function: security
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| its-a-feature/Mythic Mythic is a collaborative, multi-platform post-exploitation red teaming framework built with Go, Docker, and a web browser UI. It provides … | 78 | 4725 | active |
| PiotrMachowski/Xiaomi-cloud-tokens-extractor A Python CLI tool that logs into a Xiaomi Cloud account (via credentials or QR code) and retrieves device tokens and BLE encryption keys fo… | 61 | 4723 | active |
| DedSecInside/TorBot TorBot is a Python CLI tool for OSINT on the dark web, crawling .onion sites over the Tor network and building link trees. It can save craw… | 97 | 4716 | active |
| AntSwordProject/antSword AntSword is a cross-platform, open-source website administration toolkit built with Electron, designed for penetration testers, security re… | 73 | 4693 | active |
| SteveLTN/https-portal HTTPS-PORTAL is a Dockerized reverse proxy that automatically obtains and renews Let's Encrypt TLS certificates and serves any web applicat… | 88 | 4692 | active |
| TheWover/donut Donut is a shellcode generator that converts VBScript, JScript, EXE, DLL files, and .NET assemblies into x86, x64, or AMD64+x86 position-in… | 36 | 4689 | stable |
| intelowlproject/IntelOwl IntelOwl is an open-source, self-hosted application for managing threat intelligence at scale, querying many online analyzers and malware a… | 92 | 4683 | active |
| GhostPack/Seatbelt Seatbelt is a C# command-line tool that performs security-oriented host-survey 'safety checks' on Windows systems. It enumerates system and… | 32 | 4683 | active |
| TechUnRestricted/WinDiskWriter WinDiskWriter is a native macOS application for creating bootable Windows USB installers that support both UEFI and Legacy BIOS boot modes.… | 50 | 4677 | active |
| HotCakeX/Harden-Windows-Security A suite of tools (Harden System Security app and AppControl Manager) that hardens Windows using only official, supported Microsoft methods,… | 95 | 4668 | active |
| ShadowHackrs/gmail-account-creator A Python-based automation tool for bulk creation of Gmail accounts, featuring anti-detection techniques like human-like typing simulation a… | 56 | 4657 | active |
| OPNsense OPNsense is an open-source, FreeBSD-based firewall and routing platform with a web GUI, REST API, and extensible plugin system. It provides… | 77 | 4653 | active |
| openziti/zrok zrok is an open-source tool for securely sharing local web services, files, and TCP/UDP resources over the internet without firewall or NAT… | 89 | 4645 | active |
| ThioJoe/YT-Spammer-Purge A Python-based desktop application that scans YouTube comment sections for spam and scam comments using 15 different filtering methods, the… | 40 | 4643 | active |
| Authenticator-Extension/Authenticator A browser extension that generates two-factor authentication (2FA) codes, acting as a software TOTP authenticator. It is available for Chro… | 52 | 4642 | active |
| hyperlight-dev/hyperlight Hyperlight is a lightweight Virtual Machine Manager (VMM) library, written in Rust, that embeds micro virtual machines into applications fo… | 85 | 4635 | active |
| Yelp/detect-secrets detect-secrets is a Python CLI tool from Yelp that detects secrets (API keys, passwords, tokens) in codebases using regex and entropy heuri… | 57 | 4629 | active |
| emanuele-f/PCAPdroid PCAPdroid is a privacy-friendly open source Android app that monitors, analyzes, and blocks network connections made by other apps without … | 99 | 4602 | active |
| activemerchant/active_merchant Active Merchant is a Ruby payment abstraction library extracted from Shopify that provides a unified API across dozens of payment gateways.… | 45 | 4600 | stable |
| ReversecLabs/drozer drozer is an open-source security assessment framework for Android that lets testers assume the role of an app and interact with the Androi… | 57 | 4597 | active |
| claration/Feather Feather is a free, open-source on-device iOS/iPadOS application manager and IPA signer that installs apps using Apple Developer Program cer… | 86 | 4596 | active |
| aquasecurity/tracee Tracee is a Linux runtime security and forensics tool that uses eBPF to trace system calls, network activity, and file operations in real t… | 79 | 4593 | active |
| M66B/FairEmail FairEmail is a fully featured, open source, privacy oriented email client for Android. It supports unlimited accounts via standard protocol… | 95 | 4582 | active |
| rfjakob/gocryptfs gocryptfs is an encrypted overlay filesystem written in Go, built on the go-fuse library, that stores each file as a corresponding encrypte… | 77 | 4582 | stable |
