function: security
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| Bitmessage/PyBitmessage PyBitmessage is the reference client for Bitmessage, a peer-to-peer protocol for sending encrypted, authenticated messages without central … | 61 | 2881 | maintenance |
| AbrahamCaiJin/CommonUtilLibrary A collection of general-purpose Java utility classes for rapid Android development, covering areas like bank card validation, SharedPrefere… | 48 | 2828 | maintenance |
| ma1co/Sony-PMCA-RE A tool that interfaces with Sony digital cameras over USB to tweak settings, dump firmware, and install custom Android apps via the PlayMem… | 23 | 2779 | maintenance |
| google/enjarify Enjarify is a Python 3 tool that translates Dalvik bytecode from Android APK/DEX files into equivalent Java bytecode (JAR), enabling Java a… | 10 | 2747 | maintenance |
| mehrdadrad/mylg myLG is an open-source command-line network diagnostic tool written in Go that combines ping, traceroute, BGP looking glasses, DNS lookup, … | 23 | 2719 | maintenance |
| dlundquist/sniproxy A C-based TCP proxy that routes incoming HTTP and TLS connections to backend servers based on the hostname in the initial request (SNI or H… | 50 | 2716 | maintenance |
| micromdm/micromdm MicroMDM is an open-source Mobile Device Management (MDM) server for Apple devices, built in Go and designed to be API-first so all managem… | 70 | 2668 | maintenance |
| snyk/driftctl driftctl is a free and open-source CLI that scans cloud providers (AWS, GitHub, Azure, GCP), maps resources against Terraform code, and det… | 67 | 2663 | maintenance |
| monlor/MIXBOX-ARCHIVE MIXBOX is a shell-script-based toolbox for Xiaomi routers that provides quick configuration and management of plugins like Shadowsocks, frp… | 10 | 2387 | maintenance |
| kubeshop/monokle Monokle is an open-source desktop IDE dedicated to authoring, previewing, and validating Kubernetes YAML configurations, with support for H… | 53 | 2140 | maintenance |
| initstring/cloud_enum A Python command-line OSINT tool that enumerates publicly exposed resources across AWS, Azure, and Google Cloud using keyword mutations and… | 79 | 2138 | maintenance |
| fossabot/clash Clash is a rule-based network proxy written in Go that supports HTTP/HTTPS and SOCKS proxies with Surge-like configuration and GeoIP rule r… | 32 | 2132 | maintenance |
| armon/go-socks5 A Go library that implements a SOCKS5 proxy server, supporting No-Auth and User/Password authentication and the CONNECT command. It offers … | 32 | 2125 | maintenance |
| dapphub/dapptools Dapptools is a suite of Unix-philosophy CLI tools for Ethereum smart contract development, including dapp (build/test/fuzz/deploy), seth (E… | 26 | 2122 | maintenance |
| einaregilsson/Redirector Redirector is a browser extension for Firefox, Chrome, Edge, Vivaldi and Opera that redirects URLs based on regex or wildcard patterns, lik… | 47 | 2082 | maintenance |
| iSafeBlue/TrackRay TrackRay (溯光) is an open-source penetration testing framework written in Java on SpringBoot that implements its own vulnerability scanning … | 23 | 2078 | maintenance |
| fugue/credstash CredStash is a Python CLI utility for managing and distributing shared credentials in the cloud, encrypting secrets with AWS KMS key wrappi… | 23 | 2064 | maintenance |
| renrenio/renren-security renren-security is a lightweight, front-end/back-end separated Java rapid development platform and permission (RBAC) system built on Spring… | 23 | 2025 | maintenance |
| brannondorsey/PassGAN A Python command-line implementation of the PassGAN paper that uses a Wasserstein GAN to generate password guesses, with a pretrained model… | 23 | 2011 | maintenance |
| Flolagale/mailin Mailin is an SMTP server that receives inbound emails, parses them, and posts them as JSON to a webhook URL of your choice. It also validat… | 23 | 1954 | maintenance |
