function: security
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| spesmilo/electrum Electrum is a lightweight Bitcoin wallet client written in Python that uses SPV verification instead of downloading the full blockchain. It… | 77 | 8572 | stable |
| wangyu-/udp2raw A C++ command-line tunnel that converts UDP traffic into encrypted FakeTCP, UDP, or ICMP traffic using raw sockets, helping bypass UDP fire… | 44 | 8550 | active |
| skeeto/endlessh Endlessh is an SSH tarpit daemon written in C that slowly sends an endless, random SSH pre-authentication banner to keep malicious clients … | 23 | 8542 | stable |
| HavocFramework/Havoc Havoc is a modern, malleable post-exploitation command and control (C2) framework with a Go teamserver, a Qt-based cross-platform client, a… | 10 | 8507 | active |
| containers/bubblewrap Bubblewrap is a low-level unprivileged sandboxing tool for Linux that uses user namespaces to let any user run processes in isolated contai… | 91 | 8490 | active |
| hugsy/gef GEF (GDB Enhanced Features) is a single-file Python plugin for GDB that adds a modern, feature-rich debugging experience for exploit develo… | 77 | 8326 | active |
| ZyperWave/ZyperWinOptimize ZyperWin++ is a lightweight Windows optimization tool built in C# (.NET 4) supporting Windows 7 through Windows 11. It offers performance a… | 44 | 8291 | active |
| Sysdig Sysdig is a Linux system exploration and troubleshooting tool that captures system calls and OS events at the kernel level, with native sup… | 78 | 8289 | active |
| ionuttbara/windows-defender-remover A script-based tool that removes or disables Windows Defender and related security components (Windows Security app, SmartScreen, VBS, tamp… | 91 | 8274 | active |
| kishikawakatsumi/KeychainAccess KeychainAccess is a simple Swift wrapper around Apple's Keychain APIs for iOS, macOS, watchOS, tvOS, and Mac Catalyst. It provides an ergon… | 23 | 8256 | stable |
| PyCQA/bandit Bandit is a security-oriented static analysis tool that finds common security issues in Python code. It parses each file into an AST, runs … | 86 | 8242 | active |
| aquasecurity/kube-bench kube-bench is a Go-based tool that checks whether Kubernetes clusters are deployed securely by running the checks documented in the CIS Kub… | 98 | 8155 | active |
| ntop/ntopng ntopng is a web-based network traffic monitoring and cybersecurity application that provides real-time visibility into hosts, applications,… | 73 | 8114 | stable |
| Solid Solid is a set of open standards and tools for building decentralized web applications where users store their data in personal online data… | 10 | 8093 | active |
| kyverno/kyverno Kyverno is a Kubernetes-native policy engine for policy as code, letting platform teams author validate, mutate, generate, and cleanup poli… | 99 | 8075 | stable |
| Lakr233/vphone-cli A Swift CLI tool that boots virtual iPhone instances on Apple Silicon Macs using Apple's Virtualization.framework and PCC research VM infra… | 82 | 8071 | active |
| epi052/feroxbuster feroxbuster is a fast, recursive content discovery tool written in Rust that performs forced browsing against web servers. It brute-forces … | 72 | 8035 | active |
| six2dez/reconftw reconFTW is an open-source (MIT) automated reconnaissance framework written in Shell that orchestrates 80+ security tools to perform full r… | 86 | 8025 | active |
| robinmoisson/staticrypt StatiCrypt is a CLI tool and browser-based utility that encrypts static HTML files with AES-256 using a password, producing a self-containe… | 64 | 8019 | active |
| v1s1t0r1sh3r3/airgeddon A multi-use bash script for auditing wireless networks on Linux, wrapping tools like aircrack-ng to automate attacks such as evil twin, WPS… | 93 | 7952 | active |
| superradcompany/microsandbox Microsandbox is a local-first microVM runtime and library for running untrusted workloads (AI agents, user code, plugins, CI jobs) inside f… | 89 | 7943 | active |
| zeek/zeek Zeek (formerly Bro) is an open-source network security monitor and analysis framework that passively inspects network traffic and produces … | 99 | 7908 | stable |
| PCILeech PCILeech is DMA attack software that uses PCIe hardware devices (or software memory acquisition methods) to read and write target system me… | 65 | 7899 | active |
| tutao/tutanota Tuta Mail (formerly Tutanota) is an open-source, end-to-end encrypted email service with integrated encrypted calendar and contacts, availa… | 95 | 7874 | active |
| APatch APatch is a kernel-based root solution for Android devices that patches the Android kernel and system, relying on KernelPatch. It supports … | 86 | 7862 | active |
