A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
- application-security
- appsec
- bug-bounty
- burp-alternative
Repository Index
47,133 repositories indexed
25–42 of 42 · Most stars
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
Tiny hashing module that uses the native crypto API in Node.js and the browser
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
- cybersecurity
- hacktoberfest
- low-level
- mutator
A production-ready SaaS template built with Next.js 15, Supabase, and Tailwind CSS. Includes authentication, user management, file storage, task management demos, and secure RLS policies. Now with a complete React Native + Expo mobile app template! Easily customizable with pre-built themes, i18n support (EN/PL/ZH), and legal documents.
High-performance pure-javascript SHA1 implementation suitable for large binary data, reaching up to half the native speed.
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
Text-based logic question captcha's for Rails 🚫🤖
A performant, 100% native-julia SHA1, SHA2, and SHA3 implementation
- cryptography
- sha1
- sha2
- sha3
a native library implementing secp256k1 purely for the crystal language.
- crystal
- crystal-language
- native-library
- secp256k1
Native WebAuthn/Passkey support for Electron on macOS using Apple's AuthenticationServices framework
- authenticationservices
- electron
- electron-builder
- fido2
Client-side AES-256-GCM zero-knowledge encryption library. Browser-native Web Crypto API, no dependencies. Powers FileShot.io.
- aes-256
- aes-256-gcm
- browser-encryption
- client-side-encryption
Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.
- aho-corasick
- cybersecurity
- devops
- git-hook
🔥 n01d-forge - Secure Cross-Platform Image Burner with Encryption | LUKS, VeraCrypt, Secure Erase, Hash Verification
- bootable-usb
- cross-platform
- encryption
- etcher-alternative
Native Shamir Secret Sharing. Securely split & restore secrets on iOS, Android, and Web with a single Capacitor plugin.
- capacitor
- capacitor-android
- capacitor-ios
- capacitor-plugin
TerraSigma - Modern Detection Engineering for the Cloud-Native SIEM Microsoft Sentinel
- cybersecurity
- detection-engineering
- devops
- kql
Send OTP verification messages via DataFlows SMS API for Supabase Auth
- australia
- authentication
- edge-functions
- otp