function: security
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| AlisamTechnology/ATSCAN ATSCAN is a Perl-based command-line scanner for mass dork searching and vulnerability exploitation. It combines search engine dorking with … | 23 | 1586 | active |
| m3n0sd0n4ld/GooFuzz GooFuzz is a Bash-based CLI tool that performs fuzzing-style reconnaissance using advanced Google searches (Google Dorking) via the Google … | 56 | 1584 | active |
| pallets-eco/wtforms WTForms is a flexible Python library for defining, validating, and rendering HTML web forms. It is framework-agnostic, supporting data vali… | 77 | 1580 | stable |
| capitalone/DataProfiler DataProfiler is a Python library that loads CSV, AVRO, Parquet, JSON, text, or URL data into a pandas-compatible DataFrame and profiles it … | 79 | 1579 | active |
| patched-codes/patchwork Patchwork is an open-source agentic AI framework and CLI that automates development chores like PR reviews, bug fixing, security patching, … | 66 | 1575 | active |
| SmingHub/Sming Sming is an open-source asynchronous C++ framework for building embedded applications with strong networking support. It targets multiple a… | 72 | 1569 | active |
| WordOps/WordOps WordOps is a Python-based CLI tool that automates deploying and managing a high-performance WordPress server stack (Nginx, PHP-FPM, MariaDB… | 85 | 1566 | active |
| littledivy/mimic mimic is a Python tool that captures traffic from mobile or web apps via mitmproxy, extracts authentication material, and uses AI to genera… | 55 | 1561 | active |
| Clats97/ClatScope ClatScope Info Tool is a Python-based OSINT utility offering 70+ reconnaissance features including geolocation, DNS, WHOIS, phone, email, a… | 47 | 1561 | active |
| sepfy/libpeer libpeer is a portable WebRTC implementation written in C using BSD sockets, designed for IoT and embedded devices such as ESP32 and Raspber… | 76 | 1545 | active |
| QuiteAFancyEmerald/InvisiProxy InvisiProxy LTS (formerly Holy Unblocker) is a self-hostable Node.js web proxy service that lets users access blocked websites and Tor/Onio… | 99 | 1523 | active |
| OpenOSINT/OpenOSINT OpenOSINT is an AI-powered OSINT framework offering 19 investigation tools behind a natural-language agent, usable as an interactive REPL, … | 81 | 1521 | active |
| cupcakearmy/cryptgeon Cryptgeon is a secure, open-source note and file sharing service inspired by PrivNote, built with Rust and Svelte. Notes are encrypted clie… | 91 | 1515 | active |
| Bareflank/hypervisor Bareflank is an open-source hypervisor SDK written in C++ (with Rust support) for rapidly prototyping custom hypervisors on 64-bit Intel an… | 23 | 1514 | active |
| OpenDDS/OpenDDS OpenDDS is an open-source C++ implementation of the OMG Data Distribution Service (DDS) specification for real-time publish-subscribe data … | 86 | 1513 | active |
| akto-api-security/akto Akto is an open-source API and AI security platform that discovers and inventories APIs, AI agents, MCP servers, and LLM usage, then contin… | 94 | 1511 | active |
| kiprotect/klaro Klaro is an open-source consent management platform (CMP) for websites that manages user consent for third-party apps and trackers. It is a… | 38 | 1506 | active |
| traceless/alist-encrypt A Node.js proxy service for Alist that adds transparent WebDAV encryption and decryption of files. It supports streaming encrypted video pl… | 74 | 1504 | active |
| revive-adserver/revive-adserver Revive Adserver is the world's most popular free, open source ad serving system, written in PHP, that publishers install on their own serve… | 75 | 1496 | stable |
| polius/FileSync FileSync is a self-hosted web application for sending files from one device to many in real time over encrypted peer-to-peer WebRTC connect… | 90 | 1494 | active |