| Sky24n/flustars A Flutter common utility library providing helper classes like SpUtil (SharedPreferences wrapper), ScreenUtil (screen adaptation), WidgetUt… | 32 | 1917 | maintenance |
| 0xInfection/TIDoS-Framework TIDoS is a Python-based offensive web application penetration testing framework with a Metasploit-like console interface and an optional Qt… | 23 | 1868 | maintenance |
| devsisters/libquic libquic is a standalone C++ library packaging Chromium's QUIC implementation with minimal dependencies (only embedded BoringSSL), built via… | 23 | 1833 | maintenance |
| fsociety-team/fsociety fsociety is a modular penetration testing framework written in Python that wraps and organizes popular security tools (nmap, sqlmap, Sherlo… | 67 | 1824 | maintenance |
| Yvesssn/DetectDee DetectDee is a Go CLI tool for OSINT that hunts down social media accounts by username, email, or phone number across many social networks.… | 20 | 1812 | maintenance |
| NVIDIA/OpenShell NVIDIA OpenShell is an open-source runtime for executing autonomous AI agents (Claude Code, Codex, OpenCode, Copilot CLI) inside sandboxed … | 78 | 8501 | experimental |
| bjoernkarmann/project_alias Project Alias is an open-source Raspberry Pi-based device that acts as a 'parasite' on smart home assistants, letting users train custom wa… | 32 | 1700 | maintenance |
| SECFORCE/sparta SPARTA is a Python GUI application that simplifies network infrastructure penetration testing by streamlining the scanning and enumeration … | 23 | 1671 | maintenance |
| malfunkt/hyperfox Hyperfox is a Go-based security auditing tool that acts as a man-in-the-middle proxy for HTTP and HTTPS traffic, recording all intercepted … | 23 | 1628 | maintenance |
| v3n0m-Scanner/V3n0M-Scanner V3n0M is an offensive security framework and vulnerability scanner written in Python 3.6+ using asyncio. It scans for SQLi, XSS, LFI/RFI vu… | 23 | 1573 | maintenance |
| grafeas/grafeas Grafeas is an open-source artifact metadata API and reference server (written in Go) that defines a uniform spec for storing, querying, and… | 65 | 1571 | maintenance |
| zboxfs/zbox ZboxFS is a zero-details, privacy-focused embedded file system written in Rust that encrypts everything, including metadata and directory s… | 10 | 1543 | maintenance |
| fullstackproltd/AspNetCoreSpa A fullstack single-page application template combining ASP.NET Core 7.0 with Angular 15, featuring IdentityServer4 authentication, Entity F… | 23 | 1532 | maintenance |
| CovenantSQL/CovenantSQL CovenantSQL is a decentralized, Byzantine fault tolerant SQL database built on SQLite with blockchain features like immutable query history… | 23 | 1528 | maintenance |
| chip-red-pill/MicrocodeDecryptor A set of Python scripts for decrypting Intel Atom CPU microcode updates, using encryption keys extracted via the Red Unlock debugging techn… | 32 | 1510 | maintenance |
| banzaicloud/pipeline Banzai Cloud Pipeline is a solution-oriented application platform for developing, deploying, and securely scaling container-based applicati… | 23 | 1505 | maintenance |
| fuel/fuel FuelPHP v1.x is a lightweight, flexible MVC/HMVC web framework for PHP, featuring ViewModels (Presenters), closure-based routing, modular p… | 65 | 1503 | maintenance |
| twelvesec/gasmask GasMasK is an all-in-one open source OSINT and reconnaissance tool written in Python 3. It aggregates information about a target domain fro… | 23 | 1464 | maintenance |
| cisagov/LME CISA's Logging Made Easy (LME) is a free, open-source log management and threat detection platform that bundles Elasticsearch, Kibana, Wazu… | 10 | 1442 | maintenance |
| FunnyWolf/pystinger Pystinger is a Python tool that establishes a SOCKS4a proxy and port mapping through a webshell (PHP, JSP, or ASPX) on a compromised server… | 23 | 1426 | maintenance |
