function: security
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| GoldHEN/GoldHEN GoldHEN is a homebrew enabler payload for jailbroken PlayStation 4 consoles, providing kernel patches, debug settings, and system enhanceme… | 52 | 2877 | active |
| i-am-shodan/USBArmyKnife USB Army Knife is firmware for ESP32-based USB devices (like the T-Dongle-S3) that turns them into a close-access penetration testing tool.… | 71 | 2870 | active |
| Pryaxis/TShock TShock is a server-side toolbox for Terraria servers providing anti-cheat, server-side characters, groups, permissions, item bans, and exte… | 86 | 2868 | active |
| flozz/p0wny-shell p0wny@shell is a single-file PHP webshell that provides a browser-based terminal for executing commands on a remote server. It is designed … | 39 | 2860 | active |
| patterniha/MITM-DomainFronting A method and configuration toolkit that intercepts unencrypted browser traffic via a man-in-the-middle local proxy and forwards it to block… | 74 | 2848 | active |
| projectdiscovery/dnsx dnsx is a fast, multi-purpose DNS toolkit from ProjectDiscovery for running DNS queries (A, AAAA, CNAME, PTR, NS, MX, TXT, SRV, SOA) with u… | 86 | 2846 | active |
| shadowsocks/v2ray-plugin A SIP003 plugin for Shadowsocks built on v2ray, tunneling traffic over WebSocket (HTTP/HTTPS) or QUIC to obfuscate proxy traffic. Written i… | 64 | 2846 | active |
| gzu-liyujiang/Android_CN_OAID An open-source Android library providing a unified solution for obtaining unique device identifiers, serving as an open alternative to the … | 84 | 2845 | active |
| glauth/glauth GLAuth is a lightweight, secure LDAP authentication server written in Go with configurable backends. It serves as a simple alternative to O… | 91 | 2842 | active |
| yujincheng08/BiliRoaming BiliRoaming is an Xposed module for rooted Android devices that removes regional restrictions on anime (bangumi) content in the Bilibili ap… | 10 | 11559 | maintenance |
| mrexodia/TitanHide TitanHide is a Windows kernel driver that hides debuggers from selected processes by hooking Nt* kernel functions via SSDT hooks and alteri… | 72 | 2840 | active |
| LimerBoy/Impulse Impulse is a Python-based denial-of-service toolkit that bundles multiple attack methods including SYN, UDP, ICMP, HTTP floods, Slowloris, … | 39 | 2840 | active |
| lens-protocol/core Lens Protocol is a decentralized, non-custodial social graph built as a set of Solidity smart contracts, enabling on-chain social interacti… | 42 | 2837 | active |
| elseif/MikroTikPatch A Python-based tool that patches MikroTik RouterOS public keys and generates licenses, enabling shell access, container mode, and highest-l… | 87 | 2833 | active |
| quay/quay Project Quay is an open-source container image registry that builds, stores, and distributes container images. It implements the Docker Reg… | 94 | 2821 | active |
| eycorsican/leaf Leaf is a versatile and efficient proxy framework written in Rust, supporting multiple proxy protocols such as Shadowsocks, Trojan, VMess, … | 85 | 2820 | active |
| screetsec/TheFatRat TheFatRat is a menu-driven exploiting tool that automates MSFvenom and Metasploit to generate backdoors and payloads for Windows, Linux, Ma… | 23 | 11444 | maintenance |
| shatyuka/Zhiliao Zhiliao is an Xposed module that removes ads and cleans up the interface of the Zhihu Android app. It also offers content filtering, UI sim… | 62 | 2813 | active |
| opencve/opencve OpenCVE is a self-hostable Vulnerability Intelligence Platform that aggregates CVE data from sources like MITRE, NVD, CISA KEV, Vulnrichmen… | 94 | 2810 | active |
| jedisct1/minisign Minisign is a dead simple command-line tool for signing files and verifying digital signatures using the Ed25519 public-key signature syste… | 67 | 2808 | stable |
