function: security
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| jason5ng32/MyIP MyIP (IPCheck.ing) is an open-source, self-hostable web application that acts as an all-in-one IP toolbox. It shows your IPv4/IPv6 and geol… | 94 | 11756 | active |
| BishopFox/sliver Sliver is an open-source cross-platform adversary emulation and red team framework written in Go. It generates dynamically compiled implant… | 90 | 11729 | active |
| chaitin/xray xray is a security assessment tool from Chaitin that scans web applications for common vulnerabilities like XSS and SQL injection, supporti… | 23 | 11720 | active |
| kubescape/kubescape Kubescape is an open-source Kubernetes security platform (a CNCF incubating project) offering misconfiguration scanning, vulnerability asse… | 98 | 11692 | active |
| egulias/EmailValidator A PHP library for validating email addresses against multiple RFC standards (5321, 5322, 6530-6532, 1035). It offers pluggable validation s… | 35 | 11641 | stable |
| immortalwrt/immortalwrt ImmortalWrt is an open-source fork of OpenWrt, a Linux-based operating system for embedded network devices like WiFi routers. It targets ma… | 77 | 11498 | active |
| daijro/camoufox Camoufox is an open-source anti-detect browser built on Firefox for web scraping and AI agents, with browser fingerprint spoofing and Playw… | 90 | 11455 | active |
| Detect It Easy Detect It Easy (DiE) is a cross-platform file type identification tool that uses signature-based and heuristic analysis to detect compilers… | 81 | 11420 | active |
| jhy/jsoup jsoup is a Java library for parsing, manipulating, and cleaning real-world HTML and XML, implementing the WHATWG HTML5 specification to pro… | 95 | 11387 | stable |
| 0x4m4/hexstrike-ai HexStrike AI is an MCP server that bridges LLM agents (Claude, GPT, Copilot) with 150+ cybersecurity tools for autonomous penetration testi… | 61 | 11381 | active |
| veracrypt/VeraCrypt VeraCrypt is a free, open-source disk encryption application based on TrueCrypt 7.1a with security enhancements. It creates encrypted volum… | 84 | 11377 | stable |
| TencentCloud/CubeSandbox CubeSandbox is a high-performance sandbox service for AI agents built on RustVMM and KVM, creating hardware-isolated MicroVM sandboxes in u… | 81 | 11354 | active |
| LiveContainer/LiveContainer LiveContainer is an iOS app launcher that runs apps inside a single host application without actually installing them, bypassing the free d… | 89 | 11322 | active |
| pymumu/smartdns SmartDNS is a local DNS server written in C that queries multiple upstream DNS servers concurrently and returns the fastest-responding IP t… | 97 | 11273 | active |
| angristan/wireguard-install A bash script that installs and configures a WireGuard VPN server on Linux with NAT and IPv4/IPv6 support. Re-running the script lets you a… | 68 | 11247 | active |
| hashsigs A Rust library implementing hash-based post-quantum digital signatures (WOTS+ and SHRINCS primitives) with an account policy wrapper. It co… | 62 | 11217 | active |
| QuipNetwork/hashsigs-solidity A Solidity implementation of the Winternitz One-Time Signature Plus (WOTS+) scheme, a hash-based post-quantum signature algorithm. It enabl… | 63 | 11216 | active |
| QuipNetwork/hashsigs-ts A TypeScript library implementing hash-based digital signatures, specifically the WOTS+ (Winternitz One-Time Signature Plus) scheme. It is … | 62 | 11199 | active |
| podman-container-tools/skopeo Skopeo is a command line utility for performing operations on container images and image registries, such as copying, inspecting, deleting,… | 98 | 11194 | stable |
| ifixai-ai/iFixAi iFixAi is an open-source CLI diagnostic tool that independently audits AI agents for misalignment, hallucination, manipulation, deception, … | 81 | 11173 | active |
| ZCShou/GoGoGo GoGoGo (影梭) is an Android app that fakes GPS location using Android's mock location debug API combined with Baidu Maps, without requiring r… | 47 | 11111 | active |
| mRemoteNG/mRemoteNG mRemoteNG is an open-source, tabbed, multi-protocol remote connections manager for Windows, supporting RDP, VNC, SSH, HTTP/S and more. It l… | 81 | 11070 | active |
| quay/clair Clair is an open-source service for static analysis of vulnerabilities in container images (OCI and Docker). It indexes image contents via … | 74 | 11052 | active |
| siderolabs/talos Talos Linux is a minimal, immutable, API-managed Linux distribution purpose-built for running Kubernetes. It ships no shell, SSH, or packag… | 99 | 11024 | stable |
| beefproject/beef BeEF (Browser Exploitation Framework) is a penetration testing tool focused on the web browser, hooking one or more browsers and using them… | 72 | 10983 | active |
