function: security
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| openp2p-cn/openp2p OpenP2P is a lightweight, open-source P2P networking tool written in Go that connects devices across NATs using UDP/TCP hole punching, UPnP… | 83 | 2024 | active |
| CaliCastle/cali.so The open-source codebase for Cali Castle's personal website (cali.so), built with Next.js 16, React 19, TypeScript, and Tailwind CSS v4. It… | 67 | 2024 | active |
| yeti-platform/yeti Yeti is a self-hosted threat intelligence platform that stores and links observables, entities, and indicators to answer questions like 'wh… | 100 | 2023 | active |
| admindroid-community/powershell-scripts A collection of over 100 self-contained PowerShell scripts for managing, reporting on, and auditing Microsoft 365 (Office 365) tenants. Eac… | 77 | 2016 | active |
| usmannasir/cyberpanel CyberPanel is a web hosting control panel built on OpenLiteSpeed that simplifies server and website management. It bundles SSL, DNS, email,… | 67 | 2015 | active |
| fscarmen/ArgoX A one-click Shell script that deploys Xray with multiple proxy protocols (Reality, Hysteria2, VLESS, VMess, Trojan, Shadowsocks, XHTTP) beh… | 75 | 1996 | active |
| authorizerdev/authorizer Authorizer is an open-source, self-hosted authentication and authorization server written in Go, providing OAuth2/OIDC, SAML SSO, MFA, soci… | 100 | 1993 | active |
| kkbo8005/mitan Mitan (密探) is an all-in-one penetration testing and security assessment desktop application integrating asset mapping, subdomain brute-forc… | 81 | 1989 | active |
| trojanpanel/install-script A one-click shell installation script for Trojan Panel, a multi-user web administration panel that manages proxy nodes running Xray, Trojan… | 32 | 1989 | active |
| justcoding121/titanium-web-proxy Titanium Web Proxy is a lightweight, high-performance HTTP(S) proxy server library for .NET that can operate as a man-in-the-middle (MITM) … | 100 | 1987 | active |
| jdesboeufs/connect-mongo connect-mongo is a MongoDB-backed session store for Connect and Express, written in TypeScript. It persists server-side sessions in MongoDB… | 54 | 1972 | active |
| vmoranv/jshookmcp An MCP server exposing 600+ tools across 34 domains for JavaScript reverse engineering and security research, including browser automation,… | 60 | 1971 | active |
| 0Chencc/clawgod ClawGod is a runtime patch applied on top of the official Claude Code CLI that unlocks hidden internal features, removes restrictions, and … | 82 | 1970 | active |
| i2ii/i BHcloud appears to be a commercial VPN/proxy subscription service providing mirror websites for users in mainland China and overseas, with … | 32 | 1965 | active |
| regclient/regclient regclient is a Go client library and set of CLI tools (regctl, regsync, regbot) for interacting with Docker and OCI conformant container re… | 95 | 1925 | active |
| Payum/Payum Payum is a MIT-licensed PHP payment processing library that unifies 50+ payment gateways (Stripe, PayPal, Klarna, Authorize.Net, Sofort, an… | 75 | 1924 | stable |
| alibaba/xquic XQUIC is Alibaba's cross-platform C library implementing the IETF QUIC and HTTP/3 protocols for both client and server use. It supports QUI… | 95 | 1916 | active |
| claabs/epicgames-freegames-node A self-hosted Node.js/TypeScript service that automatically logs into Epic Games Store accounts, finds weekly free games, and sends prepopu… | 68 | 1916 | active |
| typecho-fans/plugins A community-maintained directory of 131+ plugins for the Typecho blogging platform, indexed with download links and installable via the TeS… | 67 | 1906 | active |
| Yuan-lab-LLM/ClawManager ClawManager is a Kubernetes-native control plane for managing AI agent instances at cluster scale, providing governed AI access through an … | 82 | 1900 | active |
| Hamza417/Inure Inure is a premium Android app manager with Root and Shizuku support, featuring a built-in terminal, app analytics, VirusTotal scanning, de… | 100 | 1899 | active |
| wormhole-foundation/wormhole Wormhole is a blockchain interoperability protocol that enables cross-chain messaging and native token transfers across 45+ blockchains. Th… | 98 | 1891 | active |
| zema1/watchvuln WatchVuln is a self-hosted Go service that scrapes high-quality vulnerability sources (Aliyun AVD, Chaitin, OSCS, Qianxin TI, Seebug, CISA … | 61 | 1890 | active |
| tiantianGPU/reg-factory A Python-based local web console that automates bulk registration of email and AI service accounts (Outlook, Gmail, ChatGPT, Grok, Claude, … | 80 | 1882 | active |
| ThePhaseless/Byparr Byparr is a self-hosted Python service that solves antibot browser challenges (like Cloudflare checks) and returns valid clearance cookies … | 90 | 1877 | active |
