function: security
4909 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| zc-zhangchen/any-auto-register A multi-platform automated account registration and management system with a Web UI, plugin-based extensibility, and batch registration sup… | 59 | 3578 | active |
| google/recaptcha Google's official PHP client library for verifying reCAPTCHA responses server-side, supporting both reCAPTCHA v2 and v3. It wraps the verif… | 84 | 3574 | active |
| acidanthera/AppleALC AppleALC is an open-source macOS kernel extension (kext) that enables native HD audio for codecs not officially supported by Apple, without… | 71 | 3574 | active |
| microsoft/ebpf-for-windows eBPF for Windows is an MIT-licensed implementation of the eBPF runtime that runs on top of the Windows kernel, letting developers reuse fam… | 86 | 3553 | active |
| momo5502/sogen Sogen is a C++ userspace emulator that runs Windows and Linux binaries at the CPU and syscall level without a real operating system, execut… | 67 | 3553 | active |
| mekos2772/ios-location-spoofer A standalone iOS location spoofing solution that intercepts and rewrites Apple's network-based location service (WLOC) responses via proxy … | 57 | 3551 | active |
| arch3rPro/Pentest-Windows A pre-built Windows 11 penetration testing virtual machine image bundling 400+ security tools and scripts, distributed for VMware, Parallel… | 47 | 3549 | active |
| bastillion-io/Bastillion Bastillion is a self-hosted, web-based SSH console and SSH key management platform that acts like a bastion host with a dashboard. It provi… | 99 | 3541 | active |
| Adaptix-Framework/AdaptixC2 AdaptixC2 is an extensible post-exploitation and adversarial emulation (C2) framework for authorized penetration testing, with a Golang tea… | 67 | 3541 | active |
| apple-oss-distributions/xnu The XNU kernel source code, the core of Apple's Darwin operating system used in macOS and iOS. It is a hybrid kernel combining the Mach mic… | 72 | 3539 | active |
| SpacehuhnTech/esp8266_deauther ESP8266 Deauther is open-source firmware that turns an ESP8266 microcontroller into a WiFi testing tool capable of scanning networks, sendi… | 23 | 14943 | maintenance |
| Brave Browser Brave is a free, open-source web browser built on Chromium with privacy protections enabled by default, including ad and tracker blocking, … | 77 | 3534 | active |
| epinna/weevely3 Weevely is a weaponized web shell for post-exploitation that generates a small obfuscated PHP agent to upload to a target web server, provi… | 46 | 3533 | active |
| tnodir/fort Fort Firewall is a standalone firewall application for Windows 7+ with its own kernel driver. It provides per-application network rules, ba… | 78 | 3529 | active |
| meshbird/meshbird Meshbird is an open-source cloud-native distributed private networking tool that creates encrypted peer-to-peer overlay networks across mul… | 54 | 3526 | active |
| gtworek/PSBits A collection of relatively simple C and PowerShell snippets for digging deeper into Windows internals, security, and forensics. Each folder… | 76 | 3519 | active |
| bethington/ghidra-mcp A Model Context Protocol (MCP) server and Ghidra plugin exposing 250+ tools that let AI agents drive Ghidra's reverse engineering capabilit… | 83 | 3508 | active |
| theajack/disable-devtool A lightweight TypeScript library that disables browser developer tools with one line of code, blocking F12, right-click, and browser menu a… | 61 | 3504 | active |
| wifiphisher/wifiphisher Wifiphisher is a rogue Access Point framework for Wi-Fi security testing and red team engagements, enabling man-in-the-middle positioning v… | 60 | 14788 | maintenance |
| stackrox/kube-linter KubeLinter is a static analysis CLI tool that checks Kubernetes YAML files, Helm charts, and Kustomize manifests against security and produ… | 86 | 3501 | active |
| straight-tamago/misakaX misakaX is a desktop application for macOS and Windows that customizes iOS/iPadOS 16.0-18.2 beta devices by exploiting the bug behind Troll… | 48 | 3498 | active |
| guardianproject/orbot-android Orbot is a free Android app that routes device internet traffic through the Tor network, acting as a VPN and proxy to encrypt and anonymize… | 97 | 3497 | active |
| sentient-agi/OML-1.0-Fingerprinting A Python library for embedding secret cryptographic fingerprints into LLMs via fine-tuning, so model owners can prove ownership and detect … | 13 | 3497 | active |
| fofapro/vulfocus Vulfocus is a self-hosted vulnerability integration platform that runs vulnerability environments as Docker images with one-click startup. … | 41 | 3492 | active |
