The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
Repository Index
47,133 repositories indexed
361–384 of 966 · Most stars
Analyze the security of any domain by finding all the information possible. Made in python.
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
- awesome-list
- binary-analysis
- ghidra
- malware-analysis
A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.
- threat-modeling
- practical-devsecops
- security-review
- devsecops-university
PHP Captcha library
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
- graphql
- security-scanner
- graphql-security
- api-documentation-tool
Checklist of security precautions for Ruby on Rails applications.
media streaming framework and teleconferencing system written in rust
- rust
- rust-lang
- zoom
- actix-web
A curated list of awesome Security Hardening techniques for Windows.
Database anonymization and test data management
- golang
- obfuscation
- postgresql
- security
Security-focused static analysis for the Phoenix Framework
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
DOM fuzzer
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
CSRF protection middleware for Go.
- csrf
- go
- security
- middleware
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
- api-security
- application-security
- kubernetes
- nginx
Splunk Security Content
- splunk
- detection
- engineering
- responses
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
- waf
- application-security
- web-application-firewall
- modsecurity
A big list of Android Hackerone disclosed reports and other resources.
- android
- hackerone
- android-repo
- android-security
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
The best way to build Electron apps with security in mind.
A privacy-preserving Raspberry Pi home security camera that uses advanced end-to-end encryption.
- end-to-end-encryption
- home-security
- local-ai
- privacy
🦎 A lightweight, streaming-native, multi-protocol gateway for AI, APIs, and real-time data. Route LLM requests across providers, govern MCP tools, and connect Kafka, MQTT, and HTTP through one high-performance engine with shared security and observability.