| AlessandroZ/LaZagne LaZagne is an open-source Python application that recovers passwords stored locally by common software such as browsers, mail clients, WiFi… | 42 | 10963 | active |
| SonarQube SonarQube is a continuous code inspection platform that performs static analysis to track code quality, security vulnerabilities, and techn… | 98 | 10928 | stable |
| google/osv-scanner OSV-Scanner is Google's official CLI and Go library frontend to the OSV.dev vulnerability database, scanning project dependencies across ma… | 99 | 10924 | active |
| bunkerity/bunkerweb BunkerWeb is an open-source, cloud-native Web Application Firewall (WAF) built on NGINX that acts as a reverse proxy to protect web service… | 95 | 10865 | active |
| Monero Monero is the reference implementation of the Monero (XMR) privacy-focused cryptocurrency, including the full node daemon (monerod), wallet… | 93 | 10803 | active |
| pwndbg/pwndbg Pwndbg is a Python-based plug-in for GDB and LLDB that enhances low-level debugging with features tailored to reverse engineering and explo… | 94 | 10801 | active |
| yokoffing/Betterfox Betterfox is a curated user.js preference file that hardens Mozilla Firefox for privacy, security, and speed via about:config tweaks. It bu… | 93 | 10795 | active |
| helmetjs/helmet Helmet is a Node.js middleware library that secures Express and Connect apps by setting HTTP response headers such as Content-Security-Poli… | 75 | 10729 | stable |
| sullo/nikto Nikto is a Perl-based command-line web server scanner that tests servers for dangerous files, outdated software, misconfigurations, and kno… | 89 | 10684 | active |
| rofl0r/proxychains-ng ProxyChains-NG is a UNIX CLI tool that uses LD_PRELOAD to hook socket-related libc functions in dynamically linked programs and redirect th… | 58 | 10672 | active |
| data-privacy-stack/presidio Presidio is an open-source Python SDK for detecting, redacting, masking, and anonymizing sensitive data (PII) in text, images, and structur… | 93 | 10644 | active |
| krzyzanowskim/CryptoSwift CryptoSwift is a pure Swift library providing standard cryptographic algorithms including AES, ChaCha20, SHA family hashes, HMAC, and CRC. … | 81 | 10568 | active |
| blacklanternsecurity/bbot BBOT is a recursive, multipurpose internet scanner built in Python for automating OSINT reconnaissance, bug bounty hunting, and attack surf… | 99 | 10508 | active |
| Dr-TSNG/ZygiskNext Zygisk Next is a standalone implementation of the Zygisk injection framework for Android, providing Zygisk API support for KernelSU and ser… | 98 | 10427 | active |
| pennersr/django-allauth django-allauth is an integrated set of Django applications covering authentication, registration, account management, and third-party (soci… | 76 | 10375 | stable |
| projectdiscovery/httpx httpx is a fast, multi-purpose HTTP toolkit written in Go that runs multiple probes (status codes, titles, TLS certificates, tech detection… | 93 | 10322 | active |
| Astrid Astrid is a portable, capability-secure operating system for composable software, where every component runs as a sealed WebAssembly capsul… | 80 | 10273 | active |
| openai/codex-security OpenAI's Codex Security is a CLI and TypeScript SDK that uses AI to find, validate, and fix security vulnerabilities in codebases. It suppo… | 80 | 10202 | active |
| xykt/IPQuality A shell-based IP quality check script that reports IP type, risk scores from multiple databases, streaming/AI service unlock status, email … | 68 | 10139 | active |
| samratashok/nishang Nishang is a framework and collection of PowerShell scripts and payloads for offensive security, penetration testing, and red teaming. It c… | 23 | 10069 | active |
| shmilylty/OneForAll OneForAll is a powerful Python-based subdomain collection and enumeration tool for reconnaissance. It gathers subdomains via brute forcing,… | 59 | 10029 | active |
| zhishile/codex-auth-helper A Chrome (Manifest V3) browser extension that extracts a logged-in ChatGPT session locally and generates a Codex-compatible auth. credentia… | 59 | 10017 | active |
| CodeQL CodeQL is a semantic code analysis engine that treats code as a queryable database, letting you write queries to find security vulnerabilit… | 77 | 10016 | active |
| yonggekkk/sing-box-yg A one-click Shell script for VPS servers that installs and configures five coexisting proxy protocols (Vless-Reality, Vmess-WS/Argo, Hyster… | 62 | 9977 | active |
| thewhiteh4t/seeker Seeker is a security testing tool that hosts a fake website asking users for browser location permission, capturing GPS coordinates (longit… | 72 | 9937 | active |
