function: security
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| guillaumemeyer/watermarks-remover A privacy-first Python service plus agent skill that strips multi-vendor AI provenance marks (C2PA, EXIF/XMP metadata, invisible Unicode, a… | 79 | 18542 | active |
| fail2ban/fail2ban Fail2ban is a Python daemon that scans log files for repeated authentication failures and bans offending IP addresses by updating firewall … | 88 | 18479 | stable |
| MustardChef/WSABuilds WSABuilds provides prebuilt Windows Subsystem for Android (WSA) binaries for Windows 10 and 11, with optional Google Play Store (MindTheGap… | 85 | 18259 | active |
| auth0/node-jsonwebtoken A Node.js library implementing JSON Web Tokens (JWT) per RFC 7519, supporting signing and verification with HMAC, RSA, and ECDSA algorithms… | 72 | 18189 | stable |
| dortania/OpenCore-Legacy-Patcher A Python-based GUI application that builds and installs OpenCore boot configurations to run modern macOS (Big Sur through Sequoia) on unsup… | 80 | 18091 | active |
| tiann/KernelSU KernelSU is a kernel-based root solution for Android that runs inside the Linux kernel to grant root access. It provides stealthy, permissi… | 91 | 18014 | active |
| slackhq/nebula Nebula is a scalable overlay networking tool (mesh VPN) built on the Noise Protocol Framework, using certificates and security groups for m… | 95 | 17658 | stable |
| cure53/DOMPurify DOMPurify is a fast, DOM-only XSS sanitizer for HTML, MathML and SVG that removes malicious markup while allowing safe content. It works in… | 99 | 17339 | stable |
| goproxy GoProxy is a high-performance, cross-platform proxy server written in Go supporting HTTP(S), SOCKS5, SS, WebSocket, TCP, UDP, and DNS proxy… | 94 | 17121 | active |
| Hyperledger Fabric Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework written in Go for building blockchain solutions and app… | 96 | 16703 | stable |
| ZPhisher Zphisher is a beginner-friendly, automated phishing toolkit written in Bash with 30+ ready-made login page templates. It supports multiple … | 23 | 16700 | active |
| Wazuh Wazuh is a free, open source security platform that unifies XDR and SIEM capabilities for threat prevention, detection, and response across… | 98 | 16691 | stable |
| MatrixTM/MHDDoS MHDDoS is a Python 3 command-line DDoS attack script offering 57 flood methods across Layer 7 (HTTP) and Layer 4 (TCP/UDP), including bypas… | 74 | 16595 | active |
| redox-os/redox Redox is a full-featured Unix-like operating system written in Rust with a microkernel architecture, inspired by seL4, MINIX, Plan 9, Linux… | 70 | 16532 | active |
| flipperdevices/flipperzero-firmware The official open-source firmware for the Flipper Zero, a portable multi-tool device for interacting with access control systems. It implem… | 81 | 16515 | active |
| jpillora/chisel Chisel is a fast TCP/UDP tunnel transported over HTTP and secured via SSH, shipped as a single Go executable containing both client and ser… | 87 | 16448 | active |
| Semgrep Semgrep is a fast, open-source static analysis tool that searches code, finds bugs, and enforces secure coding standards using rules that l… | 95 | 16409 | active |
| zephyrproject-rtos/zephyr Zephyr is a scalable, secure, real-time operating system (RTOS) designed for resource-constrained embedded devices across multiple hardware… | 94 | 16316 | stable |
| CISOfy/lynis Lynis is an open-source security auditing and hardening tool for UNIX-based systems including Linux, macOS, and BSD. It performs in-depth l… | 90 | 16239 | stable |
| javascript-obfuscator/javascript-obfuscator A powerful open-source JavaScript and Node.js obfuscator that transforms readable source code into hard-to-reverse-engineer output using id… | 99 | 16218 | active |
| angristan/openvpn-install A Bash script that installs and manages a self-hosted OpenVPN VPN server on many Linux distributions. It handles client certificate generat… | 76 | 16112 | active |
| fortra/impacket Impacket is a collection of Python classes for low-level programmatic access to network protocols, including full implementations of SMB1-3… | 83 | 16038 | active |
| Cryptomator Cryptomator is an open-source desktop and mobile application that provides transparent client-side encryption for files stored in any cloud… | 96 | 16018 | stable |
| yonggekkk/Cloudflare-vless-trojan A set of Cloudflare Workers/Pages proxy scripts supporting Vless-ws(tls) and Trojan-ws(tls) nodes, plus a local Socks5/HTTP proxy script wi… | 59 | 15970 | active |
| winsiderss/systeminformer System Informer (formerly Process Hacker) is a free, open-source, multi-purpose Windows tool for monitoring system resources, debugging sof… | 67 | 15701 | active |