| ntop/nDPI nDPI is an open source LGPLv3 C library for deep packet inspection that detects 450+ layer-7 application protocols from network traffic. It… | 76 | 4566 | stable |
| hluwa/frida-dexdump A Frida-based CLI tool that finds and dumps DEX files from an Android app's memory, enabling unpacking of packed or obfuscated APKs. It sup… | 10 | 4560 | stable |
| stratumauth/app Stratum (formerly Authenticator Pro) is a free, open-source two-factor authentication app for Android with a Wear OS companion. It supports… | 94 | 4555 | active |
| cerbos/cerbos Cerbos is an open-core, language-agnostic policy decision point (PDP) that externalizes authorization from application code using context-a… | 94 | 4555 | stable |
| szabodanika/microbin MicroBin is a self-hosted pastebin and file-sharing web application written in Rust, packaged as a single self-contained executable. It sup… | 71 | 4532 | active |
| hacklcx/HFish HFish is a free, enterprise-grade honeypot platform for deception-based defense, threat detection, and attacker tracing. It deploys decoy s… | 65 | 4532 | active |
| Oros42/IMSI-catcher A Python tool that decodes GSM radio traffic captured via software-defined radio receivers (RTL-SDR, HackRF, BladeRF, OsmocomBB) to display… | 71 | 4515 | active |
| projectdiscovery/interactsh Interactsh is an open-source tool for detecting out-of-band (OOB) interactions via DNS, HTTP(S), SMTP(S), and LDAP, useful for identifying … | 85 | 4512 | active |
| taviso/loadlibrary A library that lets native Linux programs load and call functions from Windows DLLs via a custom PE/COFF loader with a dlopen-like API. It … | 39 | 4501 | active |
| samsesh/SocialBox-Termux SocialBox-Termux is a shell-based brute-force attack framework targeting social media and email services like Facebook, Gmail, Instagram, a… | 72 | 4497 | active |
| limbopro/Adblock4limbo A userscript-based ad-blocking project that removes popups, banners, and video ads on specific streaming, comic, novel, and adult sites via… | 77 | 4491 | active |
| OpenVPN/easy-rsa easy-rsa is a shell-based CLI utility for building and managing a PKI certificate authority. It creates root and intermediate CAs, signs ce… | 80 | 4475 | active |
| JonathanSalwan/ROPgadget ROPgadget is a Python command-line tool that searches binaries for ROP gadgets to facilitate return-oriented programming exploitation. It s… | 67 | 4470 | active |
| Awarexone/Agentic-Bug-Hunter An AI-powered bug bounty hunting toolkit that automates reconnaissance, vulnerability testing, finding validation, and report generation fo… | 77 | 4464 | active |
| PowerDNS/pdns PowerDNS is a suite of open-source DNS software written in C++, comprising the Authoritative Server, the Recursor, and dnsdist. It provides… | 77 | 4456 | stable |
| BeichenDream/Godzilla Godzilla is a Java-based webshell management tool supporting dynamic payloads for JSP, ASPX, and PHP targets with multiple AES/XOR encrypto… | 23 | 4455 | active |
| trifectatechfoundation/sudo-rs A memory-safe, safety-oriented reimplementation of the classic sudo and su utilities written in Rust. It is actively maintained, independen… | 91 | 4447 | active |
| extremecoders-re/pyinstxtractor A Python script that extracts the contents of PyInstaller-generated executables, including fixing pyc headers so bytecode decompilers can p… | 84 | 4447 | stable |
| lwch/natpass natpass is a self-hosted host management tool written in Go that provides web-based shell access, remote desktop (VNC), and code-server int… | 67 | 4446 | active |
| t3l3machus/Villain Villain is a high-level stage 0/1 command-and-control (C2) framework written in Python that handles multiple reverse TCP and HoaxShell-base… | 40 | 4439 | active |
| GerbenJavado/LinkFinder LinkFinder is a Python CLI script that discovers endpoints and their parameters in JavaScript files using jsbeautifier and regular expressi… | 32 | 4439 | stable |
| ankane/strong_migrations A Ruby gem for Rails that catches unsafe database migrations in development by detecting potentially dangerous operations like removing col… | 76 | 4438 | stable |
| garinasset/leak-check A self-hostable personal information leak detection service that checks whether your personal data (name, phone, email, address, QQ, etc.) … | 49 | 4435 | active |
| rivet-dev/agentos agentOS is a library that gives AI agents a lightweight operating system running inside your existing backend process, using WebAssembly an… | 91 | 4426 | active |
| Qovery/Replibyte Replibyte is a stateless Rust CLI tool that dumps production databases (PostgreSQL, MySQL, MongoDB), masks sensitive data with fake data, a… | 39 | 4409 | active |
| Judge0 Judge0 is an open-source, sandboxed online code execution system exposing a simple HTTP JSON API for compiling and running untrusted code i… | 67 | 4401 | active |
