Ghidra is a software reverse engineering (SRE) framework
- software-analysis
- disassembler
- reverse-engineering
Repository Index
87,075 visible repositories in the index
1–24 of 71 · Most stars
Open Source Identity and Access Management For Modern Applications and Services
- keycloak
- oidc
- saml
Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.
- cryptomator
- java
- cloud-storage
- cryptography
The ZAP by Checkmarx Core project
- zap
- zap-development
- dast
- appsec
Open source alternative to Auth0 / Firebase Auth / AWS Cognito
- authentication
- session-management
- login
- supertokens
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
- sso-authentication
- authentication
- authorization
- java
Java JWT: JSON Web Token for Java and Android
- jwt
- java
- java-jwt
- jjwt
Spring Security
Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
- security-audit
- build-tool
- maven-plugin
- jenkins-plugin
↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.
- oauth2
- spring-boot
- spring-cloud
- spring-cloud-alibaba
JPEXS Free Flash Decompiler (FFDec) is open-source Flash SWF decompiler and editor. Extract and edit ActionScript, images, sounds, shapes, fonts, and other SWF resources.
- flash
- swf
- decompiler
- editor
An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
An Open Source Java Decompiler Gui for Procyon
Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management
- library
- web-framework
- shiro
- java
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
cSploit - The most complete and advanced IT security professional toolkit on Android.
Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
- forensics
- java
iOS and macOS Decompiler
IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
- forensic
- recovery
- digital-forensics
Jasypt integration for Spring boot
- spring
- spring-boot
- encryptable-properties
- encryption
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
- android-application
- security-analysis
- dynamic-analysis
- xposed
Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
shiro反序列化漏洞综合利用（仅限授权测试使用）
- shiro
- shiro-security
- shiroexp
- shiro550