| vercel-labs/deepsec Deepsec is an open-source, agent-powered vulnerability scanner that runs AI coding agents over your entire existing codebase to find hard-t… | 58 | 7828 | active |
| EmenstaNougat/ESP32-BlueJammer ESP32-BlueJammer is firmware for an ESP32 paired with nRF24 modules that disrupts 2.4GHz communications (Bluetooth, BLE, WiFi, RC) by flood… | 50 | 7822 | active |
| Scout Suite Scout Suite is an open source multi-cloud security auditing tool that assesses the security posture of cloud environments. It gathers confi… | 42 | 7801 | stable |
| kelektiv/node.bcrypt.js A Node.js library providing bcrypt password hashing implemented as a native C++ addon. It handles salting and hashing passwords for secure … | 57 | 7800 | stable |
| mandiant/commando-vm Commando VM is a fully customizable Windows-based security distribution for penetration testing and red teaming, packaged as a PowerShell i… | 53 | 7791 | active |
| hfiref0x/UACME UACMe is a C-based command-line tool that demonstrates dozens of Windows User Account Control (UAC) bypass techniques abusing built-in Auto… | 87 | 7764 | active |
| r0ysue/r0capture A Frida-based universal Android application-layer packet capture script that hooks SSL/TLS regardless of certificate pinning, obfuscation, … | 64 | 7750 | active |
| boltgolt/howdy Howdy provides Windows Hello-style facial authentication for Linux using IR emitters and a camera with facial recognition. It integrates wi… | 38 | 7738 | active |
| alsyundawy/Microsoft-Office-For-MacOS A shell-script-based installer that downloads and installs Microsoft Office suites for macOS, including serializers and troubleshooting res… | 98 | 7737 | active |
| pyca/cryptography pyca/cryptography is a Python package providing cryptographic recipes and primitives, aiming to be Python's 'cryptographic standard library… | 77 | 7725 | stable |
| yaklang/yakit Yakit is an all-in-one interactive application security testing platform built as a GUI client for the Yaklang security DSL engine over gRP… | 95 | 7700 | active |
| dependency-check/DependencyCheck OWASP Dependency-Check is a Software Composition Analysis (SCA) tool that identifies publicly disclosed vulnerabilities (CVEs) in a project… | 98 | 7671 | active |
| maharmstone/btrfs WinBtrfs is an open-source Btrfs filesystem driver for Windows, reimplemented from scratch in C with no Linux kernel code. It supports read… | 67 | 7637 | active |
| netblue30/firejail Firejail is a SUID security sandbox program for Linux that uses kernel namespaces, seccomp-bpf filters, and Linux capabilities to run appli… | 82 | 7611 | active |
| tiagozip/cap Cap is a lightweight, open-source, self-hosted CAPTCHA alternative to reCAPTCHA, hCaptcha, and Cloudflare Turnstile. It uses invisible proo… | 81 | 7610 | active |
| rustls/rustls Rustls is a modern TLS library written in Rust implementing TLS 1.2 and TLS 1.3 for both clients and servers. It provides secure defaults w… | 98 | 7585 | stable |
| youki-dev/youki youki is an implementation of the OCI container runtime specification written in Rust, serving as a low-level container runtime similar to … | 94 | 7566 | active |
| aceberg/WatchYourLAN WatchYourLAN is a lightweight network IP scanner written in Go with a web GUI, designed to discover and track hosts on a local network via … | 51 | 7549 | active |
| aircrack-ng/aircrack-ng Aircrack-ng is a complete suite of command-line tools for assessing WiFi network security, covering packet capture, injection, monitor mode… | 62 | 7541 | active |
| mullvad/mullvadvpn-app The official Mullvad VPN client app for desktop and mobile, including a Rust system service/daemon, an Electron-based GUI, a CLI, and dedic… | 99 | 7507 | active |
| Morphe Morphe is an open-source Android app patcher that modifies APKs of apps like YouTube, YouTube Music, and Reddit to add features such as ad … | 83 | 7487 | active |
| lcobucci/jwt A PHP library for creating, parsing, and validating JSON Web Tokens (JWT) and JSON Web Signatures (JWS) per RFC 7519. It is installed via C… | 83 | 7483 | stable |
| Mailu/Mailu Mailu is a full-featured, self-hosted email server distributed as a set of Docker images, providing SMTP, IMAP, webmail, and an admin inter… | 98 | 7474 | active |
| arkime/arkime Arkime is an open-source, large-scale network analysis, full packet capture, and session indexing system that stores traffic in standard PC… | 99 | 7459 | active |
| TigerVNC/tigervnc TigerVNC is a high-performance, multi-platform implementation of VNC (Virtual Network Computing), providing both a client (vncviewer) and s… | 86 | 7424 | active |