| Flipper-XFW/Xtreme-Firmware Xtreme Firmware is a feature-rich custom firmware for the Flipper Zero multitool device, written in C. It bundles many community apps, adde… | 10 | 9907 | active |
| Openwrt-Passwall/openwrt-passwall Passwall is a LuCI application for OpenWrt routers that manages multiple proxy clients (Xray, Sing-box, Shadowsocks, Hysteria, etc.) to rou… | 99 | 9879 | active |
| AGWA/git-crypt git-crypt is a command-line tool that provides transparent encryption and decryption of selected files in a git repository. It lets teams s… | 45 | 9871 | active |
| paramiko/paramiko Paramiko is a pure-Python implementation of the SSHv2 protocol providing both client and server functionality, built on the cryptography li… | 69 | 9837 | stable |
| go-acme/lego Lego is an ACME client and Go library for obtaining, renewing, and revoking TLS certificates from Let's Encrypt and other ACME CAs. It supp… | 98 | 9835 | active |
| wireshark/wireshark Wireshark is the world's leading open-source network protocol analyzer (packet sniffer) with a Qt GUI, deep inspection of hundreds of proto… | 77 | 9782 | stable |
| ModSecurity ModSecurity (libmodsecurity v3) is an open source, cross-platform web application firewall (WAF) engine written in C++ that inspects HTTP(S… | 90 | 9752 | stable |
| wpscanteam/wpscan WPScan is a black-box WordPress security scanner written in Ruby, used by security professionals and site maintainers to audit WordPress in… | 93 | 9740 | active |
| docker/docker-bench-security Docker Bench for Security is a shell script that automates checks of Docker hosts and containers against the CIS Docker Benchmark best prac… | 61 | 9693 | active |
| TechnitiumSoftware/DnsServer Technitium DNS Server is an open-source, cross-platform authoritative and recursive DNS server built on .NET, designed for self-hosting wit… | 94 | 9655 | stable |
| spring-projects/spring-security Spring Security is a powerful and highly customizable authentication and access-control framework for Java applications, and the de-facto s… | 99 | 9612 | stable |
| sparkle-project/Sparkle Sparkle is a secure and reliable software update framework for macOS applications, serving as the de-facto standard used by thousands of ap… | 95 | 9567 | stable |
| malwaredllc/byob BYOB is an open-source post-exploitation framework written in Python, featuring a command-and-control server with a web GUI, a cross-platfo… | 76 | 9498 | active |
| anchore/syft Syft is a CLI tool and Go library that generates Software Bill of Materials (SBOM) documents from container images, filesystems, and archiv… | 98 | 9462 | active |
| cloudflare/cfssl CFSSL is Cloudflare's PKI/TLS toolkit for signing, verifying, and bundling TLS certificates, available as both a command line tool and an H… | 58 | 9462 | stable |
| telekom-security/tpotce T-Pot is an all-in-one, optionally distributed honeypot platform that bundles 20+ honeypots with the Elastic Stack for visualization, live … | 67 | 9443 | active |
| klzgrad/naiveproxy NaïveProxy is a censorship-resistant proxy that uses Chromium's network stack to make proxy traffic indistinguishable from regular Chrome b… | 92 | 9407 | active |
| AdAway/AdAway AdAway is a free and open source ad blocker for Android that blocks ads system-wide using the hosts file or a local VPN. It supports both r… | 52 | 9367 | active |
| sensepost/objection objection is a runtime mobile exploration toolkit powered by Frida for assessing the security posture of iOS and Android applications witho… | 88 | 9347 | active |
| falcosecurity/falco Falco is a CNCF-graduated cloud native runtime security tool for Linux that monitors kernel events (syscalls) via eBPF or kernel modules an… | 94 | 9305 | stable |
| freebsd/freebsd-src The official publish-only Git mirror of the FreeBSD source tree, containing the complete kernel, userland, libraries, boot loader, and buil… | 77 | 9294 | stable |
| dessant/buster Buster is a browser extension that solves reCAPTCHA challenges by completing their audio challenges using speech recognition. It works on C… | 91 | 9276 | active |
| unicorn-engine/unicorn Unicorn is a lightweight, multi-architecture CPU emulator framework based on QEMU, supporting ARM, ARM64, M68K, MIPS, PowerPC, RISC-V, SPAR… | 75 | 9268 | stable |
| git-ecosystem/git-credential-manager Git Credential Manager is a secure, cross-platform Git credential helper built on .NET that stores credentials in the OS-native secure stor… | 93 | 9227 | active |
| evilsocket/pwnagotchi Pwnagotchi is an A2C deep reinforcement learning agent built on bettercap that learns from its surrounding WiFi environment to maximize cap… | 67 | 9189 | active |
