47,133 repositories indexed
1–24 of 161 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Open Source Identity and Access Management For Modern Applications and Services
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Damn Vulnerable Web Application (DVWA)
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/
The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
The modern Java bytecode editor
A list of web application security
A static analysis security vulnerability scanner for Ruby on Rails applications
A curated list of resources for learning about application security
Next generation web scanner
Web Application ASP.NET 9 using Clean Architecture, DDD, CQRS, Event Sourcing and a lot of good practices
Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.
Web application fuzzer
Reverse engineering and pentesting for Android applications
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications