A list of Free Software network services and web applications which can be hosted on your own servers
Repository Index
47,133 repositories indexed
1–24 of 182 · Most stars
The Postgres development platform. Supabase gives you a dedicated Postgres database to build your web, mobile, and AI applications.
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
- pentest
- payload
- bypass
- web-application
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
- penetration-testing
- pentesting
- security-audit
- security-automation
Full-stack web application template with FastAPI, React, SQLModel, PostgreSQL, Vite, Tailwind CSS, shadcn/ui, FastAPI Cloud, and Docker Compose.
- python
- docker
- postgresql
- fastapi
Comfortably monitor your network traffic 🕵️♂️
- networking
- packet-sniffer
- linux
- macos
Open Source Identity and Access Management For Modern Applications and Services
- keycloak
- oidc
- saml
A boilerplate for Node.js web applications
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
- owasp
- code
- security
- cheatsheets
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- cve-scanner
- subdomain-takeover
- nuclei-engine
- vulnerability-detection
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
- keepassxc
- keepass
- password-manager
- linux
FHEVM, a full-stack framework for integrating Fully Homomorphic Encryption (FHE) with blockchain applications
Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
Application Kernel for Containers
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Application designed to optimize, customize and enhance your Windows experience.
- windows-10
- windows-10-debloat
- windows-10-optimization
- windows-11
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
- owasp
- javascript
- vulnerable
- hacking
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
- application-firewall
- firewall
- linux
- networking
🏔 Love Freedom - ❌ Block Mass Surveillance
Damn Vulnerable Web Application (DVWA)
- dvwa
- php
- sql-injection
- security
[MLsys2026 Best Paper]: https://arxiv.org/abs/2506.08276. RAG on Everything with LEANN. Enjoy 97% storage savings while running a fast, accurate, and 100% private RAG application on your personal device.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.