function: security
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| rhaidiz/broxy Broxy is an open-source HTTP/HTTPS intercepting proxy written in Go, built on goproxy with a Qt5-based GUI. It offers an interceptor, filte… | 23 | 1008 | abandoned |
| pplulee/appleid_auto A self-hosted PHP application that automatically detects, unlocks, and manages Apple ID accounts using security questions, including disabl… | 10 | 1008 | abandoned |
| google/rowhammer-test A userland test program that checks DRAM modules for bit flips caused by the rowhammer problem, where repeatedly accessing memory rows dist… | 10 | 1003 | abandoned |
| torvalds/linux The official source tree of the Linux kernel, the core of Linux operating systems that manages hardware, system resources, and fundamental … | 77 | 246509 | stable |
| RustDesk RustDesk is an open-source remote desktop application written in Rust with a Flutter UI, working as a self-hostable alternative to TeamView… | 93 | 122527 | stable |
| fatedier/frp frp is a fast reverse proxy written in Go that exposes local servers behind NAT or firewalls to the internet. It supports TCP, UDP, HTTP, a… | 94 | 109183 | stable |
| addyosmani/agent-skills A curated pack of 24 production-grade engineering skills (structured Markdown workflows) for AI coding agents like Claude Code, Cursor, Cod… | 82 | 92002 | active |
| Z4nzu/hackingtool An all-in-one, menu-driven Python toolkit that aggregates 215 curated security testing tools across 21 categories such as recon, OSINT, web… | 76 | 79294 | active |
| Pi-hole Pi-hole is a network-wide DNS sinkhole application that blocks advertisements and trackers for every device on a network without client-sid… | 96 | 60738 | stable |
| skylot/jadx JADX is a Dex to Java decompiler that produces readable Java source code from Android APK, dex, aar, aab, and zip files, available as both … | 89 | 50328 | active |
| KeygraphHQ/shannon Shannon is an open-source, autonomous AI pentester for web applications and APIs that runs locally from the command line. It analyzes sourc… | 85 | 47693 | active |
| lysine-dev/okhttp OkHttp is a meticulous HTTP client library for the JVM, Android, and GraalVM, written in Kotlin. It provides efficient HTTP/2 and HTTP/1.1 … | 77 | 47058 | stable |
| V2Ray V2Ray (Project V) is a network proxy platform written in Go for building proxies to bypass network restrictions and censorship. It supports… | 67 | 46939 | active |
| MHSanaei/3x-ui 3X-UI is an open-source web control panel for managing Xray-core proxy and VPN servers, supporting many protocols including VLESS, VMess, T… | 98 | 45831 | active |
| Kong Gateway Kong Gateway is a cloud-native, high-performance API gateway that proxies, routes, load-balances, and secures API, LLM, and MCP traffic, ex… | 92 | 44080 | stable |
| juspay/hyperswitch Hyperswitch is an open-source, composable payments orchestration platform written in Rust by Juspay, connecting to 300+ payment processors,… | 95 | 43573 | active |
| curl/curl curl is a command-line tool and libcurl is a C library for transferring data to or from servers using URL syntax, supporting dozens of prot… | 95 | 42747 | stable |
| Alamofire Alamofire is an elegant HTTP networking library for Swift built on top of URLSession, providing chainable request/response handling, parame… | 89 | 42426 | stable |
| apache/dubbo Apache Dubbo is a high-performance RPC and microservice framework for Java (with multi-language SDKs) that provides service discovery, traf… | 94 | 41566 | stable |
| Xray-core Xray-core is a network proxy platform written in Go, best known as the successor to v2ray-core and the home of the XTLS/REALITY anti-censor… | 92 | 41380 | active |
| GyulyVGC/sniffnet Sniffnet is a free, open-source cross-platform GUI application for monitoring and analyzing network traffic, written in Rust. It lets users… | 89 | 41014 | active |
| SagerNet/sing-box sing-box is a universal proxy platform written in Go that supports a wide range of proxy protocols (Shadowsocks, VLESS, Hysteria2, WireGuar… | 95 | 37583 | active |
| 1Panel-dev/1Panel 1Panel is an open-source web-based Linux server management panel and lightweight AI management platform, offering a graphical interface for… | 99 | 36794 | active |
| Nextcloud Nextcloud is a self-hosted, open-source content collaboration platform for storing, syncing, and sharing files, calendars, contacts, and co… | 94 | 36696 | stable |
| Vault HashiCorp Vault is a secrets management server that securely stores, generates, and controls access to credentials, certificates, and encry… | 100 | 36205 | stable |
