47,133 repositories indexed
1–24 of 170 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Open Source Identity and Access Management For Modern Applications and Services
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Application designed to optimize, customize and enhance your Windows experience.
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
🏔 Love Freedom - ❌ Block Mass Surveillance
Damn Vulnerable Web Application (DVWA)
[MLsys2026 Best Paper]: https://arxiv.org/abs/2506.08276. RAG on Everything with LEANN. Enjoy 97% storage savings while running a fast, accurate, and 100% private RAG application on your personal device.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
go-admin is a Gin + Vue starter kit for admin applications, supporting Element UI, Arco Design, and Ant Design. Features include multi-tenancy, user management, JWT authentication, RBAC, code generation, a form builder, and scheduled tasks. Build your own admin app in just 3 minutes.
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
Low code web framework for real world applications, in Python and Javascript
ValueCell is a community-driven, multi-agent platform for financial applications.
Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/
The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.
The modern Java bytecode editor
A list of web application security
A static analysis security vulnerability scanner for Ruby on Rails applications