function: security
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| telemt/telemt Telemt is a high-performance MTProxy server for Telegram written in Rust with Tokio, implementing all official MTProto proxy modes includin… | 78 | 5627 | active |
| next-terminal/next-terminal Next Terminal is an open-source bastion host (jump server) and interactive session auditing system supporting SSH, RDP, VNC, Telnet, HTTP, … | 99 | 5612 | active |
| google/clusterfuzz ClusterFuzz is Google's scalable fuzzing infrastructure that finds security and stability bugs in software, serving as the backend for OSS-… | 95 | 5597 | active |
| caddyserver/certmagic CertMagic is a Go library that provides fully-managed automatic HTTPS, handling TLS certificate issuance, renewal, and OCSP stapling via AC… | 89 | 5588 | stable |
| adamchainz/django-cors-headers A Django app that adds Cross-Origin Resource Sharing (CORS) headers to HTTP responses via middleware. It allows in-browser requests to a Dj… | 76 | 5587 | stable |
| phpseclib/phpseclib A MIT-licensed pure-PHP library providing implementations of SSH-2, SFTP, X.509/CSR/CRL/PFX/CMS, and a wide range of cryptographic primitiv… | 99 | 5585 | stable |
| lief-project/LIEF LIEF is a cross-platform C++ library (with Python and Rust bindings) for parsing, inspecting, modifying, and writing executable file format… | 97 | 5549 | stable |
| the1812/Malware-Patch A Windows utility that blocks administrator (UAC) authorization for specified software, such as known Chinese rogueware, using digital sign… | 77 | 5546 | active |
| Dr-TSNG/Hide-My-Applist An Xposed module for rooted Android devices that hides installed apps from other apps' package list queries. It intercepts app list detecti… | 88 | 5539 | active |
| fscarmen/sing-box A one-click shell script that deploys and manages a sing-box multi-protocol proxy server on a VPS, supporting protocols like Reality, Hyste… | 72 | 5537 | active |
| OWASP/Nettacker OWASP Nettacker is a Python-based automated penetration testing and information-gathering framework for reconnaissance, vulnerability scann… | 88 | 5535 | active |
| tonarino/innernet innernet is a self-hosted private network (overlay VPN) system built on WireGuard, with a coordination server and client CLI written in Rus… | 86 | 5535 | active |
| USArmyResearchLab/Dshell Dshell is an extensible network forensic analysis framework written in Python for dissecting network packet captures (pcap/pcapng). It supp… | 23 | 5492 | active |
| binpash/try try is a command-line tool that lets you run a command and inspect its effects before committing changes to your live system. It uses Linux… | 81 | 5490 | active |
| dovecoteescapee/ByeDPIAndroid An Android application that runs a local VPN service wrapping the ByeDPI SOCKS5 proxy to bypass Deep Packet Inspection (DPI) and censorship… | 16 | 5480 | active |
| dev-sec/ansible-collection-hardening An Ansible collection of battle-tested hardening roles for Linux operating systems, SSH, nginx, and MySQL/MariaDB. It automates secure conf… | 90 | 5450 | active |
| Hackplayers/evil-winrm Evil-WinRM is a Ruby-based command-line WinRM shell designed for hacking and penetration testing of Windows servers. It supports features l… | 79 | 5448 | active |
| 3proxy/3proxy 3proxy is a tiny, free proxy server written in C supporting SOCKS, HTTP, HTTPS, FTP, and TLS proxying with traffic shaping, port mapping, a… | 99 | 5421 | stable |
| Speykious/cve-rs cve-rs is a joke/educational Rust crate that reproduces classic memory vulnerabilities (use-after-free, buffer overflow, segfault) using on… | 36 | 5420 | active |
| drk1wi/Modlishka Modlishka is an open-source penetration testing tool written in Go that acts as a transparent man-in-the-middle reverse proxy. It can proxy… | 66 | 5407 | active |
| openemr/openemr OpenEMR is the most popular open-source electronic health records (EHR) and medical practice management application, written in PHP. It off… | 95 | 5392 | stable |
| rayenghanmi/RyTuneX RyTuneX is a Windows 10 and 11 system optimizer built with WinUI 3, offering debloating, privacy hardening, performance tweaks, and network… | 88 | 5382 | active |
| hickory-dns/hickory-dns Hickory DNS (formerly Trust-DNS) is a Rust-based DNS client, server, and resolver library suite built for safety and security. It supports … | 93 | 5381 | active |
| teddysun/across A collection of shell scripts for Linux VPS/server administration, including WireGuard VPN setup, TCP BBR kernel installation, KMS server d… | 66 | 5368 | active |
| Pay An elegant PHP payment SDK supporting Alipay, WeChat Pay, UnionPay (Unipay), Douyin Pay, and Jiangsu Bank e-payment gateways. It features a… | 87 | 5365 | stable |
