and visionOS. It s… | 91 | 3075 | active |
| kyujin-cho/pixel-volte-patch Pixel IMS is a rootless Android application that enables VoLTE (IMS) on Google Tensor-based Pixel phones by overriding carrier configuratio… | 63 | 3074 | active |
| GoldHEN/GoldHEN GoldHEN is a homebrew enabler payload for jailbroken PlayStation 4 consoles, providing kernel patches, debug settings, and system enhanceme… | 49 | 3074 | active |
| liboqs liboqs is an open source C library providing implementations of quantum-resistant (post-quantum) key encapsulation mechanisms and digital s… | 84 | 3071 | active |
| 6Kmfi6HP/EDtunnel EDtunnel is a proxy tool deployed on Cloudflare Workers and Pages that supports VLESS and Trojan protocols with configurable proxy IPs, SOC… | 55 | 3059 | active |
| bpc-clone/bpc_firefox_support Support and issue-tracking repository for Bypass Paywalls Clean, a Firefox browser extension that bypasses news site paywalls. Development … | 32 | 3058 | active |
| chromium/badssl.com badssl.com is a hosted collection of test subdomains, each deliberately configured with a broken or unusual TLS/SSL setup (expired certific… | 67 | 3051 | active |
| thinkst/opencanary OpenCanary is a modular, multi-protocol network honeypot daemon written in Python, designed to detect attackers after they breach internal … | 88 | 3050 | active |
| Inveigh Inveigh is a cross-platform .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers, with a primary C# version and a legacy Power… | 46 | 3043 | active |
| RfidResearchGroup/ChameleonUltra ChameleonUltra is the open-source firmware for an RFID/NFC card emulation device based on the NRF52840, capable of reading, writing, decryp… | 80 | 3040 | active |
| Qianlitp/crawlergo crawlergo is a Go-based browser crawler that uses headless Chrome to discover URLs for web vulnerability scanners. It renders pages, fills … | 24 | 3039 | active |
| corbindavenport/just-the-browser A collection of configuration files and installation scripts that disable AI features, telemetry, sponsored content, and other annoyances i… | 82 | 3034 | active |
| NexAlloy NexAlloy is an LSPosed (Xposed) module for rooted Android devices that applies ReVanced/Morphe-style patches to apps like YouTube, YouTube … | 90 | 3031 | active |
| mgeeky/Penetration-Testing-Tools A curated collection of 170+ penetration testing tools, scripts, and cheatsheets developed by the author over years of red teaming and IT s… | 32 | 3030 | active |
| cilame/v_jstools v_jstools is a Chrome extension (Manifest V3) for debugging and reverse-engineering JavaScript on web pages. It provides API hooking, code … | 55 | 3016 | active |
| aws-actions/configure-aws-credentials A GitHub Action that configures AWS credential environment variables for use in subsequent workflow steps. It supports OIDC federation for … | 97 | 3013 | active |
| evgenyneu/keychain-swift A Swift library providing simple helper functions for securely storing and retrieving text, boolean, and Data values in the Apple Keychain.… | 32 | 3013 | stable |
| Manisso/fsociety Fsociety is a Python-based penetration testing framework that bundles a menu of hacking tools covering information gathering, password atta… | 70 | 12354 | maintenance |
| thewhiteh4t/FinalRecon FinalRecon is an all-in-one automatic web reconnaissance tool written in Python that provides a fast overview of a web target. It bundles h… | 67 | 3006 | active |
| Home Accessory Architect HAA (Home Accessory Architect) is firmware that adds native Apple HomeKit support and custom configurations to ESP32 and ESP8266 based devi… | 96 | 3005 | active |
| confident-ai/deepteam DeepTeam is an open-source Python framework for red teaming LLM systems, AI agents, RAG pipelines, and chatbots. It simulates adversarial a… | 65 | 3005 | active |
| strongSwan strongSwan is an open-source, modular IPsec-based VPN solution implementing the IKEv2 (and IKEv1) key exchange protocols for securing IP tr… | 88 | 2994 | stable |
| baidu/openrasp OpenRASP is Baidu's open-source Runtime Application Self-Protection (RASP) solution that embeds a protection engine directly into the appli… | 39 | 2987 | stable |
| makoto56/penetration-suite-toolkit A preconfigured Windows 11 penetration testing toolkit distributed as a VM image, bundling a large curated collection of security tools wit… | 30 | 2983 | active |