| zakirkun/guardian-cli Guardian is a Python CLI tool that automates penetration testing workflows using LLM providers (OpenAI, Claude, Gemini, Ollama, and others)… | 69 | 1869 | active |
| seagullz4/hysteria2 A one-click installation script (shell and Python versions) for deploying the Hysteria2 proxy server on Linux VPSes. It handles certificate… | 62 | 1869 | active |
| litespeedtech/lsquic LSQUIC is an open-source C library implementing the QUIC transport protocol and HTTP/3 for both servers and clients, used in production by … | 99 | 1868 | active |
| keshavdv/unifi-cam-proxy A Python proxy that lets non-Ubiquiti RTSP-enabled cameras appear as native cameras in UniFi Protect NVR. It supports live streaming, full-… | 77 | 1868 | active |
| cloudpanel-io/cloudpanel-ce CloudPanel is a free, open-source server control panel for configuring and managing Linux servers with a focus on simplicity. It lets users… | 83 | 1867 | active |
| aquasecurity/tfsec tfsec is a static analysis security scanner for Terraform code that detects misconfigurations across major cloud providers using hundreds o… | 58 | 7037 | maintenance |
| chame1eon/jnitrace jnitrace is a Frida-based command-line tool that dynamically traces JNI API calls made by native libraries in Android apps. It works like f… | 23 | 1861 | stable |
| wapiti-scanner/wapiti Wapiti is an open-source black-box web vulnerability scanner written in Python that crawls deployed web applications and fuzzes scripts and… | 98 | 1856 | active |
| duty1g/x64dbg-mcp-server A native MCP (Model Context Protocol) plugin for x64dbg written in Zig that exposes the debugger's full functionality over HTTP with Stream… | 80 | 1855 | active |
| eworm-de/routeros-scripts A collection of scripts for MikroTik RouterOS to manage devices and extend their functionality. It covers tasks like automated updates, bac… | 77 | 1850 | active |
| 1234567Yang/cf-proxy-ex A Cloudflare Workers-based super proxy that lets users access websites like GitHub, DuckDuckGo, and StackOverflow through a different URL w… | 69 | 1846 | active |
| parvardegr/sharing A Node.js command-line tool that shares files, directories, and clipboard text to phones over local Wi-Fi via a built-in web server and QR … | 90 | 1839 | active |
| rebel0789/codexpro CodexPro is a local MCP server and CLI that connects a ChatGPT session to your machine and explicitly allowed repos, giving ChatGPT bounded… | 56 | 1838 | active |
| FailproofAI/failproofai Failproof AI is an open-source observability and enforcement layer for AI agent harnesses like Claude Code, Codex, Hermes, and OpenClaw, ca… | 82 | 1837 | active |
| aquaproj/aqua aqua is a declarative CLI version manager written in Go that manages tool versions per project via configuration files, with lazy installat… | 94 | 1832 | active |
| lavabit/magma Magma is an encrypted email server daemon written in C, providing SMTP, POP, IMAP, and HTTP protocol support along with a bundled webmail s… | 36 | 1830 | active |
| roxy-wi/roxy-wi Roxy-WI is a self-hosted web interface for managing HAProxy, Nginx, Apache, and Keepalived servers from a single control plane. It provides… | 99 | 1823 | active |
| 1N3/BlackWidow BlackWidow is a Python-based web application spider that crawls a target site to collect URLs, dynamic parameters, subdomains, email addres… | 57 | 1821 | active |
| marin-m/vmlinux-to-elf A Python CLI (with optional GUI) that recovers a fully analyzable ELF file from raw or stripped Linux kernel images (vmlinux, vmlinuz, bzIm… | 88 | 1811 | stable |
| AloneMonkey/MonkeyDev MonkeyDev is an Xcode-integrated framework (an upgraded fork of iOSOpenDev) for developing iOS tweaks and command-line tools using CaptainH… | 32 | 6800 | maintenance |
| google/nomulus Nomulus is an open-source, scalable, cloud-based top-level domain (TLD) registry service written in Java and running on Google Kubernetes E… | 96 | 1807 | active |
| inference-labs-inc/inference-network Inference Network is a Proof of Inference system built on EigenLayer that provides trustless verification of AI inference results via Solid… | 50 | 1807 | active |
| microsoft/CyberBattleSim CyberBattleSim is a Python-based experimentation and research platform from Microsoft that simulates abstract enterprise network environmen… | 77 | 1788 | active |
| xchacha20-poly1305/husi Husi is a multiplatform proxy client built with Kotlin and Compose Multiplatform, using a Go-based libcore (sing-box) backend. It supports … | 89 | 1787 | active |
| x011/smtp-tunnel-proxy A Python-based covert tunneling tool that disguises TCP traffic as SMTP email sessions to evade Deep Packet Inspection firewalls. It expose… | 42 | 1787 | active |