| facebook/infer Infer is a static analysis tool, written in OCaml, that detects bugs in Java, C, C++, Objective-C, and Erlang code before it ships. It inte… | 82 | 15690 | active |
| zaproxy/zaproxy Zed Attack Proxy (ZAP) by Checkmarx is a free, open-source web application security scanner used for finding vulnerabilities in web apps du… | 78 | 15686 | stable |
| Evilginx Evilginx is a standalone man-in-the-middle attack framework written in Go that proxies traffic between a victim's browser and a legitimate … | 62 | 15535 | active |
| gojue/ecapture eCapture is an eBPF-based CLI tool that captures SSL/TLS plaintext traffic without needing CA certificates, supporting OpenSSL, LibreSSL, B… | 96 | 15441 | active |
| acidanthera/OpenCorePkg OpenCore is a UEFI bootloader for booting macOS (Hackintosh) and other operating systems on PC hardware, with an accompanying UEFI developm… | 82 | 15400 | active |
| cloudflare/cloudflared cloudflared is the command-line client and daemon for Cloudflare Tunnel, which creates outbound-only connections from your origin servers t… | 99 | 15395 | stable |
| trustedsec/social-engineer-toolkit The Social-Engineer Toolkit (SET) is an open-source Python-based penetration testing framework for authorized social-engineering assessment… | 70 | 15239 | active |
| owasp-amass/amass OWASP Amass is a Go-based framework for in-depth attack surface mapping and external asset discovery using OSINT gathering and active recon… | 81 | 15047 | active |
| NVIDIA/SkillSpector SkillSpector is a security scanner for AI agent skills used by Claude Code, Codex CLI, Gemini CLI, and MCP-based agents. It detects vulnera… | 81 | 15011 | active |
| HunxByts/GhostTrack GhostTrack is a Python-based OSINT CLI tool for gathering information about IP addresses, phone numbers, and usernames across social media.… | 30 | 14943 | active |
| xcanwin/KeepChatGPT KeepChatGPT is a userscript/browser plugin that enhances ChatGPT's data security and usability. It keeps sessions alive, blocks tracking, d… | 72 | 14905 | active |
| documenso/documenso Documenso is an open-source, self-hostable alternative to DocuSign for digitally signing documents, built with Next.js, TypeScript, and Pos… | 97 | 14770 | active |
| opensandbox-group/OpenSandbox OpenSandbox is a general-purpose sandbox platform for AI applications that securely runs commands, code interpreters, browsers, and develop… | 79 | 14737 | active |
| guofei9987/blind_watermark A Python library for embedding and extracting blind (invisible) watermarks in images using DWT-DCT-SVD transforms, with watermark recovery … | 56 | 14706 | stable |
| amnezia-vpn/amnezia-client Amnezia VPN is an open-source, cross-platform VPN client (desktop and mobile) that can automatically deploy a self-hosted VPN server on you… | 95 | 14705 | active |
| prowler-cloud/prowler Prowler is an open-source cloud security platform that performs security best-practice assessments, audits, continuous monitoring, hardenin… | 95 | 14687 | active |
| maurosoria/dirsearch dirsearch is an advanced web path scanner that brute-forces directories and files on web servers using wordlists. It is a Python CLI tool w… | 87 | 14662 | active |
| crowdsecurity/crowdsec CrowdSec is an open-source, crowdsourced security engine that analyzes logs and HTTP requests to detect malicious behavior and block offend… | 89 | 14655 | stable |
| KaringX/karing Karing is a free, cross-platform proxy utility built with Flutter that serves as a GUI for a modified sing-box core. It supports Clash, V2r… | 93 | 14517 | active |
| moonD4rk/HackBrowserData HackBrowserData is a self-contained Go CLI that extracts and decrypts browser data (passwords, cookies, history, bookmarks, credit cards, d… | 91 | 14458 | active |
| shadow1ng/fscan Fscan is a comprehensive intranet scanning tool written in Go that automates host discovery, port scanning, service identification, weak-pa… | 95 | 14450 | active |
| OpenVPN/openvpn OpenVPN is an open-source VPN daemon that creates secure point-to-point or site-to-site TLS-encrypted tunnels over the network. It is a mat… | 98 | 14442 | stable |
| mobile-shell/mosh Mosh is a remote terminal application that replaces interactive SSH sessions with a UDP-based protocol that survives roaming, IP changes, s… | 56 | 14401 | stable |
| stalwartlabs/stalwart Stalwart is an open-source, all-in-one mail and collaboration server written in Rust, supporting JMAP, IMAP4, POP3, SMTP, CalDAV, CardDAV a… | 97 | 14362 | active |
| coturn/coturn coturn is a free open-source implementation of TURN and STUN servers written in C, serving as a VoIP/WebRTC media traffic NAT traversal ser… | 98 | 14350 | stable |