| microsoft/ApplicationInspector Microsoft Application Inspector is a source code characterization tool that uses a JSON-based rules engine with 400+ regex patterns to iden… | 95 | 4396 | active |
| SelfControlApp/selfcontrol SelfControl is a free, open-source macOS application that blocks your own access to distracting websites, mail servers, or other internet r… | 72 | 4388 | active |
| rainbow-me/rainbow Rainbow is a self-custody Ethereum wallet app for iOS, Android, and desktop browsers, built with React Native and TypeScript. It lets users… | 94 | 4384 | active |
| intuitem/ciso-assistant-community CISO Assistant is an open-source, self-hostable GRC (Governance, Risk, and Compliance) platform covering risk management, compliance and au… | 90 | 4376 | active |
| joxeankoret/diaphora Diaphora is a free and open source program diffing (binary diffing) tool that works as an IDA Pro plugin, comparing binaries to find change… | 94 | 4373 | active |
| zan8in/afrog afrog is an open-source security tool written in Go for vulnerability scanning using PoC (Proof of Concept) rules. It is designed for bug b… | 96 | 4372 | active |
| ts1/BLEUnlock BLEUnlock is a macOS menu bar utility that locks and unlocks your Mac based on the proximity of a Bluetooth Low Energy device such as an iP… | 23 | 4370 | active |
| WireGuard/wireguard-go A userspace implementation of the WireGuard VPN protocol written in Go. It creates WireGuard tunnel interfaces on Linux, macOS, Windows, Fr… | 70 | 4366 | stable |
| meta-llama/PurpleLlama Purple Llama is Meta's umbrella project of tools and benchmarks for assessing and improving the security of large language models. It inclu… | 71 | 4365 | active |
| overspace-labs/HaE HaE (Highlighter and Extractor) is a framework-style cybersecurity project for fine-grained tagging and extraction of sensitive information… | 98 | 4362 | active |
| microsoft/PyRIT PyRIT is Microsoft's open-source Python framework for identifying security and safety risks in generative AI systems. It provides automatio… | 88 | 4361 | active |
| openziti/ziti OpenZiti is an open-source zero-trust networking platform that provides programmable mesh overlay networks with cryptographic identity, pol… | 98 | 4359 | active |
| lazy-luo/smarGate smarGate is a cross-network remote port mapping and NAT traversal tool consisting of an Android client app and lightweight server binaries,… | 79 | 4358 | active |
| AdguardTeam/AdguardBrowserExtension AdGuard Browser Extension is a free, open-source ad blocker for Chrome, Firefox, Opera, Edge, and other Chromium-based browsers. It blocks … | 99 | 4357 | active |
| Volatility Volatility is an open-source memory forensics framework for extracting digital artifacts from RAM captures of Windows, Linux, and macOS sys… | 84 | 4357 | active |
| smallstep/cli Step CLI is a Go-based command-line tool for building, operating, and automating PKI systems, working with X.509 certificates, JWTs, OAuth … | 95 | 4317 | active |
| Sycnex/Windows10Debloater A PowerShell script collection that removes pre-installed bloatware from Windows 10, disables telemetry, Cortana search indexing, and unnec… | 10 | 18839 | maintenance |
| ufrisk/MemProcFS MemProcFS is an memory forensic tool that exposes physical memory, memory dump files, and live memory acquisition sources as files in a vir… | 89 | 4300 | active |
| kanshurichard/enableAppleAI A shell script that enables Apple Intelligence on Macs sold in Mainland China by patching macOS eligibility checks (eligibilityd plist file… | 55 | 4299 | active |
| XTLS/RealiTLScanner A Go-based TLS server scanner built for the XTLS Reality protocol ecosystem. It scans IP ranges, CIDRs, domains, or target lists to find TL… | 86 | 4286 | active |
| jtesta/ssh-audit ssh-audit is a Python CLI tool that audits SSH server and client configurations, analyzing banners, key exchange, encryption, MAC, and comp… | 82 | 4280 | active |
| x64dbg/ScyllaHide ScyllaHide is an advanced usermode anti-anti-debug library that hooks Windows functions to hide the presence of a debugger from debugged pr… | 23 | 4271 | active |
| open-policy-agent/gatekeeper Gatekeeper is a CNCF policy controller for Kubernetes built on Open Policy Agent (OPA). It enforces admission policies via customizable con… | 97 | 4269 | stable |
| ConsenSysDiligence/mythril Mythril is a symbolic-execution-based security analysis tool for EVM bytecode that detects vulnerabilities in Ethereum and other EVM-compat… | 58 | 4265 | active |
| TideSec/TscanPlus TscanPlus is a comprehensive network security detection and operations tool for rapid asset discovery, identification, and vulnerability de… | 82 | 4257 | active |