| stakpak/agent Stakpak is an open-source Rust CLI and autonomous agent that runs on your machines 24/7 to keep applications running, handling tasks like a… | 76 | 1768 | active |
| weaveworks/weave Weave Net is a container networking solution that creates a virtual overlay network connecting Docker containers across multiple hosts, clo… | 10 | 6610 | maintenance |
| githubXiaowangzi/NP-Manager NP-Manager is an Android application for APK, DEX, JAR, Smali, PDF, and media file manipulation. It provides reverse-engineering features s… | 76 | 1766 | active |
| mholt/caddy-l4 A layer 4 (TCP/UDP) app for Caddy that enables composable handling of raw connections based on connection properties or stream content. It … | 93 | 1762 | active |
| hotyue/IP-Sentinel IP-Sentinel is a lightweight, modular Master-Agent distributed system for maintaining VPS IP assets. It detects IP geolocation misclassific… | 82 | 1750 | active |
| ammarahm-ed/react-native-mmkv-storage A fast, lightweight key-value storage library for React Native built in C++ on top of Tencent's MMKV using JSI. It supports multiple databa… | 73 | 1750 | active |
| veops/oneterm OneTerm is a lightweight, flexible enterprise bastion host (jump server) built on the 4A model: authentication, authorization, account, and… | 59 | 1737 | active |
| pgjdbc/pgjdbc PgJDBC is the official open-source PostgreSQL JDBC driver, written in pure Java (Type 4) and communicating via the PostgreSQL native networ… | 93 | 1732 | stable |
| ballcat-projects/ballcat BallCat is a Java/Spring Boot rapid development scaffold for building enterprise-grade admin management systems, with companion frontend pr… | 84 | 1728 | active |
| revng/revng rev.ng is an open-source binary analysis framework and decompiler built on LLVM and QEMU, supporting over 20 CPU architectures. It automati… | 77 | 1728 | active |
| datageartech/datagear DataGear is an open-source, self-hosted data visualization and analysis platform for freely building interactive data dashboards. It connec… | 76 | 1720 | active |
| zubair-trabzada/ai-legal-claude A Claude Code skill pack providing an AI legal assistant with 14 slash commands and 5 parallel agents for contract review, risk analysis, N… | 47 | 1713 | active |
| SVF-tools/SVF SVF is a C++ static analysis framework built on LLVM that provides scalable and precise value-flow analysis and pointer analysis for source… | 86 | 1708 | active |
| justjake/quickjs-emscripten TypeScript bindings for the QuickJS JavaScript interpreter compiled to WebAssembly, letting you safely evaluate untrusted JavaScript inside… | 74 | 1702 | active |
| FastTunnel/FastTunnel FastTunnel is a high-performance, cross-platform intranet penetration (NAT traversal) tool written in C#/.NET that exposes local network se… | 86 | 1701 | active |
| miaoxworld/openclaw-manager A cross-platform desktop GUI for managing OpenClaw AI assistant services, built with Tauri 2.0, React, and Rust. It provides service monito… | 62 | 1698 | active |
| utkusen/urlhunter urlhunter is a Go-based recon CLI tool that searches URLs exposed via shortener services like bit.ly and goo.gl. It downloads daily URLTeam… | 24 | 1697 | active |
| xeefei/X-Panel X-Panel is a self-hosted web panel built on Xray Core for managing multi-protocol, multi-user proxy servers (VLESS, XTLS, Reality, XHTTP, V… | 82 | 1695 | active |
| matanolabs/matano Matano is an open-source, cloud-native security data lake that runs in your AWS account, normalizing unstructured security logs into a stru… | 23 | 1694 | active |
| leochlon/hallbayes Berry is a local MCP server that detects hallucinations by measuring whether an LLM's claims are actually supported by the cited evidence, … | 57 | 1693 | active |
| murraco/spring-boot-jwt A JWT authentication service built with Spring Boot and Spring Security, backed by MySQL, featuring short-lived access tokens and rotating,… | 77 | 1689 | active |
| FOSSBilling/FOSSBilling FOSSBilling is a free, open-source billing and client management application for hosting providers and digital service businesses, built in… | 100 | 1686 | active |
| zoujingli/WeChatDeveloper WeChatDeveloper is a comprehensive PHP SDK for the WeChat ecosystem (Official Accounts, Mini Programs, WeCom) and payments (WeChat Pay V2/V… | 86 | 1681 | active |
| palark/ovpn-admin A self-hosted web UI for managing OpenVPN users, certificates, and client routes on Linux servers. It is written in Go with a Vue.js fronte… | 79 | 1678 | active |
| Ge0rg3/requests-ip-rotator A Python library that mounts AWS API Gateway as a proxy onto requests sessions, rotating source IPs on every request using AWS's large IP p… | 89 | 1676 | active |