| snltty/linker Linker is a self-hosted networking tool written in C# that combines P2P hole punching (UDP/TCP, IPv4/IPv6) with server relay to provide vir… | 94 | 1493 | active |
| hook0/hook0 Hook0 is an open-source (SSPL-1.0) webhooks-as-a-service platform written in Rust that lets SaaS developers deliver events to their users' … | 100 | 1483 | active |
| OldUnreal/UnrealTournamentPatches OldUnreal's community-maintained patch repository for Unreal Tournament (1999), developed under an agreement with Epic Games. The patches f… | 80 | 1478 | active |
| VirusTotal/vt-cli The official VirusTotal command-line interface, written in Go, that lets users interact with VirusTotal's API from the terminal. It support… | 82 | 1477 | active |
| litespeedtech/openlitespeed OpenLiteSpeed is a high-performance, lightweight, open source HTTP web server developed by LiteSpeed Technologies under GPLv3. It uses an e… | 89 | 1473 | active |
| openstack/neutron Neutron is OpenStack's Networking service, providing 'network connectivity as a service' for interface devices (vNICs) managed by other Ope… | 77 | 1471 | active |
| simonrob/email-oauth2-proxy A local IMAP/POP/SMTP proxy written in Python that transparently adds OAuth 2.0 authentication for email clients that don't support it. It … | 84 | 1467 | active |
| cloudflare/serverless-registry A self-hostable OCI container registry implemented as a Cloudflare Worker, storing image layers and manifests in Cloudflare R2 object stora… | 71 | 1451 | active |
| zama-ai/concrete-ml Concrete ML is a privacy-preserving machine learning library built on top of Zama's Concrete FHE compiler. It lets data scientists convert … | 68 | 1450 | active |
| Dryxio/auto-re-agent auto-re-agent is an open-source AI reverse-engineering agent that combines Ghidra binary analysis with LLMs (Claude, Codex, OpenAI-compatib… | 77 | 1448 | active |
| pritunl/pritunl-client Pritunl Client is a free, open-source cross-platform OpenVPN and WireGuard client with both graphical and command-line interfaces. It suppo… | 99 | 1446 | active |
| zodiacon/AllTools A collection of Pavel Yosifovich's reasonably stable Windows system tools, including process/driver monitors, kernel object viewers, PE fil… | 71 | 1441 | active |
| google/oss-fuzz-gen A Google framework that uses large language models to automatically generate fuzz targets for real-world C/C++, Java, and Python projects, … | 58 | 1434 | active |
| tofuutils/tenv tenv is a version manager written in Go for OpenTofu, Terraform, Terragrunt, Terramate, and Atmos. It detects required versions from HCL fi… | 91 | 1432 | active |
| stripe/stripe-react-native The official Stripe SDK for React Native, providing native Android and iOS payment UI components and APIs for collecting payments in mobile… | 100 | 1429 | stable |
| WPeace-HcH/WPeGPT WPeGPT is an IDA Pro plugin that integrates LLM models (OpenAI, DeepSeek, or any OpenAI-compatible API) into binary analysis workflows. It … | 74 | 1422 | active |
| razvandimescu/numa Numa is a portable DNS resolver in a single Rust binary that provides ad blocking, local .numa service domains, hostname overrides, and pri… | 99 | 1419 | active |
| ccbkkb/MicroWARP MicroWARP is an ultra-lightweight Docker image that provides a Cloudflare WARP SOCKS5 proxy using kernel-level WireGuard and a pure C micro… | 81 | 1419 | active |
| yuzeguitarist/Deck Deck is a native, privacy-first clipboard manager for macOS built with Swift and SwiftUI. It records clipboard history (text, images, files… | 68 | 1415 | active |
| Kianmhz/GooseRelayVPN A Go-based SOCKS5 VPN client that tunnels raw TCP traffic through Google Apps Script web apps to a user-controlled VPS exit server. Traffic… | 69 | 1410 | active |