| jonasstrehle/supercookie A demonstration web application that assigns persistent unique identifiers to website visitors via favicon-based browser fingerprinting. It… | 10 | 7387 | active |
| Col-E/Recaf Recaf is a modern Java bytecode editor with a JavaFX GUI that abstracts away low-level class file complexities like constant pools and stac… | 69 | 7355 | active |
| projectcalico/calico Calico is an open-source cloud-native networking and network security platform for Kubernetes, providing pod networking (CNI), network poli… | 99 | 7336 | stable |
| greatfire/wiki A GreatFire wiki/repository page that serves as the distribution hub for FreeBrowser (自由浏览), an Android app for circumventing internet cens… | 59 | 7277 | active |
| aonez/Keka Keka is a file archiver application for macOS and iOS that supports compressing and extracting many archive formats such as zip, 7z, rar, a… | 88 | 7263 | active |
| presidentbeef/brakeman Brakeman is a free, open-source static analysis security scanner built specifically for Ruby on Rails applications. It analyzes Rails sourc… | 93 | 7262 | stable |
| SQLCipher SQLCipher is an open-source fork of SQLite that adds full-database 256-bit AES encryption, tamper detection, and strong key derivation. It … | 94 | 7254 | stable |
| Lerist/FakeLocation FakeLocation is an Android app for mocking GPS and location data, supporting both root and non-root modes. It simulates GPS signals, cell t… | 10 | 7222 | active |
| apache/caldera Apache Caldera is a cybersecurity platform for automated adversary emulation built on the MITRE ATT&CK framework. It provides an asynchrono… | 79 | 7213 | active |
| charmbracelet/soft-serve Soft Serve is a self-hostable Git server that runs as a single Go binary and is managed entirely from the command line. It serves repositor… | 97 | 7202 | active |
| Kunzisoft/KeePassDX KeePassDX is a lightweight, open-source password manager and encrypted vault for Android, compatible with the KeePass format (.kdb/.kdbx). … | 96 | 7182 | active |
| openbao/openbao OpenBao is an open-source, identity-based secrets management system for storing, distributing, and rotating sensitive data such as secrets,… | 93 | 7177 | active |
| Cisco-Talos/clamav ClamAV is an open-source antivirus engine and toolkit for detecting trojans, viruses, malware, and other malicious threats. It includes a m… | 98 | 7176 | active |
| hwdsl2/docker-ipsec-vpn-server A Docker image that runs a self-hosted IPsec VPN server supporting IPsec/L2TP, Cisco IPsec, and IKEv2, built on Libreswan and xl2tpd. It au… | 77 | 7123 | active |
| LibChecker/LibChecker An Android app that inspects libraries, native ABIs, permissions, components, and signing details of installed apps and APK files. It also … | 84 | 7117 | active |
| Intel Wi-Fi for macOS (itlwm + HeliPort) itlwm is an open-source kernel extension providing Intel Wi-Fi adapter support on macOS, ported largely from OpenBSD's iwm/iwx/net80211 dri… | 23 | 7111 | active |
| ayoubfaouzi/al-khaser Al-Khaser is a proof-of-concept Windows application that demonstrates a wide range of malware anti-analysis techniques, including anti-debu… | 73 | 7108 | active |
| gopasspw/gopass gopass is a command-line password manager for teams, serving as a drop-in replacement for the standard UNIX pass tool. It encrypts secrets … | 82 | 7107 | stable |
| RsaCtfTool/RsaCtfTool A Python CLI tool that attacks weak RSA public keys to recover private keys and decrypt ciphertext, combining many factorization and lattic… | 76 | 7097 | active |
| guardicore/monkey Infection Monkey is an open-source adversary emulation platform that simulates malware-like self-propagation across a network to test secur… | 31 | 7076 | active |
| onionshare/onionshare OnionShare is an open-source desktop and mobile application that lets users securely and anonymously share files, host websites, and chat o… | 86 | 7068 | active |
| leminlimez/Nugget Nugget is a cross-platform desktop GUI application for customizing iOS and iPadOS devices without jailbreaking, using Apple's MobileDevice/… | 90 | 7056 | active |
| stalniy/casl CASL is an isomorphic JavaScript authorization library that restricts what resources a user is allowed to access, using declarative rules t… | 98 | 7055 | stable |
| markqvist/Reticulum Reticulum is a cryptography-based networking stack written in Python that builds encrypted, resilient local and wide-area networks over LoR… | 99 | 7046 | active |
| NVIDIA-NeMo/Guardrails NVIDIA NeMo Guardrails is an open-source Python toolkit for adding programmable guardrails to LLM-based conversational applications. It sit… | 93 | 7017 | active |