| restic/restic restic is a fast, secure, and efficient open-source backup program written in Go. It creates encrypted, deduplicated snapshots of files and… | 88 | 35846 | stable |
| gchq/CyberChef CyberChef is a browser-based web application for performing a wide range of 'cyber' operations such as encryption, encoding, compression, h… | 99 | 35729 | active |
| V2Ray V2Ray (Project V) is a Go-based network proxy platform for building tunnels that bypass network restrictions and protect privacy. It suppor… | 97 | 34543 | active |
| MetaCubeX/mihomo MetaCubeX/mihomo (formerly Clash.Meta) is a cross-platform rule-based proxy core written in Go that supports multiple proxy protocols and f… | 99 | 33772 | active |
| Blankj/AndroidUtilCode AndroidUtilCode is a powerful, easy-to-use Android utility library that encapsulates commonly used functions in Android development, split … | 23 | 33624 | stable |
| anoma/anoma Anoma is the reference implementation of the Anoma protocol, a distributed operating system that abstracts existing blockchains into config… | 84 | 33622 | active |
| XX-net/XX-Net XX-Net is an open-source proxy tool designed to bypass the Great Firewall (GFW) of China by disguising traffic as ordinary web traffic. It … | 75 | 33443 | active |
| hiddify/hiddify-app Hiddify is an open-source, ad-free multi-platform proxy/VPN client built on the Sing-box toolchain, supporting protocols like VLESS, VMess,… | 86 | 32531 | active |
| rustfs/rustfs RustFS is a high-performance, distributed, S3-compatible object storage system written in Rust, positioned as an Apache 2.0-licensed altern… | 80 | 31697 | active |
| symfony/symfony Symfony is a full-stack PHP framework for building web and console applications, plus a set of reusable, decoupled PHP components used by p… | 95 | 31143 | stable |
| CloakHQ/CloakBrowser CloakBrowser is a stealth Chromium distribution with 73 source-level C++ fingerprint patches that passes major bot-detection systems like C… | 82 | 31140 | active |
| nanocoai/nanoclaw NanoClaw is a lightweight, self-hosted personal AI assistant that runs each agent inside its own isolated Docker container for OS-level sec… | 82 | 30694 | active |
| 233boy/v2ray A one-click V2Ray installation and management shell script for Linux servers. It automates installing the V2Ray core, configuring protocols… | 66 | 29557 | active |
| Infisical/infisical Infisical is an open-source platform for secrets management, certificate lifecycle management, KMS, and privileged access management, usabl… | 96 | 29102 | stable |
| yamadashy/repomix Repomix is a CLI tool (and web service) that packs an entire repository into a single AI-friendly file in XML, Markdown, or plain text form… | 86 | 28182 | active |
| alibaba/druid Alibaba Druid is a high-performance JDBC database connection pool for Java that integrates SQL parsing, SQL firewall protection, and real-t… | 77 | 28177 | stable |
| wg-easy/wg-easy wg-easy is an all-in-one Docker application that runs a WireGuard VPN server together with a web-based admin UI for managing it. It lets ad… | 98 | 26847 | active |
| pypa/pipenv Pipenv is a Python virtualenv and dependency management tool from the PyPA that unifies pip, virtualenv, and Pipfile into a single command-… | 98 | 25031 | stable |
| radare2 Radare2 is a libre reverse engineering framework and command-line toolset for analyzing, disassembling, debugging, emulating, and modifying… | 94 | 24725 | active |
| Max-Eee/NeoPass NeoPass is a Chrome extension that bypasses proctoring restrictions on exam platforms like the Iamneo portal, Examly, NeoExamShield, and NP… | 81 | 24545 | active |
| fosrl/pangolin Pangolin is an open-source, identity-aware remote access platform built on WireGuard that combines VPN and tunneled reverse proxy capabilit… | 86 | 22606 | active |
| MatsuriDayo/NekoBoxForAndroid NekoBox for Android is a universal proxy toolchain app for Android built on the sing-box core. It supports a wide range of proxy protocols … | 68 | 22585 | active |
| renovatebot/renovate Renovate is a cross-platform CLI tool that automatically detects outdated dependencies in repositories and creates pull requests to update … | 96 | 22403 | active |
| postgres/postgres PostgreSQL is a mature, open source object-relational database management system supporting an extended subset of the SQL standard, includi… | 77 | 21990 | stable |
| alibaba/open-code-review OpenCodeReview is an AI-powered code review CLI tool that combines deterministic analysis pipelines with an LLM Agent to produce precise li… | 77 | 21881 | active |
