Repository Index

Ghidra is a software reverse engineering (SRE) framework

• software-analysis
• disassembler
• reverse-engineering

TranslatedThe mall project is an e-commerce system that includes a front-end shopping mall system and a back-end management system. It is implemented with Spring Boot + MyBatis and deployed in Docker containers. The front-end mall system includes modules such as home portal, product recommendations, product search, product display, shopping cart, order process, member center, customer service, and help center. The back-end management system includes modules such as product management, order management, member management, promotion management, operations management, content management, statistical reports, financial management, permission management, and settings.

• spring-boot
• spring-security
• mybatis
• docker

Translated🔥 Officially recommended 🔥 A brand-new Pro version of RuoYi-Vue, with all features optimized and refactored. An admin management system + WeChat mini program built with Spring Boot + MyBatis Plus + Vue & Element, supporting RBAC dynamic permissions, data permissions, SaaS multi-tenancy, Flowable workflow, third-party login, payment, SMS, mall, CRM, ERP, MES, IM, AI large models, IoT (Internet of Things), and more. Your ⭐️ Star ⭐️ is what motivates the author to grow hair!

• springboot
• vue
• mysql
• redis

TranslatedLearn step by step: Spring Boot, Spring Boot & Shiro, Spring Batch, Spring Cloud, Spring Cloud Alibaba, Spring Security & Spring Security OAuth2. Source code for the blog's Spring series: https://mrbird.cc

• spring-boot
• springboot
• learning
• shiro

eladmin jpa 版本：项目基于 Spring Boot 2.7.18、 Jpa、 Spring Security、Redis、Vue的前后端分离的后台管理系统，项目采用分模块开发方式， 权限控制采用 RBAC，支持数据字典与数据权限管理，支持一键生成前后端代码，支持动态路由

• spring-boot
• spring-security
• jpa
• redis

Empowering Data Intelligence with Distributed SQL for Sharding, Scalability, and Security Across All Databases.

• database
• distributed-database
• distributed-sql-database
• sql

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

• cryptomator
• java
• cloud-storage
• cryptography

The ZAP by Checkmarx Core project

• zap
• zap-development
• dast
• appsec

Zuul is a gateway service that provides dynamic routing, monitoring, resiliency, security, and more.

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

• sso-authentication
• authentication
• authorization
• java

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

Library for OpenAPI 3 with spring-boot

• openapi3
• spring-boot
• springdoc-openapi
• swagger-ui

Bastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.

• ssh
• bastion-host
• java
• javascript

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

• android-application
• security-analysis
• dynamic-analysis
• xposed

A p2p, secure file storage, social network and application protocol

• java
• peer-to-peer
• encryption
• social-network

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

• java
• security
• authentication
• authorization

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

• findbugs
• java
• security-audit
• owasp

🦎 A lightweight, streaming-native, multi-protocol gateway for AI, APIs, and real-time data. Route LLM requests across providers, govern MCP tools, and connect Kafka, MQTT, and HTTP through one high-performance engine with shared security and observability.

• kafka
• rest
• server-sent-events
• streaming-api

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

• java
• sonarqube
• static-code-analysis
• static-analyzer

Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

Oversecured Vulnerable Android App

• appsec
• android-security
• vulnerable-application
• vulnerable-android-apps

🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC, WebSocket and ElasticSearch examples are included

• tls
• truststore
• certificate
• keystore