function: security
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| coyove/goflyway goflyway is a Go-based encrypted port forwarder that relays TCP connections over plain HTTP POST requests, similar to ssh -L, with optional… | 23 | 4280 | maintenance |
| openai/codex-action A GitHub Action that runs OpenAI's Codex CLI inside GitHub Actions workflows, installing the CLI and routing API calls through a secure pro… | 62 | 1221 | active |
| AstraeLabs/VibraVid VibraVid is a Python-based downloader for movies, series, anime, albums, and songs, supporting DASH, HLS, ISM, and MP4 streams including DR… | 93 | 1210 | active |
| manualdousuario/marreta Marreta is a self-hostable PHP/Laravel web application that removes access barriers, paywalls, and visual distractions from web pages. It c… | 83 | 1209 | active |
| google/fuzzbench FuzzBench is a free Google-run service and framework that rigorously evaluates fuzzers on real-world benchmarks at large scale. It provides… | 61 | 1206 | active |
| auth0/go-jwt-middleware A Go middleware library by Auth0 that validates JSON Web Tokens (JWTs) on incoming HTTP requests, with a framework-agnostic core validator.… | 94 | 1205 | active |
| PebbleTemplates/pebble Pebble is a Java templating engine inspired by Twig (and similar to Jinja), featuring template inheritance, a rich set of built-in tags and… | 91 | 1196 | active |
| niudaii/zpscan zpscan is a Go-based command-line information gathering and reconnaissance tool for security assessments. It bundles subdomain enumeration,… | 23 | 1196 | active |
| plabayo/rama Rama is a modular service framework for Rust for building network clients, servers, proxies, and traffic inspection tools from composable s… | 88 | 1185 | active |
| SamuelZ12/longcut LongCut is a Next.js web application that turns long-form YouTube videos into a structured learning workspace with AI-generated highlight r… | 56 | 1185 | active |
| leiweibau/Pi.Alert Pi.Alert is a self-hosted network monitoring application that scans Wi-Fi and LAN for connected devices and alerts on unknown or missing de… | 100 | 1183 | active |
| osa1/tiny tiny is a terminal-based IRC client written in Rust with a clean, minimal UI. It supports SASL authentication, TLS, automatic reconnection,… | 55 | 1181 | active |
| kkkgo/PaoPaoDNS PaoPaoDNS is a Docker image that deploys a recursive DNS server in one command, using Unbound as the recursive resolver, Redis for caching,… | 30 | 1180 | active |
| wuyoscar/Internal-Safety-Collapse ISC-Bench/TVD is a research framework for studying 'Internal Safety Collapse' in frontier LLMs, where agents placed in adversarial codespac… | 59 | 1179 | active |
| mtotschnig/MyExpenses MyExpenses is a GPL-licensed Android app for tracking personal expenses and income across multiple accounts. It supports recurring transact… | 68 | 1175 | active |
| cubezhao/ai-tools-mng AI Tools Manager is a Tauri-based cross-platform desktop application for managing AI service accounts and tokens (Augment, Antigravity, Win… | 82 | 1174 | active |
| mobilecoinfoundation/mobilecoin MobileCoin is a privacy-preserving cryptocurrency payments network designed for mobile devices, implemented in Rust. The repository contain… | 72 | 1174 | active |
| Azure/GPT-RAG GPT-RAG is an Azure solution accelerator providing architecture templates and deployment assets for enterprise-scale Retrieval-Augmented Ge… | 92 | 1170 | active |
| yu-xiaoyao/jrebel-license-active-server A self-hosted license activation server for JRebel and XRebel, written in Go and distributed as binaries for Windows, Linux, and macOS as w… | 64 | 1165 | active |
| AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet Microsoft's IdentityModel extensions for .NET, a library for working with OpenID Connect, OAuth 2.0, and JSON Web Tokens (JWT) in .NET appl… | 98 | 1157 | active |
| basecamp/thruster Thruster is an HTTP/2 proxy written in Go that wraps the Puma webserver to provide production-ready serving of Rails applications. It offer… | 71 | 1157 | active |
| SimpleMobileTools/Simple-Gallery Simple Gallery is an open-source Android app for browsing, organizing, editing, and protecting photos, videos, and GIFs without ads. It inc… | 23 | 4013 | maintenance |
| aws/amazon-ssm-agent The Amazon SSM Agent is a Go-based daemon that runs on EC2 instances, on-premises servers, and VMs to enable remote management through AWS … | 98 | 1153 | stable |
| nashaofu/shell360 Shell360 is a cross-platform SSH and SFTP client built with Tauri, React, and Rust, supporting Windows, macOS, Linux, Android, and iOS. It … | 91 | 1153 | active |
| sagframe/sagacity-sqltoy sqltoy-orm is a Java ORM framework that combines JPA-style object CRUD with powerful, flexible SQL query capabilities. It provides advanced… | 95 | 1151 | active |