| bee-san/Ciphey Ciphey is a Rust-based CLI tool and library that automatically decrypts encryptions without a known key or cipher, decodes encodings, and c… | 88 | 21588 | active |
| dyad-sh/dyad Dyad is a free, local, open-source desktop AI app builder that turns natural-language prompts into working full-stack web apps, positioned … | 83 | 21377 | active |
| jart/cosmopolitan Cosmopolitan Libc is a C/C++ library and toolchain that makes C a build-once run-anywhere language by producing polyglot executables that r… | 75 | 21271 | active |
| yanue/V2rayU V2rayU is a native macOS client built on the v2ray/xray core, written in Swift, for circumventing internet censorship. It supports protocol… | 92 | 20125 | active |
| mxrch/GHunt GHunt is an offensive Google framework focused on OSINT, usable both as a CLI tool and as a Python library. It can gather information about… | 57 | 19494 | active |
| dromara/Sa-Token Sa-Token is a lightweight, open-source Java authentication and authorization framework covering login authentication, permission checks, di… | 95 | 19027 | stable |
| Tencent/APIJSON APIJSON is a Tencent open-source Java ORM and JSON-based API protocol that auto-generates CRUD APIs and documentation without backend codin… | 99 | 18406 | active |
| ginuerzh/gost GOST (GO Simple Tunnel) is a Go-based tunneling and proxy tool supporting HTTP/HTTPS/HTTP2/SOCKS4/SOCKS5/Shadowsocks protocols plus QUIC, K… | 67 | 18204 | active |
| kurikomi-labs/komi-store Komi Store is a free, open-source, cross-platform app store that indexes installable releases from GitHub (and Codeberg/Forgejo), letting u… | 80 | 18202 | active |
| bcit-ci/CodeIgniter CodeIgniter is an open-source PHP framework with a very small footprint for building full-featured web applications, encouraging but not en… | 32 | 18165 | active |
| google/magika Magika is an AI-powered file content type detection tool that uses a small, highly optimized deep learning model to identify 200+ file type… | 88 | 18001 | stable |
| netchx/netch Netch is a Windows GUI proxy client supporting protocols like Shadowsocks, ShadowsocksR, VMess, VLESS, Trojan, WireGuard, and SOCKS5. It of… | 67 | 17695 | active |
| ory/hydra Ory Hydra is an OpenID Certified OAuth 2.0 and OpenID Connect provider server written in Go, handling token issuance, client management, an… | 77 | 17514 | stable |
| laramies/theHarvester theHarvester is a Python CLI tool that gathers open-source intelligence (emails, subdomains, hostnames, IPs, names, URLs, ASNs) about a dom… | 91 | 17277 | active |
| zerotier/ZeroTierOne ZeroTier is a software-defined networking tool that creates secure virtual Ethernet networks spanning devices, VMs, containers, and clouds … | 86 | 17073 | stable |
| Shadowsocks Shadowsocks is a family of encrypted SOCKS5 proxy clients and servers for circumventing internet censorship, with implementations in C#, Ru… | 77 | 16180 | active |
| Konloch/bytecode-viewer Bytecode Viewer is a free, open-source Java and Android APK reverse engineering suite that bundles six Java decompilers, bytecode disassemb… | 72 | 15628 | active |
| M2Team/NanaZip NanaZip is a fork of 7-Zip redesigned for modern Windows, featuring a Fluent Design UI, Windows 11 context menu integration, and dark mode.… | 99 | 15416 | active |
| mail-in-a-box/mailinabox Mail-in-a-Box is a one-click, easy-to-deploy mail server appliance that turns a fresh Ubuntu 22.04 machine into a complete email provider w… | 90 | 15405 | active |
| FlareSolverr/FlareSolverr FlareSolverr is a proxy server that bypasses Cloudflare and DDoS-GUARD protection by solving browser challenges with Selenium and undetecte… | 94 | 15403 | active |
| passteque/gluetun Gluetun is a lightweight VPN client packaged as a thin Alpine Docker container, written in Go, supporting many VPN providers via OpenVPN or… | 94 | 15391 | active |
| theonedev/onedev OneDev is a self-hosted, unified DevOps platform combining Git server, issue tracking with Kanban boards, pull request review, CI/CD pipeli… | 96 | 15215 | active |
| GreyDGL/PentestGPT PentestGPT is an AI-powered penetration testing agent framework that drives LLMs (Claude Code, Codex, or many providers in legacy mode) to … | 70 | 15208 | active |
| haiwen/seafile Seafile is an open-source, self-hosted cloud storage system providing high-performance file syncing, sharing, and encrypted libraries, orga… | 67 | 15195 | active |
| txthinking/brook Brook is a cross-platform programmable network tool written in Go that provides encrypted proxy/VPN functionality with system-level network… | 64 | 15168 | active |