| zema1/suo5 Suo5 is a high-performance HTTP tunneling tool that creates a local SOCKS5 forward proxy by tunneling traffic through a compromised web ser… | 85 | 2796 | active |
| engineer-man/piston Piston is a high performance general purpose code execution engine that safely runs untrusted and potentially malicious code in isolated en… | 66 | 2796 | active |
| straight-tamago/misaka Misaka is an iOS and tvOS customisation application that lets users apply tweaks without jailbreaking, exploiting KFD and MacDirtyCow (MDC)… | 21 | 2796 | active |
| flick9000/winscript WinScript is an open-source desktop and web tool for building custom Windows optimization scripts from scratch. It generates PowerShell scr… | 86 | 2794 | active |
| ARMmbed/DAPLink Arm Mbed DAPLink is open-source interface firmware that runs on a secondary MCU attached to the SWD/JTAG port of an Arm Cortex application … | 67 | 2793 | active |
| hasherezade/pe_to_shellcode A C++ command-line tool that converts Windows PE executables into shellcode-compatible form, adding a reflective loading stub post-compilat… | 40 | 2793 | active |
| destan19/OpenAppFilter OpenAppFilter (OAF) is a parental control and application filtering plugin for OpenWrt routers, built as a kernel module, service daemon, a… | 88 | 2786 | active |
| panda-re/panda PANDA is an open-source Platform for Architecture-Neutral Dynamic Analysis built on the QEMU whole-system emulator, supporting record and r… | 93 | 2778 | active |
| coreboot/coreboot coreboot is an open-source firmware project that replaces proprietary BIOS/UEFI on computers, performing hardware initialization and then h… | 67 | 2777 | active |
| 0xCUB3/wBlock wBlock is an open-source, next-generation ad blocker built as Safari content-blocking extensions for macOS, iOS, iPadOS, and visionOS. It s… | 83 | 2770 | active |
| authpass/authpass AuthPass is a free, open-source password manager built with Flutter that is compatible with KeePass 2.x (KDBX 3 and KDBX 4) databases. It r… | 67 | 2767 | active |
| Gedsh/InviZible InviZible Pro is an Android application that combines Tor, DNSCrypt, and Purple I2P modules to provide online privacy, anonymity, and acces… | 98 | 2756 | active |
| rubysec/bundler-audit bundler-audit is a command-line tool that audits a Ruby project's Gemfile.lock for gems with known vulnerabilities using the ruby-advisory-… | 73 | 2756 | active |
| awnumar/memguard MemGuard is a pure Go library that securely stores sensitive information in memory, encrypting it with XSalsa20Poly1305 and bypassing the g… | 72 | 2756 | active |
| deeplethe/forkd forkd is a microVM sandbox runtime for AI agent fan-out, built on Firecracker, that forks up to 100 isolated child VMs in ~100ms from a war… | 79 | 2752 | active |
| protectai/vulnhuntr Vulnhuntr is a Python CLI tool that uses large language models combined with static code analysis to autonomously discover exploitable vuln… | 24 | 2747 | active |
| checkra1n/PongoOS PongoOS is a pre-boot execution environment for Apple boards, built on top of the checkra1n jailbreak tool. It provides an interactive shel… | 36 | 2746 | active |
| pucherot/Pi.Alert Pi.Alert is a self-hosted WIFI/LAN intruder detector that scans the local network for connected devices using arp-scan, Pi-hole, and dnsmas… | 23 | 2743 | active |
| Bearer/bearer Bearer CLI is an open-source static application security testing (SAST) tool written in Go that scans source code and analyzes data flows t… | 95 | 2739 | active |
| calebmadrigal/trackerjacker A Python CLI tool that maps nearby WiFi networks and their connected devices via raw 802.11 monitor-mode packet capture, similar to nmap bu… | 56 | 2739 | active |
