Open-source security software
4909 open-source libraries, tools and applications tagged security, ranked by how closely security is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| Caddy CertMagic is a Go library that provides fully-managed automatic HTTPS, handling TLS certificate issuance, renewal, and OCSP stapling via AC… | 93 | 5608 | stable |
| lief-project/LIEF LIEF is a cross-platform C++ library (with Python and Rust bindings) for parsing, inspecting, modifying, and writing executable file format… | 95 | 5598 | stable |
| Dr-TSNG/Hide-My-Applist An Xposed module for rooted Android devices that hides installed apps from other apps' package list queries. It intercepts app list detecti… | 82 | 5597 | active |
| phpseclib/phpseclib A MIT-licensed pure-PHP library providing implementations of SSH-2, SFTP, X.509/CSR/CRL/PFX/CMS, and a wide range of cryptographic primitiv… | 95 | 5592 | stable |
| the1812/Malware-Patch A Windows utility that blocks administrator (UAC) authorization for specified software, such as known Chinese rogueware, using digital sign… | 70 | 5592 | active |
| adamchainz/django-cors-headers A Django app that adds Cross-Origin Resource Sharing (CORS) headers to HTTP responses via middleware. It allows in-browser requests to a Dj… | 76 | 5581 | stable |
| tonarino/innernet innernet is a self-hosted private network (overlay VPN) system built on WireGuard, with a coordination server and client CLI written in Rus… | 80 | 5554 | active |
| rayenghanmi/RyTuneX RyTuneX is a Windows 10 and 11 system optimizer built with WinUI 3, offering debloating, privacy hardening, performance tweaks, and network… | 90 | 5553 | active |
| Hackplayers/evil-winrm Evil-WinRM is a Ruby-based command-line WinRM shell designed for hacking and penetration testing of Windows servers. It supports features l… | 89 | 5552 | active |
| dovecoteescapee/ByeDPIAndroid An Android application that runs a local VPN service wrapping the ByeDPI SOCKS5 proxy to bypass Deep Packet Inspection (DPI) and censorship… | 17 | 5539 | active |
| openemr/openemr OpenEMR is the most popular open-source electronic health records (EHR) and medical practice management application, written in PHP. It off… | 99 | 5530 | stable |
| DevSec Hardening Framework An Ansible collection of battle-tested hardening roles for Linux operating systems, SSH, nginx, and MySQL/MariaDB. It automates secure conf… | 95 | 5499 | active |
| 3proxy/3proxy 3proxy is a tiny, free proxy server written in C supporting SOCKS, HTTP, HTTPS, FTP, and TLS proxying with traffic shaping, port mapping, a… | 96 | 5498 | stable |
| USArmyResearchLab/Dshell Dshell is an extensible network forensic analysis framework written in Python for dissecting network packet captures (pcap/pcapng). It supp… | 23 | 5496 | active |
| binpash/try try is a command-line tool that lets you run a command and inspect its effects before committing changes to your live system. It uses Linux… | 84 | 5495 | active |
| kanidm/kanidm Kanidm is a simple, secure, and fast identity management platform written in Rust that acts as a complete identity provider for other appli… | 98 | 5481 | active |
| PortaPack Mayhem Mayhem is open-source firmware for the HackRF One combined with the PortaPack H1/H2/H4/H4M add-on, turning the SDR into a standalone touchs… | 80 | 5475 | active |
| hickory-dns/hickory-dns Hickory DNS (formerly Trust-DNS) is a Rust-based DNS client, server, and resolver library suite built for safety and security. It supports … | 97 | 5445 | active |
| Speykious/cve-rs cve-rs is a joke/educational Rust crate that reproduces classic memory vulnerabilities (use-after-free, buffer overflow, segfault) using on… | 32 | 5428 | active |
| drk1wi/Modlishka Modlishka is an open-source penetration testing tool written in Go that acts as a transparent man-in-the-middle reverse proxy. It can proxy… | 63 | 5427 | active |
| kaifcodec/user-scanner A 2-in-1 Python CLI OSINT suite that performs email and username intelligence across 440+ scan vectors (170+ email sites, 270+ username pla… | 83 | 5425 | active |
| teddysun/across A collection of shell scripts for Linux VPS/server administration, including WireGuard VPN setup, TCP BBR kernel installation, KMS server d… | 62 | 5376 | active |
| P-H-C/phc-winner-argon2 The reference C implementation of Argon2, the winner of the Password Hashing Competition, providing memory-hard password hashing with Argon… | 23 | 5375 | stable |
| feschber/lan-mouse Lan Mouse is a cross-platform software KVM switch that lets you share a single mouse and keyboard across multiple PCs over a local network.… | 80 | 5374 | active |