| fox-it/dissect Dissect is a modular digital forensics and incident response (DFIR) framework and toolset by Fox-IT that parses forensic artefacts from man… | 71 | 1151 | active |
| ameshkov/dnslookup dnslookup is a simple command line utility for making DNS lookups against a specified server. It supports all major DNS protocols including… | 80 | 1150 | active |
| typetools/checker-framework The Checker Framework is a framework for pluggable type-checking in Java, enhancing Java's type system to detect and prevent bugs like null… | 100 | 1149 | stable |
| random-robbie/My-Shodan-Scripts A collection of Python 3 scripts for querying the Shodan search engine to find exposed devices and services on the internet. It bundles man… | 60 | 1149 | active |
| ttttccxxui/DataInfra-RedactionEverything A local-first redaction workbench that detects and anonymizes sensitive information in documents, scanned PDFs, images, Word files, and pla… | 60 | 1147 | active |
| Psiphon-Labs/psiphon-tunnel-core Psiphon Tunnel Core is the core tunneling client and server implementation of the Psiphon Internet censorship circumvention system, written… | 95 | 1145 | active |
| tholian-network/stealth Stealth is a secure, privacy-focused web browser, scraper, and proxy built in JavaScript that emphasizes automation, bandwidth efficiency, … | 32 | 1145 | active |
| OpenNJet/OpenNJet OpenNJet is a high-performance, lightweight web application and proxy engine written in C, designed as a cloud-native service mesh data pla… | 63 | 1144 | active |
| RchGrav/claudebox ClaudeBox is a shell-based CLI tool that packages Anthropic's Claude Code coding assistant into fully containerized Docker environments wit… | 38 | 1144 | active |
| dnnsoftware/Dnn.Platform DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) built on the Microsoft/.NET ecosystem, used to build comm… | 98 | 1140 | active |
| kevthehermit/PasteHunter PasteHunter is a Python 3 application that queries public pastebin-style sites (pastebin.com, GitHub gists, slexy, stackexchange, etc.) and… | 50 | 1138 | active |
| P3TERX/warp.sh A Bash script that automates installation and configuration of Cloudflare WARP on Linux servers, supporting both the official WARP client (… | 10 | 3938 | maintenance |
| facebookresearch/watermark-anything Official PyTorch implementation and pretrained models for the paper 'Watermark Anything with Localized Messages', which embeds multiple loc… | 10 | 1137 | active |
| cipi-sh/cipi Cipi is an open-source CLI that turns a fresh Ubuntu VPS into a multi-app PHP/Laravel hosting platform with Nginx, PHP-FPM or Octane (Frank… | 96 | 1136 | active |
| certtools/intelmq IntelMQ is an open-source solution for IT security teams (CERTs, CSIRTs, SOCs) for collecting and processing security feeds using a message… | 63 | 1134 | active |
| samyk/pwnat pwnat is a C-based command-line tool that enables clients and servers behind separate NATs to communicate directly without port forwarding,… | 49 | 3917 | maintenance |
| torlando-tech/columba Columba is a native Android messaging and voice call app for the Reticulum network, sending LXMF messages and making LXST calls without int… | 82 | 1127 | active |
| dperson/openvpn-client A Docker container that runs an OpenVPN client so other containers can route their traffic through a VPN connection. It is configured via e… | 32 | 1126 | active |
| mufeedvh/binserve binserve is a fast, production-ready static web server written in Rust that ships as a single binary with zero-code configuration. It inclu… | 23 | 1126 | active |
| daveshanley/vacuum vacuum is an ultra-fast OpenAPI, AsyncAPI, and JSON Schema linter and quality-checking tool written in Go, fully compatible with Spectral r… | 95 | 1122 | active |
| localgpt-app/localgpt LocalGPT is a local-only AI assistant built in Rust that ships as a single binary with a CLI, desktop GUI, embedded web UI, HTTP API, and M… | 55 | 1121 | active |
| burghardt/easy-wg-quick A shell script that generates WireGuard VPN configurations for a hub (VPN concentrator) and its peers, including QR codes for mobile client… | 92 | 1119 | active |
| r3nt0n/bopscrk bopscrk is a Python CLI tool that generates smart, targeted wordlists for password cracking, combining user-provided words with transformat… | 23 | 1118 | active |
| bolkedebruin/rdpgw An open-source implementation of the Microsoft Remote Desktop Gateway protocol (MS-TSGU) written in Go, allowing official Microsoft RDP cli… | 81 | 1112 | active |
| crewjam/saml A Go library providing a partial implementation of the SAML standard for identity federation. It supports building both Service Providers (… | 61 | 1111 | stable |