| kitops-ml/kitops KitOps is a CNCF open-source DevOps tool (Kit CLI, written in Go) that packages AI/ML models, datasets, code, prompts, agent skills, and MC… | 90 | 1409 | active |
| TencentCloud/Octop Octop is an open-source, self-hosted AI assistant built on a multi-agent, multi-user architecture that runs entirely on your own machine. I… | 80 | 1409 | active |
| blacklanternsecurity/MANSPIDER MANSPIDER is a Python CLI tool that crawls SMB shares across entire networks to find files by filename or content, with regex support and t… | 77 | 1408 | active |
| elder-plinius/V3SP3R V3SP3R (Vesper) is an Android application that turns a Flipper Zero into an AI-controlled hardware hacking tool, driven by natural language… | 48 | 1407 | active |
| fahrez182/AxManager AxManager is an Android application that establishes a persistent ADB-based privileged environment on the device, allowing shell command ex… | 72 | 1401 | active |
| pgcentralfoundation/plrust PL/Rust is a loadable procedural language handler for PostgreSQL that lets developers write database functions in Rust, compiled to native … | 54 | 1400 | active |
| Holochain Holochain is an open-source Rust framework for building peer-to-peer applications that run on users' own devices without centralized server… | 98 | 1394 | active |
| boringproxy/boringproxy boringproxy is a tunneling reverse proxy written in Go that exposes local web servers securely via public HTTPS URLs. It includes a web UI,… | 23 | 1384 | active |
| gettalong/hexapdf HexaPDF is a pure Ruby library with an accompanying CLI application for creating, manipulating, merging, encrypting, signing, and optimizin… | 76 | 1382 | active |
| designcomputer/mysql_mcp_server A Model Context Protocol (MCP) server that lets AI assistants securely interact with MySQL databases by listing tables, reading data, and e… | 85 | 1379 | active |
| noobnooc/agent A personal collection of portable Codex agent skills by noobnooc, each packaged as a folder with a SKILL.md entrypoint and agent metadata. … | 76 | 1378 | active |
| CIRCL/AIL-framework AIL framework is an open-source Python platform for collecting, crawling, processing, and analyzing unstructured data from the clear web, T… | 68 | 1378 | active |
| LiteOS/LiteOS Huawei LiteOS is a lightweight real-time operating system kernel for IoT devices, written in C for ARM Cortex-M/A architectures. It provide… | 23 | 4907 | maintenance |
| fasnow/fine Fine is a Chinese-language cyberspace asset mapping and reconnaissance tool integrating FOFA, Hunter, Quake, ZoomEye, and Shodan APIs, plus… | 82 | 1371 | active |
| Psiphon-Inc/psiphon Psiphon is a relay-based Internet censorship circumvention system consisting of client apps for Windows, Android, and iOS plus a server net… | 32 | 1370 | active |
| Endava/cats CATS (Contract API Testing and Security) is a REST API fuzzer and negative testing tool for OpenAPI endpoints. It automatically generates, … | 88 | 1366 | active |
| siderolabs/omni Omni is a Kubernetes management platform by Sidero Labs that provides SaaS-simple deployment and operation of Kubernetes clusters on your o… | 89 | 1364 | active |
| JoasASantos/NeuroSploit NeuroSploit is an AI-powered penetration testing framework written in Rust that turns a URL, repository, app, or host into an autonomous se… | 84 | 1364 | active |
| Maasea/sgmodule A collection of Surge modules (sgmodule files) written in JavaScript that enhance or modify mobile apps and network behavior, such as remov… | 74 | 1364 | active |
| chili-chips-ba/wireguard-fpga An open-source, wire-speed hardware implementation of the WireGuard VPN protocol on a low-cost Artix-7 FPGA, written in Verilog with an ope… | 68 | 1358 | active |