| cloudflare/foundations Foundations is Cloudflare's modular Rust library for building production-grade distributed services. It bundles logging, distributed tracin… | 61 | 1672 | stable |
| goaop/framework Go! AOP is a pure-PHP aspect-oriented programming framework that lets developers define cross-cutting concerns (logging, caching, security)… | 94 | 1669 | active |
| nshalabi/SysmonTools Sysmon Tools is a collection of utilities for analyzing, visualizing, and managing Microsoft Sysmon logs, centered on Sysmon View, an open-… | 81 | 1661 | active |
| shadowsocksr-backup/shadowsocksr A Python port of ShadowsocksR, a fast encrypted tunnel proxy that helps users bypass firewalls and censorship. It provides a command-line s… | 32 | 6132 | maintenance |
| node-opcua/node-opcua node-opcua is a full OPC UA (IEC 62541) protocol stack for Node.js and the browser, written in TypeScript. It provides client, server, disc… | 100 | 1656 | stable |
| UniClipboard/UniClipboard UniClipboard is a privacy-first, cross-device clipboard synchronization application built with Rust and Tauri that syncs text, images, file… | 87 | 1656 | active |
| dragonflyoss/nydus Nydus is a Rust-based content-addressable filesystem framework implementing the RAFS format to accelerate container image and data distribu… | 94 | 1651 | stable |
| HaoOuBa/Joe Joe is a feature-rich, two-column blog theme for the Typecho publishing platform, written in PHP. It bundles a custom editor, code highligh… | 32 | 1649 | active |
| hassio-addons/repository The Home Assistant Community Add-ons repository, a curated collection of high-quality add-ons (apps) for Home Assistant installations. It s… | 77 | 1647 | stable |
| kefir500/apk-editor-studio APK Editor Studio is a free, open-source, cross-platform GUI tool for reverse-engineering Android APK files, built in C++/Qt. It lets users… | 23 | 1647 | active |
| cloudfoundry/uaa Cloud Foundry's User Account and Authentication (UAA) server, a multi-tenant identity management service that acts as an OAuth2 provider an… | 100 | 1639 | active |
| uAgents uAgents is a lightweight Python framework by Fetch.ai for building autonomous AI agents as microservices, using decorators for scheduled ta… | 94 | 1635 | active |
| za515217965/OKBrowser OKBrowser is a free Chromium-based anti-fingerprint browser for Windows that lets users create and manage multiple isolated browser profile… | 50 | 1629 | active |
| kulikov0/whitelist-bypass A Go-based tool that tunnels internet traffic through video calling platforms (VK Call, Yandex Telemost, WB Stream) to bypass government wh… | 80 | 1625 | active |
| Permify/permify Permify is an open-source authorization-as-a-service inspired by Google Zanzibar, providing a permission database and policy decision point… | 95 | 5946 | maintenance |
| OpenAtomFoundation/TobudOS TobudOS (formerly TencentOS Tiny) is a real-time operating system for IoT devices, incubated by the OpenAtom Foundation after being donated… | 23 | 5941 | maintenance |
| 4lbH4cker/ALHacking ALHacking is a shell-script-based toolkit bundling a menu of so-called ethical hacking utilities, including social media account attacks, p… | 32 | 1613 | active |
| wuba/WBBlades WBBlades is a set of Mach-O based tools for iOS development that detects useless ObjC/Swift classes, protocols, and resources, analyzes pac… | 23 | 1612 | active |
| eooce/Gla-deploy A JavaScript-based tool for deploying proxy server configurations to free cloud/PaaS platforms, enabling personal censorship circumvention.… | 42 | 1611 | active |
| MayersScott/rkn-block-checker A Python CLI tool that diagnoses whether your connection is in an RKN/TSPU-blocked zone and classifies the type of block (DNS poisoning, TC… | 71 | 1606 | active |
| theopenco/llmgateway LLM Gateway is an open-source API gateway for large language models that sits between applications and 40+ LLM providers (OpenAI, Anthropic… | 87 | 1598 | active |
| doxx/darkflare DarkFlare is a Go command-line tool that tunnels TCP traffic over HTTPS through CDNs like Cloudflare, disguising it as ordinary web traffic… | 53 | 1596 | active |
| embox/embox Embox is a highly configurable POSIX-compliant real-time operating system for resource-constrained embedded systems and microcontrollers. I… | 91 | 1593 | active |
| vvxw/deploy-vercel A Vercel-deployable template that runs a proxy node service disguised behind a static HTML decoy page, with subscription link generation an… | 56 | 1591 | active |
| EmbarkStudios/quilkin Quilkin is a non-transparent UDP proxy built in Rust for large-scale multiplayer dedicated game server deployments. It adds security, acces… | 94 | 1587 | active |