| sandialabs/wiretap Wiretap is a transparent, VPN-like proxy server written in Go that tunnels traffic through WireGuard without requiring special privileges o… | 78 | 1107 | active |
| amruth-sn/kong Kong is an LLM-orchestrated reverse engineering CLI that plugs AI into Ghidra's analysis engine to recover function names, types, and struc… | 62 | 1105 | active |
| BastilleBSD/bastille Bastille is an open-source CLI tool for automating the deployment and management of containerized applications on FreeBSD using jails. It p… | 97 | 1098 | stable |
| NVIDIA/enroot Enroot is a command-line tool from NVIDIA that turns traditional container and OS images (such as Docker images) into unprivileged sandboxe… | 89 | 1098 | active |
| k8spacket/k8spacket k8spacket is a Kubernetes tool that collects TCP traffic and TLS connection metadata using eBPF (tracepoints and traffic-control filters) a… | 92 | 1096 | active |
| mpusher/mpush MPush is an open-source real-time message push system written in Java on Netty, with a modular server, SDKs for Android, iOS, Java, and Jav… | 23 | 3769 | maintenance |
| ufy2024/AuC AuC (Agents-ufy-Core) is a Python single-agent framework built on asyncio with a pluggable ReAct reasoning loop, LLM adapters, tiered tool … | 56 | 1091 | active |
| Tuhinshubhra/RED_HAWK RED_HAWK is a PHP-based all-in-one reconnaissance and vulnerability scanning tool for websites. It performs information gathering (whois, D… | 32 | 3746 | maintenance |
| sipyourdrink-ltd/bernstein Bernstein is a deterministic Python scheduler that orchestrates CLI coding agents (Claude Code, Codex, Gemini CLI, Aider, and 40+ more) run… | 78 | 1085 | active |
| tomsquest/docker-radicale A hardened, production-grade Docker image for Radicale, the CalDAV/CardDAV calendar and contacts server. It adds security hardening, config… | 93 | 1078 | active |
| m-sec-org/EZ EZ is a cross-platform vulnerability scanner that combines information gathering, port scanning, service brute-forcing, URL crawling, finge… | 24 | 1077 | active |
| particle-iot/device-os The open-source Device OS firmware for Particle IoT devices, providing the operating system, hardware abstraction layer, cloud communicatio… | 93 | 1076 | active |
| fizzgate/fizz-gateway-node FizzGate is a Java-based cloud-native aggregation API gateway for microservice deployments, offering hot service orchestration, routing, au… | 63 | 1075 | active |
| belaban/JGroups JGroups is a Java toolkit for reliable group communication and messaging between cluster nodes. It provides configurable protocol stacks co… | 77 | 1074 | stable |
| DNSCrypt/doh-server A fast, secure DNS-over-HTTPS (DoH) and Oblivious DoH (ODoH) server proxy written in Rust, formerly known as doh-proxy. It does not resolve… | 77 | 1064 | stable |
| gaubert/gmvault Gmvault is a Python command-line tool for backing up and restoring Gmail accounts, storing emails locally with incremental sync support. It… | 32 | 3639 | maintenance |
| Lazarus-AI/clearwing Clearwing is a dual-mode autonomous offensive-security tool that combines a network-pentest ReAct agent with an LLM-driven source-code vuln… | 63 | 1063 | active |
| bytedance/SandboxFusion A secure, self-hosted code sandbox service from ByteDance that runs and judges code generated by LLMs across 20+ programming languages via … | 63 | 1062 | active |
| kui123456789/free-account-tool A Chrome Manifest V3 browser extension that automates email-based account registration with 2FA, Passkey, and Access Token/Session manageme… | 78 | 1061 | active |
| rogue-security/rogue Rogue is an open-source AI agent evaluator and red teaming platform that stress-tests agents against business policies and simulated advers… | 78 | 1060 | active |
| echo094/decode-js A Node.js CLI tool built on Babel that analyzes and reverses obfuscated JavaScript back into readable source. It supports common obfuscatio… | 77 | 1060 | active |
| secure-software-engineering/phasar PhASAR is a LLVM-based static analysis framework written in C++20 that solves user-specified data-flow problems automatically on LLVM IR. I… | 81 | 1053 | active |
| securisec/chepy Chepy is a Python library and CLI tool that mirrors many capabilities of CyberChef, allowing data transformations like encoding, decoding, … | 74 | 1053 | active |
| emanuele-em/proxelar Proxelar is a scriptable local MITM proxy workbench written in Rust for inspecting, intercepting, replaying, and rewriting HTTP, HTTPS, and… | 97 | 1052 | active |
| chAng-L19/codex-redteam-mode An opt-in red-team mode plugin for OpenAI Codex App and Codex CLI that compiles offensive-security objectives into GoalContracts and execut… | 79 | 1049 | active |