| portapack-mayhem/mayhem-firmware Mayhem is open-source firmware for the HackRF One combined with the PortaPack H1/H2/H4/H4M add-on, turning the SDR into a standalone touchs… | 83 | 5361 | active |
| P-H-C/phc-winner-argon2 The reference C implementation of Argon2, the winner of the Password Hashing Competition, providing memory-hard password hashing with Argon… | 23 | 5358 | stable |
| microsoft/azurelinux Azure Linux is an open-source, general-purpose Linux distribution built and optimized for Microsoft Azure, with sources derived from Fedora… | 98 | 5330 | active |
| ThreatMapper Deepfence ThreatMapper is an open-source Cloud Native Application Protection Platform (CNAPP) that hunts threats in production cloud, Kuber… | 84 | 5318 | active |
| leizongmin/js-xss A JavaScript library for sanitizing untrusted HTML to prevent XSS attacks using a configurable whitelist of allowed tags and attributes. It… | 69 | 5313 | stable |
| RhinoSecurityLabs/pacu Pacu is an open-source AWS exploitation framework for offensive security testing of Amazon Web Services environments. It provides a modular… | 73 | 5312 | active |
| Tribler/tribler Tribler is a privacy-enhanced BitTorrent client with built-in decentralized search and content discovery, using a custom Tor-like onion rou… | 89 | 5303 | active |
| kanidm/kanidm Kanidm is a simple, secure, and fast identity management platform written in Rust that acts as a complete identity provider for other appli… | 99 | 5291 | active |
| CreditTone/hooker hooker is a Frida-based reverse engineering toolkit for Android that provides a comfortable command-line interface with universal hooking s… | 70 | 5285 | active |
| FunnyWolf/Viper VIPER is a self-hosted red teaming and adversary simulation platform with a web UI, 100+ post-exploitation modules covering MITRE ATT&CK, a… | 85 | 5279 | active |
| mentebinaria/retoolkit An Inno Setup-based installer that bundles a curated collection of reverse engineering and malware analysis tools for x86/x64 Windows syste… | 82 | 5278 | active |
| Naituw/IPAPatch IPAPatch is an Xcode project template that lets you patch decrypted iOS app IPA files by injecting your own dynamic libraries, without requ… | 54 | 5275 | active |
| bpc-clone/bpc_chrome_support Support repository for Bypass Paywalls Clean, a browser extension that bypasses paywalls on news sites. The extension itself has moved to g… | 34 | 5270 | active |
| hahwul/dalfox Dalfox is an open-source XSS vulnerability scanner written in Rust that automates discovery, injection, and DOM/AST-level verification of r… | 98 | 5256 | active |
| lxc/lxc LXC is a low-level Linux container runtime providing a userspace interface to kernel containment features like namespaces, cgroups, and man… | 84 | 5248 | stable |
| martin-ger/esp_wifi_repeater Firmware for the ESP8266/ESP8285 that turns the chip into a full WiFi NAT router and, in a separate edition, a true L2-bridge WiFi repeater… | 71 | 5242 | active |
| bitcoinj/bitcoinj bitcoinj is a Java library for working with the Bitcoin protocol, supporting wallet management, sending and receiving transactions via SPV … | 89 | 5228 | active |
| kasmtech/KasmVNC KasmVNC is a modern, secure VNC server that streams a Linux desktop or application to any web browser, breaking from the legacy RFB protoco… | 89 | 5218 | active |
| RaspAP/raspap-webgui RaspAP is a full-featured wireless router and access point management application for Debian-based devices such as the Raspberry Pi, provid… | 96 | 5216 | active |
| nikkinikki-org/OpenWrt-nikki Nikki is an OpenWrt package (with a LuCI web interface) that runs Mihomo (Clash Meta) as a transparent proxy on OpenWrt routers. It manages… | 83 | 5198 | active |
| vyperlang/vyper Vyper is a Pythonic smart contract language that compiles to Ethereum Virtual Machine (EVM) bytecode, emphasizing security, simplicity, and… | 74 | 5180 | active |
| dashingsoft/pyarmor Pyarmor is a command-line tool for obfuscating Python scripts, making them hard to reverse-engineer. It also supports binding obfuscated sc… | 99 | 5179 | active |
| Ullaakut/cameradar Cameradar is a Go-based command-line tool that scans targets for open RTSP video surveillance endpoints and uses dictionary attacks to disc… | 94 | 5173 | active |
| feschber/lan-mouse Lan Mouse is a cross-platform software KVM switch that lets you share a single mouse and keyboard across multiple PCs over a local network.… | 80 | 5169 | active |
| zhkl0228/unidbg A Java-based framework that emulates Android (and experimentally iOS) native libraries on non-ARM hosts, including JNI, syscalls, and ARM32… | 79 | 5165 | active |