| t3l3machus/hoaxshell Hoaxshell is a Windows reverse shell payload generator and handler that abuses the HTTP(S) protocol to establish a beacon-like reverse shel… | 33 | 3487 | active |
| builtbybel/FluentTweaker FluentTweaker is a modern Windows tweaking application built with WinUI 3 that lets power users adjust UI, taskbar, privacy, AI features, E… | 72 | 3479 | active |
| benbaker76/Hackintool Hackintool is a macOS GUI utility for vanilla Hackintosh hardware patching, best known for Intel framebuffer patching from Sandy Bridge thr… | 75 | 3476 | active |
| BlackArch Linux BlackArch Linux is an Arch Linux-based penetration testing distribution bundling over 2,800 security tools for penetration testers and secu… | 77 | 3474 | active |
| oblador/react-native-keychain A React Native library providing access to the iOS Keychain and Android Keystore for securely storing credentials such as passwords, tokens… | 70 | 3473 | stable |
| QData/TextAttack TextAttack is a Python framework for generating adversarial examples against NLP models, as well as for data augmentation and model trainin… | 87 | 3469 | active |
| sigp/lighthouse Lighthouse is an open-source Ethereum consensus (beacon chain) client written in Rust, maintained by Sigma Prime. It implements the Ethereu… | 99 | 3466 | stable |
| ukanth/afwall AFWall+ is an open-source firewall application for rooted Android devices built on Linux iptables. It provides per-app granular control ove… | 93 | 3455 | active |
| joernio/joern Joern is an open-source code analysis platform that generates code property graphs (CPGs) from source code, bytecode, and binaries for C/C+… | 95 | 3453 | active |
| kevoreilly/CAPEv2 CAPEv2 is a malware sandbox derived from Cuckoo that executes malicious files in isolated environments while instrumenting their behavior a… | 77 | 3451 | active |
| TrustTunnel/TrustTunnel TrustTunnel is a modern open-source VPN protocol originally developed by AdGuard VPN, with this repository containing the VPN endpoint (ser… | 76 | 3431 | active |
| ropnop/kerbrute Kerbrute is a Go-based CLI tool for brute-forcing and enumerating valid Active Directory accounts through Kerberos Pre-Authentication. It o… | 23 | 3429 | stable |
| vulnersCom/nmap-vulners A collection of Nmap NSE scripts that enrich service scans with CVEs, CVSS scores and known exploits from the Vulners database. It fingerpr… | 98 | 3415 | active |
| onecli/onecli OneCLI is an open-source platform that gives every employee a personal, sandboxed AI agent, with all tool calls routed through a gateway th… | 77 | 3415 | active |
| ph4ntonn/Stowaway Stowaway is a multi-hop proxy tool written in Go, designed for penetration testers to route external traffic through chains of nodes into r… | 54 | 3411 | active |
| connectbot/connectbot ConnectBot is an open-source Secure Shell (SSH) client for Android that lets users open encrypted shell sessions and transfer files with re… | 95 | 3410 | active |
| snort3/snort3 Snort 3 (Snort++) is the next-generation open-source intrusion prevention system (IPS) written in C++17, supporting multi-threaded packet p… | 83 | 3409 | active |
| openwrt-xiaomi/xmir-patcher XMiR-Patcher is a Python-based firmware patcher for Xiaomi routers that exploits vulnerabilities to unlock SSH and install custom firmware … | 77 | 3408 | active |
| iann0036/iamlive A Go CLI tool that generates IAM policies by monitoring AWS, Azure, or GCP API calls via client-side monitoring or an embedded proxy. It ob… | 83 | 3407 | active |
| KOWX712/Tricky-Addon-Update-Target-List A KernelSU/Apatch/Magisk WebUI addon for configuring Tricky Store's target.txt on rooted Android devices. It provides a graphical interface… | 86 | 3404 | active |
| google/OpenSK OpenSK is an open-source Rust implementation of a FIDO2/FIDO U2F security key, developed by Google as a research platform. It can run as fi… | 66 | 3404 | active |
| decalage2/oletools oletools is a Python package of tools for analyzing Microsoft OLE2 (Structured Storage/Compound File Binary Format) files and MS Office doc… | 53 | 3404 | active |
| L-codes/Neo-reGeorg Neo-reGeorg is a Python CLI tool that generates encrypted tunnel server files (aspx/jsp/php/etc.) to be uploaded to a compromised web serve… | 75 | 3401 | active |
| paragonie/paseto A PHP reference implementation of PASETO (Platform-Agnostic Security Tokens), a secure alternative to JWT/JWS/JWE. It supports PASETO proto… | 40 | 3398 | stable |
| adrienverge/openfortivpn openfortivpn is a command-line client for PPP+TLS VPN tunnel services, compatible with Fortinet VPN gateways. It spawns a pppd process and … | 77 | 3394 | active |