| zitadel/zitadel ZITADEL is an open-source identity and access management (IAM) platform providing authentication and authorization out of the box, includin… | 96 | 14935 | active |
| oauth2-proxy/oauth2-proxy OAuth2 Proxy is a reverse proxy and middleware that adds OAuth2/OIDC authentication in front of web applications, supporting providers like… | 99 | 14915 | stable |
| logto-io/logto Logto is an open-source identity and access management (IAM) infrastructure for SaaS and AI applications, built on OIDC, OAuth 2.1, and SAM… | 100 | 14495 | active |
| bytebase/bytebase Bytebase is an open-source database governance platform that acts as a control plane between users (humans and AI agents) and databases, co… | 100 | 14462 | active |
| coder/coder Coder is a self-hosted platform for provisioning cloud development environments (workspaces) defined with Terraform, accessible via VS Code… | 96 | 14353 | active |
| casdoor/casdoor Casdoor is an open-source, self-hosted Identity and Access Management (IAM) and single sign-on (SSO) platform with a web UI, written in Go.… | 95 | 14340 | active |
| Datalux/Osintgram Osintgram is a Python-based OSINT tool for Instagram that provides an interactive shell to collect and analyze information about Instagram … | 40 | 14256 | active |
| wanghongenpin/proxypin ProxyPin is a free, open-source HTTP(S) traffic capture application built with Flutter, supporting Windows, Mac, Linux, Android, and iOS. I… | 90 | 13871 | active |
| ory/kratos Ory Kratos is a headless, API-first identity and user management server written in Go that centralizes login, registration, account recover… | 80 | 13862 | stable |
| qemu/qemu QEMU is a generic open-source machine emulator and virtualizer written in C. It can emulate complete machines in software via dynamic trans… | 77 | 13674 | stable |
| FreeRDP/FreeRDP FreeRDP is a free, open-source implementation of Microsoft's Remote Desktop Protocol (RDP), provided as a C library plus client application… | 100 | 13637 | stable |
| sshuttle/sshuttle sshuttle is a transparent proxy server that works as a poor man's VPN, forwarding traffic over SSH without requiring admin access on the re… | 79 | 13537 | stable |
| bia-pain-bache/BPB-Worker-Panel A self-hosted GUI panel deployed on Cloudflare Workers/Pages that generates VLESS, Trojan, and Warp proxy configurations with a private DoH… | 88 | 13333 | active |
| nearai/ironclaw IronClaw is an open-source, Rust-based 'Agent OS' and personal AI assistant that runs locally or on NEAR AI Cloud, with a WebUI, terminal, … | 83 | 12602 | active |
| drakkan/sftpgo SFTPGo is a full-featured, highly configurable file transfer server supporting SFTP, SCP, FTP/S, HTTP/S, and WebDAV, with pluggable storage… | 93 | 12484 | active |
| ubicloud/ubicloud Ubicloud is an open-source IaaS cloud platform that provides elastic compute (VMs), block storage, networking, load balancing, managed Post… | 76 | 12254 | active |
| dstotijn/hetty Hetty is an open source HTTP toolkit for security research, serving as an alternative to Burp Suite Pro. It provides a MITM HTTP proxy with… | 65 | 12009 | active |
| cloudflare/quiche quiche is Cloudflare's Rust implementation of the QUIC transport protocol and HTTP/3 as specified by the IETF. It exposes a low-level API f… | 97 | 11805 | stable |
| quic-go/quic-go quic-go is a production-ready, pure Go implementation of the QUIC transport protocol (RFC 9000/9001/9002) with support for HTTP/3, datagram… | 100 | 11755 | stable |
| h2o/h2o H2O is an optimized HTTP server written in C supporting HTTP/1.x, HTTP/2, and HTTP/3 (QUIC), with features like server push, 103 Early Hint… | 75 | 11540 | active |
| apereo/cas Apereo CAS is an enterprise open-source identity provider and single sign-on server implemented in Java on Spring Boot. It centralizes auth… | 100 | 11361 | stable |
| 1N3/Sn1per Sn1per is an open-source automated penetration testing and attack surface management platform that chains reconnaissance, scanning, exploit… | 63 | 11193 | active |
| sissbruecker/linkding linkding is a self-hosted bookmark manager built with Django, designed to be minimal, fast, and easy to deploy via a single Docker containe… | 99 | 11144 | stable |
| elder-plinius/G0DM0D3 G0DM0D3 is an open-source, multi-model AI chat interface designed for red-teaming, cognition research, and unrestricted LLM interaction. It… | 56 | 10966 | active |
| majd/ipatool A command-line tool written in Go that lets users search the iOS App Store and download app packages (ipa files) using their Apple ID. It s… | 100 | 10793 | active |