| projectdiscovery/subfinder Subfinder is a fast, passive subdomain discovery tool written in Go that enumerates valid subdomains for target domains using online passiv… | 95 | 14315 | active |
| ReFirmLabs/binwalk Binwalk is a fast firmware analysis tool rewritten in Rust that identifies and optionally extracts files and data embedded inside other fil… | 66 | 14276 | active |
| altstoreio/AltStore AltStore is an open-source alternative app store for non-jailbroken iOS devices that lets users sideload .ipa apps with just their Apple ID… | 74 | 14233 | active |
| gophish/gophish Gophish is an open-source phishing framework for running phishing simulations and security awareness training. It provides a web UI and RES… | 23 | 14152 | stable |
| rathole-org/rathole rathole is a lightweight, high-performance reverse proxy for NAT traversal written in Rust, exposing services behind NAT to the internet vi… | 86 | 14067 | stable |
| cert-manager/cert-manager cert-manager is a Kubernetes controller that adds Certificate and Issuer resource types to clusters and automates obtaining, renewing, and … | 98 | 14052 | stable |
| OJ/gobuster Gobuster is a fast, multi-threaded brute-forcing tool written in Go for enumerating web directories/files, DNS subdomains, virtual hosts, c… | 80 | 14038 | active |
| evilsocket/opensnitch OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch, intercepting and filtering outbound connections per a… | 79 | 14009 | active |
| thunderbird/thunderbird-android Thunderbird for Android is a free, open-source, privacy-focused email client for Android, formerly known as K-9 Mail and now part of the Mo… | 98 | 13923 | active |
| OpenNHP/opennhp OpenNHP is a lightweight, cryptography-powered open-source toolkit written in Go that implements the Cloud Security Alliance's Network-infr… | 94 | 13918 | active |
| libsodium libsodium is a modern, portable, easy-to-use C library for cryptographic operations, forked from NaCl with a compatible but extended API. I… | 83 | 13916 | stable |
| sunnyyoung/WeChatTweak A command-line tool that patches the WeChat macOS client to add features like preventing message revocation, blocking automatic updates, an… | 71 | 13827 | active |
| QwikDev/partytown Partytown is a lazy-loaded JavaScript library that relocates resource-intensive third-party scripts (analytics, ads, trackers) off the main… | 95 | 13765 | active |
| juice-shop/juice-shop OWASP Juice Shop is an intentionally insecure web application written in Node.js, Express, and Angular that covers vulnerabilities from the… | 94 | 13726 | active |
| fancyss fancyss is a transparent proxy plugin for ASUS routers running asuswrt/asuswrt-merlin firmware with a software center. It supports multiple… | 70 | 13712 | active |
| pwntools Pwntools is a Python CTF framework and exploit development library designed for rapid prototyping of binary exploits. It provides utilities… | 74 | 13660 | active |
| safing/portmaster Portmaster is a free and open-source application firewall and privacy suite for Windows and Linux desktops. It intercepts all network traff… | 95 | 13612 | active |
| DNSCrypt/dnscrypt-proxy dnscrypt-proxy is a flexible local DNS proxy that encrypts and authenticates DNS traffic using DNSCrypt v2, DNS-over-HTTPS, Anonymized DNS,… | 93 | 13600 | stable |
| E2B E2B is open-source infrastructure that lets AI agents run generated code inside secure, isolated cloud sandboxes (Linux VMs) via Python and… | 93 | 13559 | active |
| digininja/DVWA Damn Vulnerable Web Application (DVWA) is a PHP/MariaDB web application intentionally riddled with common web vulnerabilities at multiple d… | 70 | 13551 | active |
| openwall/john John the Ripper jumbo is an open-source offline password cracker supporting hundreds of hash and cipher types, from Unix and Windows passwo… | 75 | 13543 | active |
| SoftEther VPN SoftEther VPN is an open-source, cross-platform, multi-protocol VPN server and client software written in C. It supports SSL-VPN, OpenVPN, … | 70 | 13503 | active |
| ddgksf2013/ddgksf2013 A curated collection of ad-blocking rules, rewrite scripts, and ready-made configuration files for proxy tools like QuantumultX, Surge, Sha… | 69 | 13496 | active |
| nmap/nmap Nmap is the industry-standard open-source network scanner for host discovery, port scanning, service/version detection, and OS fingerprinti… | 77 | 13465 | stable |
| opencontainers/runc runc is a command-line tool for spawning and running containers on Linux according to the Open Container Initiative (OCI) runtime specifica… | 97 | 13415 | stable |
