47,133 repositories indexed
1–24 of 136 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Open Source Identity and Access Management For Modern Applications and Services
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Damn Vulnerable Web Application (DVWA)
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/
The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
The modern Java bytecode editor
Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.
Web application fuzzer
Reverse engineering and pentesting for Android applications
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
Open Source Cloud Native Application Protection Platform (CNAPP)
🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection
w3af: web application attack and audit framework, the open source web vulnerability scanner.
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
Your web application for managing personal data.
Tool to look for several security related Android application vulnerabilities
Automated NoSQL database enumeration and web application exploitation tool.