| hypery11/flipper-tesla-fsd An open-source Tesla CAN bus toolkit implemented as a Flipper Zero app with an ESP32 port, providing features like FSD region-gate bypass, … | 75 | 1048 | active |
| mandatoryprogrammer/thermoptic Thermoptic is a stealth HTTP proxy that routes requests from any HTTP client (like curl) through a containerized Chrome instance so the tra… | 51 | 1045 | active |
| Ttungx/codex_auto_register A Python CLI tool that automates ChatGPT/Codex account registration using the DuckMail temporary email service, performs the Codex OAuth fl… | 59 | 1043 | active |
| aramperes/onetun onetun is a cross-platform, user-space WireGuard port-forwarder written in Rust that forwards local TCP/UDP ports to peers on a WireGuard n… | 55 | 1041 | active |
| toniebox-reverse-engineering/teddycloud TeddyCloud is an open-source replacement server for the Boxine Cloud that lets Toniebox owners host cloud services locally, serving their o… | 93 | 1035 | active |
| denoland/clawpatrol Claw Patrol is a security firewall and proxy for AI agents, written in Go, that intercepts agent traffic at the wire level and gates each a… | 80 | 1034 | active |
| pingooio/pingoo Pingoo is a self-hosted load balancer, API gateway, and reverse proxy written in Rust, positioned as an open-source alternative to Cloudfla… | 58 | 1029 | active |
| beizhu-1209/AIHelms AIHelms is a self-hosted enterprise AI resource governance platform that provides a unified AI gateway for managing models from OpenAI, Azu… | 80 | 1025 | active |
| nowsecure/fsmon fsmon is a low-level, cross-platform filesystem monitoring CLI tool written in C that reports real-time file operations (create, delete, mo… | 57 | 1024 | active |
| cisagov/thorium Thorium is a scalable, distributed file analysis and data generation platform that orchestrates arbitrary Docker, VM, or shell-based tools … | 77 | 1022 | active |
| alienatedsec/yi-hack-v5 Custom open-source firmware for Xiaomi Yi cameras based on the Hi3518ev200 chipset, adding a free RTSP server, ONVIF support, MQTT motion d… | 23 | 1017 | active |
| nttgin/BGPalerter BGPalerter is a self-configuring, real-time BGP and RPKI monitoring tool that detects prefix visibility loss, hijacks, RPKI invalid announc… | 77 | 1012 | active |
| wreq wreq is an ergonomic, privacy-aware HTTP client written in Rust with a Python binding (wreq-python) that provides high-fidelity browser TLS… | 90 | 1011 | active |
| error311/FileRise FileRise is a self-hosted, web-based file manager and storage hub written in PHP and JavaScript, featuring per-folder ACLs, WebDAV access, … | 82 | 1011 | active |
| mokeyish/smartdns-rs SmartDNS-rs is a cross-platform local DNS server written in Rust, inspired by the C SmartDNS project. It queries multiple upstream DNS serv… | 88 | 1009 | active |
| wang-rui/phishguard-scaffold PhishGuard is a Python research framework that jointly performs phishing detection and dissemination control on social media using LLaMA-ba… | 47 | 1009 | active |
| siyuanchen0214/Scam-AI-Multi-modal-Evaluation-System A Python-based multi-modal AI system for detecting fraudulent content across text, image, audio, and video, with provenance tracing and cro… | 39 | 1001 | active |
| codingo/NoSQLMap NoSQLMap is an open-source Python command-line tool that audits, automates injection attacks against, and exploits default configuration we… | 65 | 3344 | maintenance |
| mmatczuk/go-http-tunnel A reverse tunnel tool based on HTTP/2 that exposes localhost services to the public internet via a server (tunneld) and client (tunnel) pai… | 63 | 3332 | maintenance |
| teler-sh/teler teler is a real-time HTTP intrusion detection system that analyzes web server logs and alerts on threats using threat intelligence and cust… | 10 | 3082 | maintenance |
| SUSE/Portus Portus is an open-source authorization service and web UI for the Docker Registry v2 API, providing fine-grained push/pull permissions via … | 10 | 2981 | maintenance |
| Threezh1/JSFinder JSFinder is a Python command-line tool that crawls a website's JavaScript files and extracts URLs and subdomains using regex parsing. It su… | 32 | 2975 | maintenance |
| deanishe/alfred-workflow A Python helper library for authors of Alfred 2/3/4 workflows on macOS. It handles feedback JSON generation, fuzzy filtering, caching, sett… | 23 | 2964 | maintenance |
| paradoxxxzero/butterfly Butterfly is a browser-based terminal emulator built on websockets and the Tornado web framework, compatible with xterm. It supports multip… | 32 | 2900 | maintenance |
| airbnb/streamalert StreamAlert is a serverless, real-time data analysis framework from Airbnb for ingesting, analyzing, and alerting on log data from any envi… | 23 | 2890 | maintenance |