| fkie-cad/cwe_checker cwe_checker is a Rust-based suite of checks that detects common bug classes (CWEs) such as null pointer dereferences and buffer overflows i… | 67 | 1353 | active |
| chr0nzz/traefik-manager Traefik Manager is a self-hosted web UI for managing Traefik reverse proxy configurations, covering routes, middlewares, certificates, plug… | 82 | 1344 | active |
| RockxyApp/Rockxy Rockxy is an open-source (AGPL-3.0) native macOS HTTP debugging proxy built in Swift/SwiftNIO that intercepts, inspects, and modifies HTTP,… | 82 | 1343 | active |
| bugbasesecurity/pentest-copilot Pentest Copilot is an open-source, AI-driven penetration testing agent that connects to a Kali attack box, autonomously runs security tools… | 64 | 1341 | active |
| palantir/windows-event-forwarding A Palantir-maintained repository of Windows Event Forwarding (WEF) subscriptions and guidance for centrally collecting security-relevant ev… | 50 | 1341 | active |
| ltb-project/self-service-password Self Service Password is a PHP web application that lets users change and reset their own passwords in an LDAP directory, including Active … | 91 | 1340 | stable |
| jetmore/swaks Swaks is a scriptable, transaction-oriented SMTP test tool written in Perl, often called the Swiss Army Knife for SMTP. It supports SMTP, E… | 23 | 1336 | active |
| minibear2021/wechatpayv3 A Python SDK for WeChat Pay API v3 supporting both direct-merchant and service-provider modes. It handles automatic platform certificate up… | 87 | 1335 | active |
| qdhenry/Claude-Command-Suite A collection of 216+ slash commands, 12 Claude Code Skills, and 54 specialized AI agents that add structured development workflows to Claud… | 63 | 1332 | active |
| YtFlow/Maple Maple is a lightweight Universal Windows Platform (UWP) proxy app built on the leaf core, acting as a VPN provider on Windows. It supports … | 27 | 1322 | active |
| hvac/hvac hvac is a Python 3.x client library for the HashiCorp Vault HTTP API. It lets Python applications authenticate to Vault and read, write, an… | 55 | 1315 | active |
| hemaju/Wireboy.Socket.P2PSocket A P2P NAT traversal tool written in C#/.NET that punches holes through firewalls to enable remote access between networks, e.g. controlling… | 52 | 1311 | active |
| freelabz/secator secator is a task and workflow runner for security assessments that unifies dozens of well-known security tools (subfinder, httpx, ffuf, nm… | 94 | 1306 | active |
| alibaba/AliOS-Things AliOS Things is Alibaba's open-source, highly scalable IoT operating system built around the Rhino RTOS kernel, supporting ARM, C-Sky, MIPS… | 23 | 4626 | maintenance |
| robherley/snips.sh snips.sh is a passwordless, anonymous pastebin service powered entirely by SSH, with a terminal UI and a syntax-highlighted web UI. It is w… | 98 | 1303 | active |
| casosorg/casos CasOS is a cloud operating system built on Kubernetes that embeds the full Kubernetes control plane (API server, controller manager, schedu… | 95 | 1303 | active |
| lanyi1998/DNSlog-GO DNSLog-GO is a self-hosted tool written in Go that monitors DNS resolution records, with a built-in web interface and API mode. It supports… | 83 | 1302 | active |
| dwisiswant0/go-dork go-dork is a fast command-line dork scanner written in Go that automates Google dorking across multiple search engines. It supports Google,… | 23 | 1302 | stable |
| GoogleCloudPlatform/berglas Berglas is a command line tool and Go library for managing secrets on Google Cloud, encrypting them with Cloud KMS and storing them in Clou… | 96 | 1301 | active |
| kubermatic/kubermatic Kubermatic Kubernetes Platform (KKP) is an open-source central management platform for automating the lifecycle of thousands of Kubernetes … | 95 | 1300 | stable |