| awslabs/git-secrets git-secrets is a command-line tool that scans git commits, commit messages, and merge histories for secrets and credentials, rejecting comm… | 51 | 13380 | stable |
| mailcow/mailcow-dockerized mailcow: dockerized is a full-featured, self-hosted mail server suite delivered as a set of Docker containers, bundling Postfix, Dovecot, S… | 98 | 13330 | stable |
| threat9/routersploit RouterSploit is an open-source exploitation framework dedicated to embedded devices like routers, modeled after Metasploit. It provides mod… | 59 | 13223 | active |
| MetaMask MetaMask is a self-custodial crypto wallet available as a browser extension (Chrome, Firefox, Brave, Edge, Opera) and mobile app, enabling … | 95 | 13204 | active |
| objective-see/LuLu LuLu is a free, open-source macOS firewall that monitors and blocks unknown outgoing network connections. It uses a system extension and ne… | 97 | 13103 | active |
| mozilla-mobile/firefox-ios The official Mozilla monorepo containing Firefox for iOS and Firefox Focus for iOS, full-featured open-source web browsers built in Swift. … | 95 | 13033 | active |
| keeweb/keeweb KeeWeb is a free, cross-platform password manager compatible with KeePass kdbx database files, available as a desktop app (Electron) or a b… | 77 | 12986 | active |
| beemdevelopment/Aegis Aegis Authenticator is a free, open-source Android app for managing two-factor authentication (2FA) tokens. It stores HOTP/TOTP tokens in a… | 82 | 12974 | stable |
| mozilla-firefox/firefox Firefox is Mozilla's free and open-source web browser built on the Gecko engine, available for desktop and mobile platforms. It emphasizes … | 68 | 12971 | active |
| mvt-project/mvt Mobile Verification Toolkit (MVT) is a Python command-line toolkit for conducting forensic analysis of Android and iOS devices to detect tr… | 94 | 12967 | active |
| zoicware/RemoveWindowsAI A PowerShell script that forcibly removes or disables all AI features in Windows 11, including Copilot, Recall, and AI components in built-… | 68 | 12894 | active |
| anchore/grype Grype is an open-source vulnerability scanner for container images, filesystems, and SBOMs, written in Go by Anchore. It identifies known C… | 98 | 12789 | active |
| memstechtips/Winhance Winhance is a C#/WinUI3 desktop application for debloating, optimizing, and customizing Windows 10 and 11 systems. It provides a GUI for re… | 84 | 12711 | active |
| google/oss-fuzz OSS-Fuzz is Google's free continuous fuzzing service for open source software, combining fuzzing engines like libFuzzer, AFL++, and Honggfu… | 77 | 12594 | active |
| jopohl/urh Universal Radio Hacker (URH) is a complete open-source suite for investigating wireless protocols, with native support for many common Soft… | 10 | 12569 | active |
| secdev/scapy Scapy is a powerful Python-based interactive packet manipulation program and library that can forge, decode, send, capture, and match packe… | 75 | 12501 | stable |
| Atomic Red Team Atomic Red Team is a library of small, portable detection tests mapped to the MITRE ATT&CK framework, letting security teams validate their… | 77 | 12457 | active |
| future-architect/vuls Vuls is an agent-less vulnerability scanner written in Go that detects CVEs on Linux, FreeBSD, Windows, macOS, containers, WordPress, progr… | 98 | 12243 | active |
| JingMatrix/Vector Vector is a Zygisk module providing a high-performance ART hooking framework for modern Android, maintaining API compatibility with the ori… | 86 | 12237 | active |
| vanhauser-thc/thc-hydra THC-Hydra is a parallelized network login cracker supporting dozens of protocols (SSH, FTP, HTTP forms, SMB, RDP, databases, and more). It … | 80 | 12200 | active |
| rtyley/bfg-repo-cleaner BFG Repo-Cleaner is a command-line tool for removing large files, passwords, credentials, and other unwanted data from Git repository histo… | 24 | 12175 | active |
| open-policy-agent/opa Open Policy Agent (OPA) is a general-purpose, open-source policy engine that unifies policy enforcement across the stack using a high-level… | 99 | 12164 | stable |
| justcallmekoko/ESP32Marauder ESP32 Marauder is a suite of WiFi and Bluetooth offensive and defensive security tools distributed as firmware for ESP32-based hardware. It… | 99 | 12134 | active |
| kubeshark/kubeshark Kubeshark is an eBPF-powered network observability tool for Kubernetes that indexes cluster-wide L4/L7 traffic with full Kubernetes context… | 98 | 12059 | active |
| gravitl/netmaker Netmaker is an open-source platform that automates the creation and management of WireGuard-based virtual mesh networks, from homelab to en… | 91 | 11763 | active |