| LasCC/HackTools HackTools is an all-in-one browser extension for offensive security professionals that bundles penetration testing tools like XSS payloads,… | 23 | 7002 | active |
| simple-login/app SimpleLogin is an open-source email aliasing service that lets users create unique aliases to receive and send emails without exposing thei… | 94 | 6950 | active |
| OpenSignLabs/OpenSign OpenSign is a free, open-source document e-signing application and DocuSign alternative built with React, Node.js, and MongoDB. It supports… | 94 | 6919 | active |
| Mbed-TLS/mbedtls Mbed TLS is a portable C library implementing TLS, DTLS, and X.509 certificate handling, plus a reference implementation of the PSA Cryptog… | 92 | 6918 | stable |
| lintsinghua/DeepAudit DeepAudit is an open-source multi-agent AI system for automated code vulnerability discovery and security auditing, with a React frontend a… | 72 | 6905 | active |
| TelegramMessenger/MTProxy MTProxy is the official MT-Proto proxy server for Telegram, written in C. It lets users self-host a proxy so others can access Telegram whe… | 66 | 6904 | active |
| 0xERR0R/blocky Blocky is a fast, lightweight DNS proxy and ad-blocker for local networks, written in Go. It blocks ads and malware via external allow/deny… | 98 | 6895 | active |
| lwthiker/curl-impersonate A special build of curl (and libcurl) whose TLS and HTTP/2 handshakes are identical to real browsers like Chrome, Edge, Safari, and Firefox… | 23 | 6895 | active |
| MacPass/MacPass MacPass is a native macOS KeePass password manager client that opens and manages KDBX password databases. It is written in Objective-C and … | 32 | 6855 | active |
| haproxy/haproxy HAProxy is a fast, reliable open-source reverse proxy and load balancer for TCP and HTTP-based applications, providing high availability, T… | 77 | 6809 | stable |
| travist/jsencrypt JSEncrypt is a tiny, zero-dependency JavaScript library for OpenSSL-compatible RSA encryption, decryption, signing, and key generation. It … | 66 | 6804 | active |
| urbanadventurer/WhatWeb WhatWeb is a command-line web scanner that identifies the technologies powering websites, including CMSs, web servers, JavaScript libraries… | 76 | 6800 | stable |
| fleetdm/fleet Fleet is an open-source device management (MDM) and security platform for IT and security teams, built on osquery. It provides cross-OS dev… | 95 | 6780 | stable |
| ticarpi/jwt_tool A Python command-line toolkit for validating, forging, scanning, and tampering with JSON Web Tokens (JWTs). It automates checks for known J… | 31 | 6754 | active |
| chaifeng/ufw-docker A shell-based tool that fixes the well-known security flaw where Docker bypasses UFW firewall rules and exposes published ports to the publ… | 69 | 6749 | active |
| AFLplusplus/AFLplusplus AFL++ is a superior, actively maintained fork of American Fuzzy Lop, a coverage-guided fuzzer with many mutators, power schedules, and inst… | 92 | 6736 | active |
| cppcheck-opensource/cppcheck Cppcheck is an open-source static analysis tool for C and C++ code that detects bugs, undefined behavior, and dangerous coding constructs w… | 87 | 6733 | stable |
| VeNoMouS/cloudscraper A Python library that wraps Requests to bypass Cloudflare's anti-bot protection pages (IUAM), supporting challenge types v1, v2, v3, and Tu… | 34 | 6726 | active |
| superagent-ai/superagent Superagent is an open-source SDK and platform for securing AI applications and agents, offering runtime guardrails that block prompt inject… | 78 | 6719 | active |
| bleachbit/bleachbit BleachBit is an open-source system cleaner for Windows and Linux that frees disk space and protects privacy by deleting caches, cookies, lo… | 95 | 6713 | stable |
| neutrinolabs/xrdp xrdp is an open-source RDP server that provides graphical login to remote Linux machines using the Microsoft Remote Desktop Protocol. It ac… | 92 | 6708 | stable |
| infobyte/faraday Faraday is an open-source vulnerability management platform that aggregates, normalizes, and deduplicates findings from over 90 security to… | 98 | 6695 | active |
| LumaTeam/Luma3DS Luma3DS is custom firmware for the Nintendo 3DS family of consoles that patches and reimplements parts of the system software. It adds home… | 81 | 6646 | active |
| iorate/ublacklist uBlacklist is a browser extension that blocks specified sites from appearing in Google and other major search engine results. It supports m… | 98 | 6623 | active |
| The-Z-Labs/linux-exploit-suggester A shell-based auditing tool that assesses a Linux system's exposure to publicly known kernel privilege escalation exploits based on kernel … | 65 | 6593 | active |