47,133 repositories indexed
1–17 of 17 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
Tfsec is now part of Trivy
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
An interpreter for the Lua language, written entirely in C# for the .NET, Mono, Xamarin and Unity3D platforms, including handy remote debugger facilities.
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
Git-integrated backup tool for macOS and Linux devs.
Protect against malicious open source packages 🤖
DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.
Give the agent a cage, not your keys. One-command Docker sandbox for AI coding agents: full autonomous permissions, per-project isolation, your host stays untouched.
Static analysis from configs → Kubernetes NetworkPolicies in seconds
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Powerful Utilities for Neovim Plugin Devs 🛠️🧰