| jonaslejon/malicious-pdf A Python CLI tool that generates 67 malicious PDF test files embedding callbacks for SSRF, XSS, XXE, NTLM credential theft, and data exfilt… | 86 | 4254 | active |
| dmno-dev/varlock Varlock is a CLI tool and library for managing environment variables and secrets via a typed .env.schema file, serving as a drop-in dotenv … | 82 | 4220 | active |
| google/tamperchrome Tamper Dev is a browser extension that intercepts and edits HTTP/HTTPS requests and responses in real time without requiring a proxy or aux… | 54 | 4218 | active |
| vercel-labs/just-bash just-bash is a TypeScript-implemented bash interpreter with an in-memory virtual filesystem, designed to give AI agents a secure, sandboxed… | 83 | 4212 | active |
| JaveleyQAQ/WeChatOpenDevTools-Python A Python tool that force-enables the hidden developer tools (F12) in WeChat mini programs and WeChat's built-in browser. It is a Python rew… | 16 | 4211 | active |
| irbis-sh/zen-desktop Zen is an open-source, system-wide ad-blocker and privacy guard for Windows, macOS, and Linux. It runs a local proxy that intercepts HTTP/H… | 96 | 4205 | active |
| fw876/helloworld A collection of OpenWrt packages (including Xray-core and related proxy tools) distributed as a git repository that can be cloned, added as… | 98 | 4203 | active |
| hellzerg/optimizer Optimizer is a Windows GUI configuration utility for enhancing privacy and security, applying system tweaks, disabling telemetry, cleaning … | 10 | 18307 | maintenance |
| baihengaead/wlan-sec-test-tool A Python-based GUI tool for wireless network security testing that checks WiFi networks for weak passwords by attempting connections with a… | 70 | 4183 | active |
| NoName-exe/revanced-extended ReVanced eXtended (now Morphe) is a Magisk/KernelSU module builder that patches YouTube and YouTube Music APKs with ad-blocking and feature… | 98 | 4182 | active |
| guelfoweb/knockpy KnockPy is a modular Python 3 CLI tool for enumerating subdomains of a target domain using passive reconnaissance sources and DNS bruteforc… | 64 | 4178 | active |
| PurpleI2P/i2pd i2pd (I2P Daemon) is a full-featured C++ implementation of an I2P client, providing a universal anonymous network layer with end-to-end enc… | 93 | 4176 | active |
| square/Valet Valet is a Swift library that simplifies securely storing data in the iOS, tvOS, watchOS, and macOS Keychain. It wraps the Keychain's compl… | 75 | 4175 | stable |
| RetireJS/retire.js Retire.js is a scanner that detects the use of JavaScript libraries and Node.js modules with known vulnerabilities, available as a CLI scan… | 99 | 4161 | active |
| KernelSU-Next/KernelSU-Next KernelSU Next is a kernel-based root solution for Android devices, providing superuser access via kernel-level hooks with a companion manag… | 81 | 4161 | active |
| bitcoin-wallet/bitcoin-wallet Bitcoin Wallet is a standalone Bitcoin payment app for Android devices that runs its own Bitcoin node via bitcoinj, requiring no centralize… | 36 | 4160 | active |
| nextdns/nextdns NextDNS CLI is an open-source command-line client (written in Go) that connects to NextDNS's DNS-over-HTTPS service, acting as a local DoH … | 95 | 4146 | active |
| DependencyTrack/dependency-track OWASP Dependency-Track is an open-source component analysis platform that ingests CycloneDX SBOMs to continuously identify vulnerabilities,… | 99 | 4145 | active |
| mlabouardy/komiser Komiser is an open-source, cloud-agnostic inspector that builds an inventory of cloud resources across AWS, GCP, Azure, DigitalOcean, and m… | 69 | 4138 | active |
| mandiant/flare-floss FLOSS (FLARE Obfuscated String Solver) is a Python CLI tool from Mandiant that automatically extracts and deobfuscates strings from malware… | 67 | 4138 | active |
| fwupd/fwupd fwupd is a system daemon for Linux that enables session software to safely and automatically update device firmware. It provides a D-Bus in… | 98 | 4130 | stable |
| Bubka/2FAuth 2FAuth is a self-hosted web application for managing Two-Factor Authentication accounts and generating TOTP, HOTP, and Steam Guard security… | 94 | 4125 | active |
| ivre/ivre IVRE is an open-source network recon framework written in Python that collects, stores, and analyzes network intelligence from active scann… | 66 | 4119 | active |
| app2smile/rules A collection of ad-blocking rule modules and rewrite scripts for iOS proxy tools like Surge, Loon, and Quantumult X. It removes in-app adve… | 64 | 4114 | active |
| jasonxtn/Argus Argus is a Python-based all-in-one information gathering and reconnaissance toolkit with an interactive console and modular architecture. I… | 47 | 4082 | active |