| Moli-X/Resources A curated collection of rewrite configurations, JavaScript scripts, and plugins for the iOS proxy apps QuantumultX, Loon, and Surge. It agg… | 77 | 3394 | active |
| paralleldrive/cuid2 Cuid2 is a JavaScript library and CLI for generating secure, collision-resistant unique identifiers optimized for horizontal scaling and pe… | 75 | 3394 | active |
| robinrodricks/FluentFTP FluentFTP is a fully managed FTP and FTPS client library for .NET and .NET Standard, written entirely in C# with no external dependencies a… | 61 | 3393 | stable |
| EntySec/Ghost Ghost Framework is a Python-based Android post-exploitation framework that leverages the Android Debug Bridge (ADB) to gain remote access t… | 54 | 3392 | active |
| FairwindsOps/polaris Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration against 30+ built-in best-pract… | 98 | 3384 | active |
| google/honggfuzz Honggfuzz is a security-oriented, feedback-driven evolutionary fuzzer that uses software and hardware code coverage to discover bugs in bin… | 62 | 3376 | active |
| H4ckForJob/dirmap Dirmap is an advanced web directory and file scanning tool written in Python, designed to be more powerful than DirBuster, Dirsearch, cansi… | 44 | 3374 | stable |
| hufrea/byedpi ByeDPI (ciadpi) is a C program implementing various DPI (Deep Packet Inspection) bypass methods, running as a local SOCKS proxy server. It … | 67 | 3363 | active |
| RNCryptor/RNCryptor RNCryptor is a Swift (and Objective-C) library wrapping CommonCrypto AES encryption, implementing a cross-language encrypted data format (v… | 28 | 3358 | stable |
| BloodHound Community Edition BloodHound Community Edition is a free, open-source application that uses graph theory to reveal hidden relationships and attack paths in A… | 91 | 3355 | active |
| skelsec/pypykatz pypykatz is a pure Python implementation of parts of Mimikatz, the well-known Windows credential extraction tool. It parses LSASS process m… | 65 | 3352 | active |
| google/differential-privacy Google's collection of differential privacy libraries for computing ε- and (ε, δ)-differentially private statistics over datasets. It inclu… | 78 | 3346 | active |
| golang/crypto golang/crypto is the official supplementary cryptography library for the Go programming language, providing packages beyond the standard li… | 77 | 3343 | stable |
| hanwckf/rt-n56u A custom Padavan-based firmware for the ASUS RT-N56U and other MT7621-based routers, written in C. It gives power users full control over t… | 23 | 3343 | active |
| model-checking/kani Kani is a bit-precise model checker for Rust that formally verifies safety and correctness properties of Rust programs. It uses proof harne… | 83 | 3342 | active |
| almandin/fuxploider Fuxploider is an open-source penetration testing tool that automates detection and exploitation of file upload form vulnerabilities. It ide… | 32 | 3328 | active |
| Yamato-Security/hayabusa Hayabusa is a fast, Rust-based Windows event log analysis tool that generates forensic timelines and performs threat hunting using Sigma de… | 94 | 3324 | active |
| kaifcodec/user-scanner A 2-in-1 Python CLI OSINT suite that performs email and username intelligence across 440+ scan vectors (170+ email sites, 270+ username pla… | 83 | 3319 | active |
| ergochat/ergo Ergo is a modern IRC server (ircd) written in Go that integrates services (NickServ, ChanServ, HostServ) and bouncer functionality such as … | 90 | 3307 | active |
| randombit/botan Botan is a C++ cryptography library offering TLS 1.2/1.3, X.509 PKI, modern AEAD ciphers, post-quantum algorithms, and hardware token suppo… | 77 | 3307 | stable |
| dbisu/pico-ducky A project that turns a Raspberry Pi Pico into a USB Rubber Ducky-style HID injection device running CircuitPython. It executes Ducky Script… | 71 | 3307 | active |
| Telegram-FOSS-Team/Telegram-FOSS An unofficial, FOSS-friendly fork of the official Telegram client for Android that removes proprietary binaries and replaces them with free… | 23 | 3299 | active |
| PatchMon/PatchMon PatchMon is a self-hostable, AGPL-licensed Linux patch management and server monitoring platform with a lightweight outbound-only agent and… | 84 | 3296 | active |
| chipsec/chipsec CHIPSEC is a Python framework for analyzing the security of PC platforms, including hardware, system firmware (BIOS/UEFI), and platform com… | 98 | 3295 | active |
| goodwithtech/dockle Dockle is a container image linter written in Go that checks Docker images against security best practices and CIS Benchmarks. It runs as a… | 66 | 3292 | active |
| cyu/rack-cors Rack middleware that adds Cross-Origin Resource Sharing (CORS) support to Rack-compatible Ruby web applications, including Rails. It lets y… | 42 | 3290 | active |