| asLody/VirtualApp VirtualApp is an Android virtualization/sandbox engine that lets apps run inside a host app without being installed on the system, acting a… | 75 | 11070 | maintenance |
| Impact-I/reFlutter reFlutter is a Python CLI framework for reverse engineering Flutter mobile apps by repacking APK/IPA files with a specially patched, precom… | 95 | 2738 | active |
| NetSPI/PowerUpSQL PowerUpSQL is a PowerShell toolkit for attacking and auditing SQL Server instances, supporting discovery, weak configuration auditing, priv… | 32 | 2737 | active |
| xnl-h4ck3r/waymore waymore is a Python CLI tool that retrieves URLs from multiple web archive and intelligence sources (Wayback Machine, Common Crawl, Alien V… | 90 | 2732 | active |
| Tecnativa/docker-socket-proxy A security-enhanced HAProxy-based proxy that sits in front of the Docker socket and restricts which Docker API requests are allowed. It ret… | 87 | 2729 | active |
| aboul3la/Sublist3r Sublist3r is a Python command-line tool that enumerates subdomains of a target domain using OSINT sources such as Google, Bing, Yahoo, Baid… | 23 | 11023 | maintenance |
| salarcode/SmartProxy SmartProxy is a Firefox, Chrome, and Edge browser extension that automatically enables or disables proxy usage per website based on customi… | 90 | 2726 | active |
| f0rb1dd3n/Reptile Reptile is a Linux kernel module (LKM) rootkit written in C that provides privilege escalation, file/process/network connection hiding, per… | 67 | 2718 | active |
| AxtMueller/Windows-Kernel-Explorer Windows Kernel Explorer (WKE) is a free Windows kernel research and inspection tool supporting Windows XP through Windows 11. It loads a ke… | 58 | 2717 | active |
| ComodoSecurity/openedr OpenEDR is an open-source Endpoint Detection and Response (EDR) agent written in C++ that records endpoint telemetry, process hierarchies, … | 60 | 2716 | active |
| securing/IOSSecuritySuite iOS Security Suite is a Swift library for iOS platform security and anti-tampering checks. It detects jailbroken devices, attached debugger… | 86 | 2712 | active |
| zinja-coder/jadx-ai-mcp A JADX plugin that bundles an MCP server, allowing LLM clients like Claude to interact with the JADX decompiler for Android APK analysis. I… | 84 | 2711 | active |
| altcha-org/altcha ALTCHA is an open-source, privacy-first CAPTCHA alternative that protects websites, forms, and APIs from bots and spam using a proof-of-wor… | 93 | 2708 | active |
| hfiref0x/KDU KDU (Kernel Driver Utility) is a Windows command-line tool that abuses known vulnerable drivers to load unsigned kernel drivers, bypass Dri… | 91 | 2704 | active |
| dirkjanm/ROADtools ROADtools is a Python framework for interacting with Azure AD/Entra ID, comprising the roadlib authentication library, the ROADrecon explor… | 75 | 2704 | active |
| bestK/cursor-fake-machine A VS Code/Cursor editor extension that fakes or resets the machine ID used by the Cursor editor for device identification. It is distribute… | 10 | 2703 | active |
| MetapriseAI/OrgKernel OrgKernel is an open-source trust layer for AI agents providing cryptographic agent identity (Ed25519), scoped execution tokens, SHA-256 ha… | 55 | 2700 | active |
| Checkmarx/kics KICS (Keeping Infrastructure as Code Secure) is an open-source static analysis tool by Checkmarx that scans IaC files for security vulnerab… | 98 | 2695 | active |
| patterniha/SNI-Spoofing A Python CLI tool that bypasses Deep Packet Inspection (DPI) by manipulating IP and TCP headers, such as spoofing SNI fields. It is used to… | 53 | 2687 | active |
| submariner-io/submariner Submariner is a CNCF sandbox tool that interconnects the overlay networks of multiple Kubernetes clusters, enabling direct Pod-to-Pod and S… | 96 | 2686 | active |