| SanMuzZzZz/LuaN1aoAgent LuaN1aoAgent is an autonomous AI-driven penetration testing agent built in TypeScript on the Pi SDK, using graph-based cognitive reasoning … | 80 | 1293 | active |
| Mekotofeuka/MTPROTO_FIX_By_MEKO A shell-based one-click installer and manager for MTProto proxies and VPN tools such as Telemt, MTG, MTProtoZig, and MTProxyL. It fixes com… | 80 | 1289 | active |
| BishopFox/eyeballer Eyeballer is a convolutional neural network tool that classifies screenshots of web hosts taken during large-scope penetration tests. It la… | 54 | 1289 | active |
| SmythOS/sre SmythOS Runtime Environment (SRE) is an open-source, cloud-native runtime, SDK, and CLI for building and running production AI agents acros… | 52 | 1289 | active |
| SonarJS SonarSource's static code analyzer for JavaScript, TypeScript, and CSS, providing hundreds of rules for code quality and security. It now a… | 100 | 1278 | active |
| Mangi-11/Eta Eta is a third-party system-level AI agent for Android that uses Root and LSPosed to bypass app sandboxing, giving connected LLMs (BYOK: Ch… | 82 | 1277 | active |
| apache/ozone Apache Ozone is a scalable, redundant, distributed object store for Hadoop and cloud-native environments, supporting billions of objects wi… | 95 | 1271 | stable |
| Expensify/Bedrock Bedrock is a distributed database server built by Expensify on top of SQLite, providing WAN replication, active/active automatic failover, … | 96 | 1264 | active |
| retlehs/quien quien is a Go CLI and interactive TUI that replaces whois with a tabbed domain and IP intelligence tool covering WHOIS/RDAP, DNS, mail auth… | 73 | 1263 | active |
| FaceAISDK/FaceAISDK_Android An Android SDK for fully on-device, offline face detection, recognition, liveness detection (anti-spoofing), and 1:1, 1:N, and M:N face sea… | 98 | 1256 | active |
| psanford/wormhole-william A Go implementation of the magic wormhole protocol providing end-to-end encrypted transfer of text, files, and directories between computer… | 38 | 1251 | active |
| v4lkyr0/Buildware-Tools Buildware-Tools is a Python-based terminal multitool combining OSINT reconnaissance, network diagnostics, Discord automation, cryptography … | 78 | 1250 | active |
| lerd-env/lerd Lerd is an open-source, Herd-like local PHP development environment for Linux and macOS (Windows via WSL2 beta) that runs Nginx, PHP-FPM, a… | 78 | 1250 | active |
| bareos/bareos Bareos is an open-source (AGPLv3) network backup and recovery solution for mixed IT environments, supporting Linux, Windows, FreeBSD and ma… | 100 | 1246 | active |
| DDULDDUCK/every-pdf Every PDF is an all-in-one open-source desktop PDF toolkit built with Electron, Next.js, and a Python (FastAPI) backend. It lets users edit… | 73 | 1243 | active |
| lakinduakash/linux-wifi-hotspot A feature-rich WiFi hotspot creator for Linux offering both a GTK3 GUI and a command-line interface. It can share an access point from any … | 68 | 4369 | maintenance |
| owen2345/camaleon-cms Camaleon CMS is a dynamic and advanced content management system built on Ruby on Rails, designed as a flexible alternative to WordPress fo… | 90 | 1238 | active |
| ipa-lab/hackingBuddyGPT HackingBuddyGPT is a Python framework that helps ethical hackers and security researchers use LLMs and LLM-based autonomous agents for pene… | 68 | 1230 | active |
| ca110us/epeius Epeius is a Trojan proxy server implemented as a Cloudflare Worker, allowing serverless deployment of the Trojan protocol without owning a … | 24 | 1226 | active |
| transmissions11/solmate Solmate is a collection of gas-optimized, opinionated Solidity smart contract building blocks including token standards (ERC20, ERC721, ERC… | 37 | 4286 | maintenance |