| express-rate-limit/express-rate-limit A rate-limiting middleware library for the Express web server, written in TypeScript. It limits repeated requests per IP or key over config… | 98 | 3289 | stable |
| s0md3v/Smap Smap is a passive port scanner powered by Shodan.io's free API that serves as a drop-in replacement for Nmap, accepting the same command-li… | 90 | 3287 | active |
| jsha/minica minica is a small Go CLI tool that acts as a minimal certificate authority for generating root and leaf TLS certificates with keys. It is d… | 41 | 3284 | active |
| LSPosed/CorePatch Core Patch N is an Xposed module that modifies Android's package manager service to bypass installation restrictions. It disables APK signa… | 86 | 3282 | active |
| BlueWallet BlueWallet is an open-source, self-custody Bitcoin and Lightning Network wallet for iOS and Android, built with React Native and TypeScript… | 97 | 3279 | active |
| dafthack/MailSniper MailSniper is a PowerShell-based penetration testing tool for searching email in Microsoft Exchange environments for sensitive terms like p… | 77 | 3276 | active |
| techgaun/github-dorks A Python CLI tool that automates GitHub code searches using a curated list of dorks to find leaked secrets like credentials, private keys, … | 43 | 3271 | active |
| basil00/WinDivert WinDivert is a user-mode packet interception library for Windows that allows applications to capture, modify, drop, and re-inject network p… | 23 | 3266 | stable |
| tuic-protocol/tuic TUIC is a standardized, implementation-agnostic network proxy protocol specification for relaying TCP and UDP traffic over QUIC with 0-RTT … | 32 | 3263 | active |
| Legrandin/pycryptodome PyCryptodome is a self-contained Python package of low-level cryptographic primitives, forked from PyCrypto with an almost drop-in compatib… | 76 | 3261 | active |
| checkedc/checkedc Checked C is an extension to the C programming language that adds bounds checking and improved type safety through opt-in annotations, impl… | 23 | 3255 | active |
| tink-crypto/tink Tink is a multi-language, cross-platform open source cryptographic library from Google that provides secure, easy-to-use APIs for encryptio… | 10 | 13537 | maintenance |
| open-policy-agent/conftest Conftest is a CLI utility for writing tests against structured configuration data using the Open Policy Agent Rego language. It validates f… | 98 | 3249 | active |
| blokadaorg/blokada Blokada is an open-source suite of mobile privacy apps for Android and iOS, including an ad blocker, VPN, and parental control app. It offe… | 67 | 3249 | active |
| homenc/HElib HElib is an open-source C++ library implementing homomorphic encryption, supporting the BGV scheme with bootstrapping and the CKKS approxim… | 23 | 3249 | stable |
| rtcatc/Packer-Fuzzer Packer Fuzzer is a Python-based security scanner that targets websites built with JavaScript module bundlers like Webpack. It automatically… | 23 | 3249 | active |
| assetnote/kiterunner Kiterunner is a fast content discovery tool written in Go that bruteforces files, folders, and API routes on web servers. It uses a dataset… | 64 | 3247 | stable |
| SteamAutoCracks/Steam-auto-crack A C# tool that automatically cracks Steam games by unpacking SteamStub-protected executables and applying the Goldberg Steam emulator. It a… | 99 | 3243 | active |
| PLFJY/ContextMenuMgr Context Menu Manager Plus is a Windows utility for managing right-click context menu entries, including classic and Windows 11 menus. It in… | 80 | 3243 | active |
| Tornaco/Thanox Thanox is an Android system manager app delivered as an Xposed (LSPosed) module, with Magisk and Shizuku activation options, that hooks int… | 81 | 3241 | active |
| the-tcpdump-group/tcpdump tcpdump is a powerful command-line packet analyzer that captures and dissects network traffic using libpcap, with BPF-based filtering and s… | 77 | 3232 | active |
| github/secure_headers A Ruby gem that manages the application of HTTP security response headers such as Content Security Policy, HSTS, and X-Frame-Options with s… | 84 | 3228 | stable |
| netnr/kms A public KMS activation service (hosted at skms.netnr.eu.org) plus documentation for activating Windows and Office via slmgr commands. The … | 66 | 3228 | active |
| JPCERTCC/LogonTracer LogonTracer is a self-hosted DFIR tool that visualizes Windows Active Directory logon-related event logs as a graph of hosts and accounts t… | 80 | 3221 | active |
| deltazefiro/Amarok-Hider Amarok is a lightweight Android privacy app that hides private files and apps with a single click by obfuscating file signatures or permiss… | 78 | 3213 | active |