| GhostPack/Rubeus Rubeus is a C# command-line toolset for raw Kerberos interaction and abuse on Windows, adapted from Kekeo and MakeMeEnterpriseAdmin. It sup… | 60 | 5145 | active |
| jinwyp/one_click_script A collection of one-click shell scripts for Linux servers that install latest or LTS Linux kernels and enable BBR or BBR Plus congestion co… | 71 | 5139 | active |
| bisq-network/bisq Bisq is an open-source desktop application and peer-to-peer network for exchanging bitcoin for national currencies and other cryptocurrenci… | 99 | 5128 | stable |
| scinfu/SwiftSoup SwiftSoup is a pure Swift HTML parser library that conforms to the WHATWG HTML5 specification and offers DOM traversal, CSS selectors, and … | 99 | 5119 | stable |
| SpaceTimee/Sheas-Cealer Sheas Cealer is a WPF (.NET 8) Windows desktop tool that forges the SNI extension field in Chromium's launch parameters, allowing users to … | 68 | 5116 | active |
| gommzystudio/device-activity-tracker A proof-of-concept application that tracks device activity of phone numbers on WhatsApp and Signal by measuring round-trip times of silent … | 43 | 5098 | active |
| mimblewimble/grin Grin is a minimal, open-source implementation of the Mimblewimble blockchain protocol, providing a privacy-preserving digital currency with… | 93 | 5093 | active |
| niklashigi/apk-mitm A Node.js CLI application that automatically patches Android APK files to allow HTTPS traffic inspection through a man-in-the-middle proxy.… | 23 | 5092 | stable |
| angryip/ipscan Angry IP Scanner is a fast, open-source IP address and port scanner with a friendly GUI built on Eclipse SWT. It scans networks for hosts, … | 75 | 5091 | active |
| google/grr GRR Rapid Response is an incident response framework focused on remote live forensics. It consists of a Python agent installed on target sy… | 70 | 5088 | active |
| lc/gau gau (getallurls) is a Go CLI tool that fetches known URLs for a given domain from AlienVault's Open Threat Exchange, the Wayback Machine, C… | 56 | 5076 | active |
| flatpak/flatpak Flatpak is a framework for building, distributing, and running sandboxed desktop applications on Linux. It lets developers package an app o… | 94 | 5050 | stable |
| techchipnet/CamPhish CamPhish is a bash-based penetration-testing tool that hosts a fake webpage on a built-in PHP server and exposes it via ngrok or CloudFlare… | 40 | 5020 | active |
| ClearURLs/Addon ClearURLs is a browser extension built on WebExtensions technology that automatically removes tracking parameters (like utm_source) from UR… | 38 | 5018 | active |
| pritunl/pritunl Pritunl is a distributed enterprise VPN server built on the OpenVPN protocol (with WireGuard support), managed through a web interface and … | 97 | 5010 | active |
| xvzc/spoofdpi SpoofDPI is a lightweight, cross-platform proxy tool written in Go that circumvents Deep Packet Inspection (DPI) based internet censorship … | 90 | 5002 | active |
| tianon/gosu gosu is a small Go-based CLI tool for switching to another user (setuid/setgid/setgroups) and exec'ing a command, designed as a lightweight… | 76 | 5000 | stable |
| V4bel/dirtyfrag Dirty Frag is a proof-of-concept Linux kernel local privilege escalation exploit written in C. It chains the xfrm-ESP (CVE-2026-43284) and … | 50 | 4990 | active |
| atom0s/Steamless Steamless is a C# tool that removes the SteamStub DRM protection layer applied to Steam game executables via the Steamworks SDK DRM tool. I… | 23 | 4990 | active |
| certd/certd Certd is a free, open-source, fully automated SSL certificate management system that applies for, renews, and deploys certificates via conf… | 95 | 4978 | active |
| perplexityai/bumblebee Bumblebee is a read-only Go CLI that scans developer endpoints for on-disk package, extension, and developer-tool metadata (lockfiles, pack… | 76 | 4975 | active |
| cilium/tetragon Tetragon is an eBPF-based security observability and runtime enforcement tool from the Cilium project. It monitors process execution, sysca… | 95 | 4955 | active |
| domcyrus/rustnet RustNet is a cross-platform terminal-based network monitoring tool that maps live TCP, UDP, and QUIC connections to their owning processes … | 86 | 4946 | active |
| Kozea/Radicale Radicale is a lightweight CalDAV and CardDAV server for sharing calendars, to-do lists, and contacts over HTTP. It stores data on the file … | 98 | 4931 | stable |
| Nyr/wireguard-install A Bash installer script that sets up a WireGuard VPN server on Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, and Fedora in about a minute… | 73 | 4926 | active |