| Pay An elegant PHP payment SDK supporting Alipay, WeChat Pay, UnionPay (Unipay), Douyin Pay, and Jiangsu Bank e-payment gateways. It features a… | 83 | 5370 | stable |
| nikkinikki-org/OpenWrt-nikki Nikki is an OpenWrt package (with a LuCI web interface) that runs Mihomo (Clash Meta) as a transparent proxy on OpenWrt routers. It manages… | 92 | 5364 | active |
| microsoft/azurelinux Azure Linux is an open-source, general-purpose Linux distribution built and optimized for Microsoft Azure, with sources derived from Fedora… | 99 | 5356 | active |
| RhinoSecurityLabs/pacu Pacu is an open-source AWS exploitation framework for offensive security testing of Amazon Web Services environments. It provides a modular… | 66 | 5345 | active |
| FunnyWolf/Viper VIPER is a self-hosted red teaming and adversary simulation platform with a web UI, 100+ post-exploitation modules covering MITRE ATT&CK, a… | 79 | 5327 | active |
| hahwul/dalfox Dalfox is an open-source XSS vulnerability scanner written in Rust that automates discovery, injection, and DOM/AST-level verification of r… | 99 | 5326 | active |
| ThreatMapper Deepfence ThreatMapper is an open-source Cloud Native Application Protection Platform (CNAPP) that hunts threats in production cloud, Kuber… | 78 | 5324 | active |
| Kasm Workspaces KasmVNC is a modern, secure VNC server that streams a Linux desktop or application to any web browser, breaking from the legacy RFB protoco… | 87 | 5323 | active |
| CreditTone/hooker hooker is a Frida-based reverse engineering toolkit for Android that provides a comfortable command-line interface with universal hooking s… | 75 | 5322 | active |
| mentebinaria/retoolkit An Inno Setup-based installer that bundles a curated collection of reverse engineering and malware analysis tools for x86/x64 Windows syste… | 78 | 5321 | active |
| Tribler/tribler Tribler is a privacy-enhanced BitTorrent client with built-in decentralized search and content discovery, using a custom Tor-like onion rou… | 88 | 5319 | active |
| leizongmin/js-xss A JavaScript library for sanitizing untrusted HTML to prevent XSS attacks using a configurable whitelist of allowed tags and attributes. It… | 65 | 5308 | stable |
| Awarexone/Agentic-Bug-Hunter An AI-powered bug bounty hunting toolkit that automates reconnaissance, vulnerability testing, finding validation, and report generation fo… | 75 | 5294 | active |
| Naituw/IPAPatch IPAPatch is an Xcode project template that lets you patch decrypted iOS app IPA files by injecting your own dynamic libraries, without requ… | 50 | 5285 | active |
| lxc/lxc LXC is a low-level Linux container runtime providing a userspace interface to kernel containment features like namespaces, cgroups, and man… | 81 | 5277 | stable |
| martin-ger/esp_wifi_repeater Firmware for the ESP8266/ESP8285 that turns the chip into a full WiFi NAT router and, in a separate edition, a true L2-bridge WiFi repeater… | 67 | 5271 | active |
| bpc-clone/bpc_chrome_support Support repository for Bypass Paywalls Clean, a browser extension that bypasses paywalls on news sites. The extension itself has moved to g… | 32 | 5265 | active |
| zhkl0228/unidbg A Java-based framework that emulates Android (and experimentally iOS) native libraries on non-ARM hosts, including JNI, syscalls, and ARM32… | 76 | 5244 | active |
| Ullaakut/cameradar Cameradar is a Go-based command-line tool that scans targets for open RTSP video surveillance endpoints and uses dictionary attacks to disc… | 94 | 5234 | active |
| bitcoinj/bitcoinj bitcoinj is a Java library for working with the Bitcoin protocol, supporting wallet management, sending and receiving transactions via SPV … | 86 | 5229 | active |
| RaspAP RaspAP is a full-featured wireless router and access point management application for Debian-based devices such as the Raspberry Pi, provid… | 99 | 5226 | active |
| Pyarmor Pyarmor is a command-line tool for obfuscating Python scripts, making them hard to reverse-engineer. It also supports binding obfuscated sc… | 100 | 5216 | active |
| GhostPack/Rubeus Rubeus is a C# command-line toolset for raw Kerberos interaction and abuse on Windows, adapted from Kekeo and MakeMeEnterpriseAdmin. It sup… | 57 | 5195 | active |
| vyperlang/vyper Vyper is a Pythonic smart contract language that compiles to Ethereum Virtual Machine (EVM) bytecode, emphasizing security, simplicity, and… | 73 | 5185 | active |
| gommzystudio/device-activity-tracker A proof-of-concept application that tracks device activity of phone numbers on WhatsApp and Signal by measuring round-trip times of silent … | 40 | 5166 | active |