| i2p/i2p.i2p I2P (Invisible Internet Project) is the reference Java implementation of a decentralized, anonymizing peer-to-peer overlay network that rou… | 89 | 2685 | stable |
| sheeki03/tirith Tirith is a Rust-based terminal security tool that intercepts shell commands, pasted content, and files to block threats like homograph URL… | 78 | 2683 | active |
| Bouncy Castle Bouncy Castle is a comprehensive open-source cryptographic library for Java (and C#/.NET) implementing a wide range of algorithms, a JCA/JC… | 77 | 2683 | stable |
| ihciah/shadow-tls ShadowTLS is a TLS camouflage proxy written in Rust that relays a real TLS handshake with a valid certificate of your choice to the firewal… | 31 | 2681 | active |
| aforensics/HiddenVM HiddenVM is a free, open-source Linux application that lets you run Oracle VirtualBox on the Tails operating system, so almost any desktop … | 23 | 2677 | active |
| nuver-labs/vps-audit A dependency-free Bash script that audits Linux VPS security and performance, running 18 graded checks covering SSH configuration, firewall… | 86 | 2676 | active |
| bytedance/Elkeid Elkeid is an open-source cloud workload protection platform from ByteDance that provides host intrusion detection (HIDS), runtime applicati… | 70 | 2672 | active |
| rthalley/dnspython dnspython is a DNS toolkit for Python supporting nearly all record types, queries, zone transfers, dynamic updates, TSIG, EDNS0, DNSSEC, an… | 69 | 2670 | stable |
| re-zero001/LSPosed-Irena LSPosed-Irena is a maintained fork of the LSPosed framework, a Zygisk module providing an ART hooking framework with Xposed-compatible APIs… | 66 | 2670 | active |
| sam1am/anyapk anyapk is a lightweight Android app that installs any APK on your own device by using local ADB (wireless debugging) connections, bypassing… | 82 | 2667 | active |
| ankit0183/Wifi-Hacking A Python-based menu-driven CLI tool that automates Wi-Fi penetration testing by wrapping built-in Kali Linux wireless tools. It supports mo… | 59 | 2667 | active |
| OnionBrowser/OnionBrowser Onion Browser is a free, open-source privacy-focused web browser for iPhone and iPad that tunnels web traffic through the Tor anonymity net… | 98 | 2663 | active |
| Mongoose OS Mongoose OS is an open-source IoT firmware development framework and operating system for low-power microcontrollers such as ESP32, ESP8266… | 65 | 2662 | stable |
| Moham3dRiahi/Th3inspector Th3inspector is an all-in-one Perl CLI tool for information gathering (OSINT reconnaissance). It bundles lookups such as website info, whoi… | 40 | 2662 | active |
| 0x6d69636b/windows_hardening HardeningKitty is a PowerShell module that audits and hardens Windows systems against security baselines such as CIS Benchmarks, Microsoft … | 86 | 2655 | active |
| apache/casbin-jcasbin jCasbin is an Apache-licensed Java authorization library that enforces access control using models such as ACL, RBAC, and ABAC defined in c… | 88 | 2652 | stable |
| lissy93/networking-toolbox Networking Toolbox is a collection of 100+ free, open-source networking utilities for system administrators and network engineers, covering… | 58 | 2652 | active |
| cisagov/ScubaGear ScubaGear is a PowerShell-based assessment tool that checks whether a Microsoft 365 tenant's configuration conforms to CISA's Secure Config… | 85 | 2650 | active |
| arthaud/git-dumper git-dumper is a Python CLI tool that reconstructs a full git repository from a website that exposes its .git directory, even when directory… | 64 | 2645 | stable |
| cve-search/cve-search cve-search is a tool-set that imports CVE and CPE data into a local MongoDB to enable fast, private searching of known software vulnerabili… | 84 | 2642 | active |