| bitsadmin/wesng WES-NG is a Python command-line tool that parses Windows `systeminfo` output (or missing KB listings) and cross-references it against a reg… | 76 | 4923 | active |
| matter-labs/zksync zkSync is Matter Labs' open-source ZK Rollup technology for scaling and adding privacy to Ethereum, including the ZK Stack framework for la… | 59 | 4923 | active |
| DefectDojo/django-DefectDojo DefectDojo is an open-source vulnerability management, DevSecOps, and ASPM platform built on Django. It aggregates findings from hundreds o… | 95 | 4909 | active |
| SadeghHayeri/GreenTunnel GreenTunnel is an anti-censorship tool that bypasses ISP Deep Packet Inspection (DPI) systems by splitting TLS ClientHello packets and usin… | 97 | 4902 | active |
| internet-court/internet-court-skill An open Agent Skill / Claude Code plugin that acts as a trust layer for agent-to-agent commerce, combining natural-language mandates, ERC-7… | 57 | 4900 | active |
| crimera/piko Piko is a collection of Morphe patches that modify the Twitter/X and Instagram Android apps to add features like ad blocking, download capa… | 91 | 4894 | active |
| nicocha30/ligolo-ng Ligolo-ng is a tunneling and pivoting tool written in Go that establishes tunnels over reverse TCP/TLS connections using a TUN interface in… | 98 | 4893 | active |
| luestr/ProxyResource A curated resource repository for the Loon proxy app, providing configuration templates, plugins, scripts, and rule sets. It serves as an i… | 66 | 4884 | active |
| UndeadSec/SocialFish SocialFish is a Python-based phishing toolkit that clones modern login pages using Playwright browser automation and captures credentials, … | 76 | 4851 | active |
| Aliucord/Aliucord Aliucord is a rootless modification of the legacy Discord Android app that adds a plugin system with 280+ plugins, 250+ custom themes, an i… | 67 | 4851 | active |
| NLnetLabs/unbound Unbound is a validating, recursive, and caching DNS resolver written in C, designed to be fast and lean while implementing modern open stan… | 94 | 4818 | stable |
| charles2gan/GDA-android-reversing-Tool GDA (GJoy Dex Analyzer) is a fast, native C++ Dalvik bytecode decompiler and reverse analysis platform for Android binaries such as APK, DE… | 70 | 4818 | active |
| aloshdenny/reverse-SynthID A research tool that reverse-engineers Google's SynthID watermark embedded in Gemini-generated images using spectral analysis and signal pr… | 66 | 4815 | active |
| jmpews/Dobby Dobby is a lightweight, modular function hooking framework supporting multiple platforms (Windows, macOS, iOS, Android, Linux) and architec… | 24 | 4813 | active |
| duckduckgo/Android The official DuckDuckGo Android app, a privacy-focused mobile browser and search client written in Kotlin. It blocks trackers, enforces enc… | 95 | 4802 | active |
| greenbone/openvas-scanner OpenVAS Scanner is the scan engine of the Greenbone Community Edition, executing a continuously updated feed of vulnerability tests against… | 95 | 4796 | active |
| aya-rs/aya Aya is a Rust library for building and loading eBPF programs on Linux, implemented entirely in Rust without libbpf or BCC. It provides BTF-… | 96 | 4784 | active |
| mitchellkrogza/nginx-ultimate-bad-bot-blocker A drop-in Nginx configuration package that blocks bad bots, spam referrers, vulnerability scanners, malware, adware, and fake Googlebots, w… | 77 | 4781 | active |
| open-sdr/openwifi Open-source full-stack IEEE 802.11/Wi-Fi design based on Software Defined Radio, including a Linux mac80211-compatible driver and software,… | 68 | 4772 | active |
| microsoft/msquic MsQuic is Microsoft's cross-platform C implementation of the IETF QUIC transport protocol (RFC 9000), with API wrappers for C++, C#, and Ru… | 98 | 4771 | stable |
| diafygi/acme-tiny A tiny, auditable Python script (under 200 lines) that issues and renews TLS certificates from Let's Encrypt using the ACME protocol. It re… | 68 | 4770 | stable |
| kingparks/cursor-vip cursor-vip is a Go-based command-line tool that grants the Cursor IDE VIP/Pro-like access by sharing pooled accounts, installed via shell s… | 45 | 4769 | active |
| aws/s2n-tls s2n-tls is a C99 implementation of the TLS/SSL protocols designed to be simple, small, fast, and security-focused, maintained by AWS. It pr… | 99 | 4755 | stable |
| cdk-team/CDK CDK is a zero-dependency container penetration toolkit written in Go for security testing of Kubernetes, Docker, and Containerd environment… | 70 | 4740 | active |
| MlgmXyysd/Xiaomi-HyperOS-BootLoader-Bypass A proof-of-concept PHP tool that exploits a vulnerability to bypass Xiaomi HyperOS community account restrictions on BootLoader unlock bind… | 40 | 4738 | active |