| SpaceTimee/Sheas-Cealer Sheas Cealer is a WPF (.NET 8) Windows desktop tool that forges the SNI extension field in Chromium's launch parameters, allowing users to … | 57 | 5159 | active |
| techchipnet/CamPhish CamPhish is a bash-based penetration-testing tool that hosts a fake webpage on a built-in PHP server and exposes it via ngrok or CloudFlare… | 37 | 5147 | active |
| Bisq Bisq is an open-source desktop application and peer-to-peer network for exchanging bitcoin for national currencies and other cryptocurrenci… | 99 | 5146 | stable |
| angryip/ipscan Angry IP Scanner is a fast, open-source IP address and port scanner with a friendly GUI built on Eclipse SWT. It scans networks for hosts, … | 83 | 5140 | active |
| ShadowHackrs/gmail-account-creator A Python-based automation tool for bulk creation of Gmail accounts, featuring anti-detection techniques like human-like typing simulation a… | 59 | 5137 | active |
| jinwyp/one_click_script A collection of one-click shell scripts for Linux servers that install latest or LTS Linux kernels and enable BBR or BBR Plus congestion co… | 67 | 5136 | active |
| domcyrus/rustnet RustNet is a cross-platform terminal-based network monitoring tool that maps live TCP, UDP, and QUIC connections to their owning processes … | 86 | 5131 | active |
| lc/gau gau (getallurls) is a Go CLI tool that fetches known URLs for a given domain from AlienVault's Open Threat Exchange, the Wayback Machine, C… | 67 | 5127 | active |
| scinfu/SwiftSoup SwiftSoup is a pure Swift HTML parser library that conforms to the WHATWG HTML5 specification and offers DOM traversal, CSS selectors, and … | 95 | 5126 | stable |
| Kozea/Radicale Radicale is a lightweight CalDAV and CardDAV server for sharing calendars, to-do lists, and contacts over HTTP. It stores data on the file … | 99 | 5124 | stable |
| niklashigi/apk-mitm A Node.js CLI application that automatically patches Android APK files to allow HTTPS traffic inspection through a man-in-the-middle proxy.… | 23 | 5112 | stable |
| CYQawa/YunX YunX (云析) is an Android app that parses cloud drive (netdisk) share links from services like Quark, UC, Thunder, Baidu, 139, and 123 Cloud,… | 81 | 5110 | active |
| Grin Grin is a minimal, open-source implementation of the Mimblewimble blockchain protocol, providing a privacy-preserving digital currency with… | 95 | 5098 | active |
| Flatpak Flatpak is a framework for building, distributing, and running sandboxed desktop applications on Linux. It lets developers package an app o… | 94 | 5093 | stable |
| GRR Rapid Response GRR Rapid Response is an incident response framework focused on remote live forensics. It consists of a Python agent installed on target sy… | 74 | 5090 | active |
| atom0s/Steamless Steamless is a C# tool that removes the SteamStub DRM protection layer applied to Steam game executables via the Steamworks SDK DRM tool. I… | 23 | 5071 | active |
| cilium/tetragon Tetragon is an eBPF-based security observability and runtime enforcement tool from the Cilium project. It monitors process execution, sysca… | 88 | 5067 | active |
| ClearURLs ClearURLs is a browser extension built on WebExtensions technology that automatically removes tracking parameters (like utm_source) from UR… | 34 | 5062 | active |
| certd/certd Certd is a free, open-source, fully automated SSL certificate management system that applies for, renews, and deploys certificates via conf… | 94 | 5054 | active |
| DedSecInside/TorBot TorBot is a Python CLI tool for OSINT on the dark web, crawling .onion sites over the Tor network and building link trees. It can save craw… | 95 | 5045 | active |
| elementalsouls/Claude-BugHunter A Claude Code skill bundle that turns Claude into a bug-hunting and red-team assistant, with 83 skills, 15 slash commands, and 681 disclose… | 75 | 5041 | active |
| perplexityai/bumblebee Bumblebee is a read-only Go CLI that scans developer endpoints for on-disk package, extension, and developer-tool metadata (lockfiles, pack… | 74 | 5038 | active |
| luestr/ProxyResource A curated resource repository for the Loon proxy app, providing configuration templates, plugins, scripts, and rule sets. It serves as an i… | 68 | 5036 | active |
| pritunl/pritunl Pritunl is a distributed enterprise VPN server built on the OpenVPN protocol (with WireGuard support), managed through a web interface and … | 92 | 5026 | active |
| DefectDojo DefectDojo is an open-source vulnerability management, DevSecOps, and ASPM platform built on Django. It aggregates findings from hundreds o… | 96 | 5024 | active |
| xvzc/spoofdpi SpoofDPI is a lightweight, cross-platform proxy tool written in Go that circumvents Deep Packet Inspection (DPI) based internet censorship … | 98 | 5021 | active |