| mnemox-ai/tradememory-protocol TradeMemory Protocol is an MCP server providing persistent memory and a tamper-evident decision audit trail for AI trading agents, with out… | 79 | 1412 | maintenance |
| blackberry/pe_tree PE Tree is a Python module and standalone GUI application for viewing Portable Executable (PE) files in a tree-view, built on pefile and Py… | 10 | 1343 | maintenance |
| jbangert/trapcc trapcc is a proof-by-construction that Intel MMU fault handling is Turing complete: an assembler translates 'Move, Branch if Zero, Decremen… | 32 | 1323 | maintenance |
| laramies/metagoofil Metagoofil is a Python command-line OSINT tool that searches Google for public documents (pdf, doc, xls, ppt) on target websites, downloads… | 32 | 1317 | maintenance |
| c4tcom/Katana Katana-ds is a Python CLI tool that automates advanced Google queries known as Google Dorks (Google Dorking), with optional Tor support for… | 10 | 1307 | maintenance |
| keratin/authn-server Keratin AuthN is a standalone Go authentication microservice that manages user accounts, passwords, OAuth logins, and JWT-based sessions vi… | 23 | 1284 | maintenance |
| BrandonJoffe/home_surveillance A self-hosted home surveillance application that processes streams from multiple IP cameras, performs motion detection and facial recogniti… | 32 | 1259 | maintenance |
| rack/rack-contrib A collection of contributed Rack middleware components and utilities for Ruby's Rack web server interface. It provides dozens of small, com… | 23 | 1255 | maintenance |
| mehrdadrad/radvpn RadVPN is a decentralized, full-mesh VPN written in Go that connects nodes directly without a central server, with a built-in router for pa… | 32 | 1251 | maintenance |
| tf-encrypted/tf-encrypted TF Encrypted is a Python framework for privacy-preserving machine learning in TensorFlow, enabling training and prediction on encrypted dat… | 32 | 1242 | maintenance |
| session-replay-tools/cetus Cetus is a high-performance MySQL proxy middleware written in C that provides transparent routing between applications and backend MySQL se… | 23 | 1241 | maintenance |
| BriData/DBus DBus is a Java-based data bus platform that captures incremental changes from databases (via log-based CDC) and log sources in a non-intrus… | 23 | 1213 | maintenance |
| yhy0/github-cve-monitor A Python application that monitors GitHub every few minutes for newly published CVEs, security tool updates, and activity on watched reposi… | 32 | 1196 | maintenance |
| yggdrasil-network/yggdrasil-go Yggdrasil is a lightweight userspace software router implementing an experimental, fully end-to-end encrypted IPv6 overlay network with a s… | 86 | 5391 | experimental |
| 18601949127/DiDiCallCar An Android ride-hailing demo app modeled on Didi, built end-to-end by one developer including the Apache+PHP+MySQL backend. It adds RFID/NF… | 32 | 1165 | maintenance |
| ivanilves/xiringuito Xiringuito is a shell-script-based SSH tunneling tool that provides VPN-like access to remote networks without running a VPN server. It use… | 23 | 1160 | maintenance |
| seashell/drago Drago is a flexible configuration manager for WireGuard that provides a unified control plane for building secure network overlays across h… | 23 | 1121 | maintenance |
| swanandx/lemmeknow lemmeknow is a fast Rust CLI tool and library that identifies mysterious text, strings, and files using regex-based pattern matching (e.g.,… | 23 | 1117 | maintenance |
| devxprite/infoooze Infoooze is a Node.js-based OSINT (Open-Source Intelligence) CLI tool for quickly gathering information about websites, IP addresses, usern… | 23 | 1077 | maintenance |
| joewalnes/filtrex Filtrex is a small JavaScript library that compiles a simple, spreadsheet-like filter expression language written by end-users into safe, f… | 32 | 1071 | maintenance |