| eteran/edb-debugger edb is a cross-platform AArch32/x86/x86-64 debugger inspired by OllyDbg, built with Qt and Capstone. It provides a graphical interface for … | 68 | 2980 | active |
| v0id4real/Void-Tools Void-Tools is a Python terminal multitool with a Rich TUI dashboard bundling 150+ utilities for OSINT research, network diagnostics, and Di… | 50 | 2979 | active |
| bethgelab/foolbox Foolbox is a Python library for generating adversarial examples that fool deep neural networks, with state-of-the-art gradient-based and de… | 44 | 2979 | active |
| bytenode/bytenode Bytenode is a minimalist bytecode compiler that compiles JavaScript into V8 bytecode (.jsc files) to protect source code. It works with Nod… | 75 | 2976 | active |
| microsoft/AttackSurfaceAnalyzer Attack Surface Analyzer is a Microsoft open-source security tool that scans an operating system's security configuration before and after s… | 81 | 2971 | active |
| appleboy/gin-jwt A JWT authentication middleware for the Gin web framework in Go, built on golang-jwt/jwt. It provides login handling, token refresh, and ro… | 96 | 2969 | active |
| palahsu/DDoS-Ripper DDoS-Ripper (DRipper) is a Python command-line tool that floods a target IP with traffic to simulate a distributed denial-of-service attack… | 68 | 2966 | active |
| TheOfficialFloW/PPPwn PPPwn is a proof-of-concept kernel remote code execution exploit for PlayStation 4 consoles up to firmware 11.00, exploiting CVE-2006-4304 … | 25 | 2965 | active |
| Metabolix/HackBGRT HackBGRT is a UEFI application that changes the Windows boot logo by overwriting the Boot Graphics Resource Table (BGRT) during boot. It sh… | 63 | 2962 | active |
| wolfSSL/wolfssl wolfSSL is a lightweight, portable SSL/TLS library written in ANSI C, supporting TLS 1.3 and DTLS 1.3, powered by the wolfCrypt cryptograph… | 94 | 2961 | stable |
| firecracker-microvm/firecracker-containerd firecracker-containerd is a set of components that lets containerd manage containers running inside Firecracker microVMs, combining fast co… | 75 | 2961 | active |
| pquerna/otp A Go library implementing Time-based (TOTP, RFC 6238) and HMAC-based (HOTP, RFC 4228) one-time password algorithms for adding two-factor au… | 35 | 2960 | stable |
| onetimesecret/onetimesecret A self-hostable web service for sharing sensitive information like passwords via single-use, self-destructing links. Written in Ruby with R… | 95 | 2958 | active |
| microsoft/restler-fuzzer RESTler is the first stateful REST API fuzzing tool, automatically testing cloud services through their REST APIs to find security and reli… | 67 | 2957 | active |
| jayofelony/pwnagotchi Pwnagotchi is a Raspberry Pi-based Wi-Fi penetration-testing gadget that leverages Bettercap to passively sniff or actively attack nearby W… | 90 | 2956 | active |
| elseif/MikroTikPatch A Python-based tool that patches MikroTik RouterOS public keys and generates licenses, enabling shell access, container mode, and highest-l… | 87 | 2955 | active |
| i-am-shodan/USBArmyKnife USB Army Knife is firmware for ESP32-based USB devices (like the T-Dongle-S3) that turns them into a close-access penetration testing tool.… | 73 | 2954 | active |
| netwrix/pingcastle PingCastle is a C# tool that assesses the security posture of Active Directory and Entra ID environments, producing risk scores, health che… | 87 | 2953 | active |
| scottyab/rootbeer RootBeer is an Android library that detects whether a device has been rooted using multiple Java and native checks such as scanning for su … | 61 | 2952 | active |
| Titanium Browser for Android Titanium Browser is a secure, fully open-source Chromium-based Android browser forked from GrapheneOS's Vanadium, with support for Chrome a… | 85 | 2945 | active |
| SnaffCon/Snaffler Snaffler is a C# command-line tool for pentesters and red teamers that enumerates Windows/AD environments to find sensitive files (mostly c… | 62 | 2945 | active |
| flick9000/winscript WinScript is an open-source desktop and web tool for building custom Windows optimization scripts from scratch. It generates PowerShell scr… | 87 | 2936 | active |
| deeplethe/forkd forkd is a microVM sandbox runtime for AI agent fan-out, built on Firecracker, that forks up to 100 isolated child VMs in ~100ms from a war… | 75 | 2924 | active |
| Padloc Padloc is an open-source, end-to-end encrypted password manager for individuals and teams, built as a monorepo with a Node.js backend serve… | 25 | 2923 | active |