| V4bel/dirtyfrag Dirty Frag is a proof-of-concept Linux kernel local privilege escalation exploit written in C. It chains the xfrm-ESP (CVE-2026-43284) and … | 47 | 5018 | active |
| tianon/gosu gosu is a small Go-based CLI tool for switching to another user (setuid/setgid/setgroups) and exec'ing a command, designed as a lightweight… | 69 | 5011 | stable |
| Ligolo-ng Ligolo-ng is a tunneling and pivoting tool written in Go that establishes tunnels over reverse TCP/TLS connections using a TUN interface in… | 92 | 5008 | active |
| bitsadmin/wesng WES-NG is a Python command-line tool that parses Windows `systeminfo` output (or missing KB listings) and cross-references it against a reg… | 76 | 4951 | active |
| NLnetLabs/unbound Unbound is a validating, recursive, and caching DNS resolver written in C, designed to be fast and lean while implementing modern open stan… | 92 | 4932 | stable |
| Nyr/wireguard-install A Bash installer script that sets up a WireGuard VPN server on Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, and Fedora in about a minute… | 75 | 4928 | active |
| matter-labs/zksync zkSync is Matter Labs' open-source ZK Rollup technology for scaling and adding privacy to Ethereum, including the ZK Stack framework for la… | 56 | 4920 | active |
| SadeghHayeri/GreenTunnel GreenTunnel is an anti-censorship tool that bypasses ISP Deep Packet Inspection (DPI) systems by splitting TLS ClientHello packets and usin… | 93 | 4915 | active |
| aloshdenny/reverse-SynthID A research tool that reverse-engineers Google's SynthID watermark embedded in Gemini-generated images using spectral analysis and signal pr… | 63 | 4913 | active |
| PCAPdroid PCAPdroid is a privacy-friendly open source Android app that monitors, analyzes, and blocks network connections made by other apps without … | 97 | 4904 | active |
| SocialFish SocialFish is a Python-based phishing toolkit that clones modern login pages using Playwright browser automation and captures credentials, … | 70 | 4892 | active |
| Aliucord Aliucord is a rootless modification of the legacy Discord Android app that adds a plugin system with 280+ plugins, 250+ custom themes, an i… | 66 | 4882 | active |
| Greenbone Community Edition OpenVAS Scanner is the scan engine of the Greenbone Community Edition, executing a continuously updated feed of vulnerability tests against… | 95 | 4868 | active |
| jmpews/Dobby Dobby is a lightweight, modular function hooking framework supporting multiple platforms (Windows, macOS, iOS, Android, Linux) and architec… | 23 | 4857 | active |
| duckduckgo/Android The official DuckDuckGo Android app, a privacy-focused mobile browser and search client written in Kotlin. It blocks trackers, enforces enc… | 95 | 4855 | active |
| charles2gan/GDA-android-reversing-Tool GDA (GJoy Dex Analyzer) is a fast, native C++ Dalvik bytecode decompiler and reverse analysis platform for Android binaries such as APK, DE… | 64 | 4852 | active |
| Aya Aya is a Rust library for building and loading eBPF programs on Linux, implemented entirely in Rust without libbpf or BCC. It provides BTF-… | 93 | 4846 | active |
| its-a-feature/Mythic Mythic is a collaborative, multi-platform post-exploitation red teaming framework built with Go, Docker, and a web browser UI. It provides … | 76 | 4837 | active |
| rivet-dev/agentos agentOS is a library that gives AI agents a lightweight operating system running inside your existing backend process, using WebAssembly an… | 94 | 4809 | active |
| OpenWiFi Open-source full-stack IEEE 802.11/Wi-Fi design based on Software Defined Radio, including a Linux mac80211-compatible driver and software,… | 66 | 4809 | active |
| claration/Feather Feather is a free, open-source on-device iOS/iPadOS application manager and IPA signer that installs apps using Apple Developer Program cer… | 86 | 4806 | active |
| PiotrMachowski/Xiaomi-cloud-tokens-extractor A Python CLI tool that logs into a Xiaomi Cloud account (via credentials or QR code) and retrieves device tokens and BLE encryption keys fo… | 54 | 4795 | active |
| mitchellkrogza/nginx-ultimate-bad-bot-blocker A drop-in Nginx configuration package that blocks bad bots, spam referrers, vulnerability scanners, malware, adware, and fake Googlebots, w… | 75 | 4792 | active |
| HotCakeX/Harden-Windows-Security A suite of tools (Harden System Security app and AppControl Manager) that hardens Windows using only official, supported Microsoft methods,… | 95 | 4791 | active |
| TechUnRestricted/WinDiskWriter WinDiskWriter is a native macOS application for creating bootable Windows USB installers that support both UEFI and Legacy BIOS boot modes.… | 64 | 4791 | active |