| nsacyber/GRASSMARLIN GRASSMARLIN is a Java-based desktop application from NSA that provides IP network situational awareness for Industrial Control Systems (ICS… | 10 | 1059 | maintenance |
| acheong08/obi-sync A reverse-engineered, self-hosted replacement for the official Obsidian Sync and Publish servers, written in Go. It provides end-to-end enc… | 10 | 1041 | maintenance |
| averagesecurityguy/scripts A collection of Python scripts written for use during penetration testing engagements, organized into categories like brute forcing, enumer… | 32 | 1033 | maintenance |
| xdtianyu/scripts A personal collection of shell scripts for various work and sysadmin tasks by xdtianyu, including things like dynamic DNS updates, SSL cert… | 32 | 1023 | maintenance |
| bit4woo/teemo Teemo is a Python command-line reconnaissance tool that collects domains, subdomains, and email addresses for a target organization. It agg… | 32 | 1016 | maintenance |
| motiful/cc-gateway CC Gateway is a self-hosted reverse proxy that sits between Claude Code clients and the Anthropic API, normalizing device fingerprints, tel… | 48 | 3024 | experimental |
| arcboxlabs/arcbox ArcBox is an open-source container and VM runtime for macOS written from scratch in Rust, providing a drop-in Docker engine, native Kuberne… | 78 | 2892 | experimental |
| openairplay/airplay2-receiver A Python implementation of an AirPlay 2 receiver that can accept audio streams from Apple devices and other AirPlay senders. It supports Ho… | 72 | 2404 | experimental |
| saljam/webwormhole WebWormhole is a tool that creates ephemeral, peer-authenticated WebRTC pipes between computers for sending files or data, secured with a P… | 58 | 2084 | experimental |
| happier-dev/happier Happier is an open-source, end-to-end encrypted companion client for AI coding agents like Claude Code, Codex, Gemini, and OpenCode. It let… | 84 | 1615 | experimental |
| cyphar/paperback paperback is a Rust CLI tool that creates encrypted paper backups suitable for long-term storage. It encrypts data and splits the secret ke… | 54 | 1480 | experimental |
| nethical6/conversation-steganography A Go CLI tool that hides encrypted secret messages inside natural-looking chat text generated by a local LLM (GPT-2), enabling covert commu… | 54 | 1243 | experimental |
| microsoft/winappCli The Windows App Development CLI (winapp) is a single command-line tool from Microsoft for managing Windows SDKs, MSIX packaging, app identi… | 84 | 1212 | experimental |
| hanselime/paqet paqet is a raw-packet proxy written in Go that tunnels traffic inside hand-crafted TCP packets, bypassing the host's TCP/IP stack using pca… | 82 | 1185 | experimental |
| robert/PySkyWiFi PySkyWiFi is a humorous Python proof-of-concept that tunnels internet requests through the free-to-edit 'name' field of an airline airmiles… | 24 | 1185 | experimental |
| NytroRST/ShellcodeCompiler A C++ command-line compiler that converts a simplified C/C++-style source language into small, position-independent, NULL-free shellcode fo… | 32 | 1158 | experimental |
| ronibandini/reggaetonBeGone A Raspberry Pi-based edge machine learning device that continuously samples ambient audio and uses an Edge Impulse audio classification mod… | 70 | 1005 | experimental |
| daytonaio/daytona Daytona is a secure, elastic infrastructure platform for running AI-generated code in isolated sandboxes with dedicated kernels, filesystem… | 82 | 71819 | abandoned |
| aliasrobotics/cai Cybersecurity AI (CAI) is an open-source Python framework of specialized AI agents for offensive security tasks such as penetration testing… | 10 | 9821 | abandoned |
| shadowsocks/shadowsocks-go A Go port of the Shadowsocks lightweight encrypted tunnel proxy, providing local SOCKS5 client and remote server binaries to bypass firewal… | 10 | 6543 | abandoned |