| testssl/testssl.sh testssl.sh is a free, bash-based command line tool that checks any server's service on any port for TLS/SSL cipher, protocol, and cryptogra… | 88 | 9181 | active |
| Next-Flip/Momentum-Firmware Momentum Firmware is a feature-rich, stable, and highly customizable custom firmware for the Flipper Zero multitool device, written in C. I… | 75 | 9081 | active |
| certimate-go/certimate Certimate is a free, open-source, self-hosted ACME tool for managing SSL/TLS certificates with a visual web UI. It automates the full certi… | 85 | 9071 | active |
| firezone/firezone Firezone is an open-source, enterprise-ready zero-trust access platform built on WireGuard that replaces traditional VPNs with granular, po… | 95 | 9042 | active |
| angr angr is a Python 3 binary analysis framework that loads executables across many architectures and formats, providing disassembly, IR liftin… | 77 | 9039 | active |
| NVIDIA/garak garak is a command-line LLM vulnerability scanner that probes large language models for failures like hallucination, data leakage, prompt i… | 91 | 9033 | active |
| frohoff/ysoserial ysoserial is a proof-of-concept command-line tool that generates serialized Java payloads exploiting unsafe object deserialization using ga… | 48 | 9033 | active |
| capstone-engine/capstone Capstone is a lightweight, multi-architecture, multi-platform disassembly framework written in pure C, designed to be the ultimate disassem… | 97 | 8976 | stable |
| bridgecrewio/checkov Checkov is a static code analysis tool for infrastructure as code (Terraform, CloudFormation, Kubernetes, Helm, Dockerfile, and more) that … | 95 | 8973 | stable |
| cookieY/Yearning Yearning is a self-hosted web-based SQL audit platform for MySQL, providing audit tickets with approval workflows, automated syntax checkin… | 79 | 8964 | active |
| securego/gosec gosec is a security scanner for Go source code that inspects the AST and SSA representations to detect common security problems. It include… | 99 | 8933 | active |
| Universal-Debloater-Alliance/universal-android-debloater-next-generation A cross-platform desktop GUI application written in Rust that uses ADB to remove bloatware from non-rooted Android devices. It aims to impr… | 73 | 8926 | active |
| project-chip/connectedhomeip The official open-source SDK for Matter (formerly Project CHIP), the Connectivity Standards Alliance's IP-based smart home connectivity sta… | 90 | 8902 | active |
| henrypp/simplewall Simplewall is a lightweight, open-source Windows application for configuring network activity via the Windows Filtering Platform (WFP). It … | 75 | 8885 | active |
| MuntashirAkon/AppManager App Manager is a full-featured open-source package manager and app inspector for Android. It lets users install, uninstall, back up, and de… | 92 | 8829 | active |
| maxgoedjen/secretive Secretive is a native macOS app that stores and manages SSH keys inside the Mac's Secure Enclave, making them non-exportable. It adds Touch… | 85 | 8819 | active |
| yogeshojha/rengine reNgine is a self-hosted automated web reconnaissance and vulnerability scanning framework with configurable recon engines, data correlatio… | 64 | 8795 | active |
| smallstep/certificates step-ca is an online private certificate authority (X.509 and SSH) and ACME server for secure, automated certificate management in DevOps e… | 91 | 8779 | active |
| Ackites/Nrfr Nrfr is a root-free Android tool that changes the SIM card country code by calling native system APIs (CarrierConfigLoader) with Shizuku pe… | 37 | 8733 | active |
| itsfatduck/optimizerDuck optimizerDuck is a free, open-source Windows optimization tool built with C#/WinUI that provides performance tweaks, privacy controls, debl… | 83 | 8681 | active |
| ViRb3/wgcf wgcf is an unofficial cross-platform command-line tool for Cloudflare Warp written in Go. It registers Warp accounts, binds Warp+ license k… | 93 | 8641 | active |
| Kata Containers Kata Containers is an open source container runtime that builds lightweight virtual machines which plug seamlessly into the container ecosy… | 99 | 8606 | stable |
| Tsunami Security Scanner Tsunami is a general-purpose network security scanner from Google that detects high-severity vulnerabilities with high confidence. It relie… | 74 | 8606 | active |
| stamparm/maltrail Maltrail is a malicious network traffic detection system that matches observed domains, URLs, IP addresses, and User-Agent values against o… | 98 | 8587 | active |
| PrivateBin/PrivateBin PrivateBin is a minimalist, self-hosted pastebin where the server stores only encrypted data and never learns the paste contents. Encryptio… | 98 | 8572 | active |