| decompiler-explorer/decompiler-explorer A web service (like Compiler Explorer in reverse) that lets users upload small binaries and compare the decompiled C-like output from many … | 77 | 2639 | active |
| paypal/junodb JunoDB is PayPal's open-source secure, consistent, and highly available distributed key-value store delivering single-digit millisecond lat… | 30 | 2636 | active |
| musana/CF-Hero CF-Hero is a Go-based reconnaissance CLI tool that discovers the real origin IP addresses of Cloudflare-protected web applications. It aggr… | 66 | 2632 | active |
| thewhiteh4t/pwnedOrNot pwnedOrNot is a Python command-line OSINT tool that checks email addresses against the HaveIBeenPwned v3 API for past breaches and then sea… | 66 | 2628 | active |
| libkrun/libkrun libkrun is a dynamic library that lets programs run processes in partially isolated environments using KVM virtualization on Linux and HVF … | 96 | 2627 | active |
| TermuxHackz/X-osint X-osint is an open-source Python-based OSINT framework for gathering information about phone numbers, email addresses, IP addresses, VINs, … | 72 | 2627 | active |
| Keystone Assembler Engine Keystone is a lightweight multi-platform, multi-architecture assembler framework implemented in C/C++ with bindings for many languages. It … | 65 | 2625 | active |
| confident-ai/deepteam DeepTeam is an open-source Python framework for red teaming LLM systems, AI agents, RAG pipelines, and chatbots. It simulates adversarial a… | 67 | 2623 | active |
| AFLplusplus/LibAFL LibAFL is a Rust library of reusable building blocks for constructing custom coverage-guided fuzzers, developed by the AFL++ team. It scale… | 94 | 2622 | active |
| TrackerControl/tracker-control-android TrackerControl is an Android app that monitors and blocks hidden tracking and ads in mobile apps using a local VPN to analyze network traff… | 98 | 2620 | active |
| SummerSec/ShiroAttack2 A Java-based exploitation tool for the Apache Shiro-550 rememberMe deserialization vulnerability, offering both a JavaFX GUI and a CLI. It … | 88 | 2619 | active |
| rbsec/sslscan sslscan is a command-line tool that tests SSL/TLS enabled services to discover supported cipher suites, protocols, key exchange groups, and… | 75 | 2618 | active |
| segmentio/chamber Chamber is a Go CLI tool for managing application secrets by storing them in AWS SSM Parameter Store (with S3 backend support). It lets tea… | 77 | 2614 | active |
| anhkgg/SuperRDP SuperRDP is a C++ rework of the rdpwrap project that patches and hooks the Windows termsrv.dll to enable Remote Desktop connections on edit… | 54 | 2614 | active |
| aboutcode-org/scancode-toolkit ScanCode Toolkit is a command-line tool and Python library that scans codebases to detect licenses, copyrights, package manifests, dependen… | 94 | 2612 | active |
| ory/fosite Fosite is a security-first, extensible OAuth 2.0 and OpenID Connect SDK for Go, implementing RFC 6749, RFC 6819, PKCE, and OpenID Connect C… | 58 | 2612 | active |
| lexik/LexikJWTAuthenticationBundle A Symfony bundle that provides JSON Web Token (JWT) authentication for Symfony APIs. It handles token creation, validation, and integration… | 71 | 2608 | stable |
| imbushuo/mac-precision-touchpad A Windows Precision Touchpad driver implementation for Apple MacBook trackpads and Magic Trackpad 2, written in C. It supports USB (includi… | 23 | 10437 | maintenance |
| googleprojectzero/winafl WinAFL is a Windows fork of American Fuzzy Lop (AFL) for coverage-guided fuzzing of Windows binaries, including closed-source black-box tar… | 65 | 2604 | active |
| WalletWasabi/WalletWasabi Wasabi Wallet is an open-source, non-custodial, privacy-focused Bitcoin desktop wallet built in C# on .NET. It routes all traffic through T… | 93 | 2603 | active |