| bitly/oauth2_proxy A Go reverse proxy and static file server that adds OAuth2 authentication (Google, GitHub, Azure, GitLab, and others) in front of web appli… | 10 | 5087 | abandoned |
| krakenjs/kraken-js Kraken-js is an Express-based Node.js web application bootstrapping module that adds environment-aware configuration, middleware management… | 39 | 4917 | abandoned |
| ToyoDAdoubi/doubi A collection of one-click Bash installation and management scripts for Linux servers, primarily for proxy tools like Shadowsocks/Shadowsock… | 32 | 4688 | abandoned |
| stonith404/pingvin-share Pingvin Share is a self-hosted file sharing platform and WeTransfer alternative built with Next.js and NestJS. It lets users share files vi… | 10 | 4676 | abandoned |
| status-im/status-legacy Status is a free, open-source mobile Ethereum client combining a private messenger, crypto wallet, and Web3 browser, built with ClojureScri… | 10 | 4021 | abandoned |
| facebookarchive/RakNet RakNet is a cross-platform, open-source C++ networking engine designed for game programmers, providing reliable UDP transport, replication,… | 10 | 3426 | abandoned |
| buzzfeed/sso sso (S.S. Octopus) is a single sign-on solution built at BuzzFeed for securing internal services behind OAuth-based authentication. It acts… | 10 | 3123 | abandoned |
| google/exposure-notifications-server Google's open-source reference implementation of the COVID-19 Exposure Notifications key server, written in Go. It accepts, validates, stor… | 10 | 2587 | abandoned |
| evilsocket/bettercap bettercap is a network attack and reconnaissance framework, described as a Swiss Army knife for WiFi, BLE, HID hijacking, CAN-bus, and IPv4… | 10 | 2490 | abandoned |
| evilsocket/xray XRay is a Go-based CLI tool for network reconnaissance and OSINT that enumerates subdomains via DNS bruteforcing, gathers open-port intelli… | 10 | 2331 | abandoned |
| Caiyeon/goldfish Goldfish is a web-based UI and workflow tool for HashiCorp Vault, built with VueJS on the frontend and a Go backend using Vault's native AP… | 10 | 2127 | abandoned |
| ttlequals0/autovpn A command-line tool that creates disposable OpenVPN endpoints on AWS EC2 instances in any region with a single command, then lets you termi… | 56 | 2018 | abandoned |
| fqrouter/fqrouter fqrouter is an Android application designed to bypass the Great Firewall of China (GFW) by routing traffic through anti-censorship proxies.… | 32 | 1944 | abandoned |
| mozilla/persona Mozilla Persona is a secure, distributed identification system based on the BrowserID protocol, providing login services including a fallba… | 10 | 1838 | abandoned |
| bahmutov/code-snippets A collection of JavaScript code snippets designed to be run in Chrome DevTools for performance profiling, debugging, and testing web pages.… | 23 | 1822 | abandoned |
| yamada95/kitsunebi-android Kitsunebi is a fully-featured V2Ray client for Android written in Kotlin, supporting proxy configuration, routing rule sets, Fake DNS, late… | 10 | 1806 | abandoned |
| dephell/dephell DepHell is an all-in-one Python project management CLI that converts between dependency formats (setup.py, requirements.txt, Pipfile, poetr… | 10 | 1786 | abandoned |
| thiagoralves/OpenPLC_v3 OpenPLC Runtime version 3 is an open-source Programmable Logic Controller (PLC) runtime that executes ladder logic and other IEC 61131-3 pr… | 10 | 1570 | abandoned |
| fossasia/KikiAuth KikiAuth is a LuCI-based OpenWrt application that acts as an alternative auth server for WifiDog, enabling captive-portal authentication vi… | 32 | 1493 | abandoned |
| cfrs2005/claude-init A Chinese-localized project initialization toolkit for Claude Code that sets up an AI coding environment with MCP servers, agents, skills, … | 60 | 1364 | abandoned |