47,133 repositories indexed
1–24 of 170 · Most stars
Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.
Automatic SQL injection and database takeover tool
Connect, secure, control, and observe services.
Persistent file-based planning for AI coding agents and long-running tasks. Crash-proof markdown plans, session recovery after /clear and compaction, per-turn re-injection against context rot, deterministic completion gate. Manus-style. Install from npm, the Claude Code plugin marketplace, or npx skills. Codex, Cursor, OpenCode, 60+ agents.
The fastest HTTP/2 Go Web Framework. New, modern and easy to learn. Fast development with Code you control. Unbeatable cost-performance ratio :rocket:
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
Build production-ready applications in TypeScript
Source code for Hacker101.com - a free online web and mobile security class.
Translated💪 A framework for assisting in the renovation of Android componentization
Damn Vulnerable Web Application (DVWA)
A free book that talks about design patterns/techniques used while developing with React.
Guice (pronounced 'juice') is a lightweight dependency injection framework for Java 11 and above, brought to you by Google.
Powerful and lightweight inversion of control container. Moved to https://github.com/inversify/monorepo
TranslatedA comprehensive security assessment tool developed in-house by Chaitin (长亭), supporting scanning for common web security issues and custom PoCs | Be sure to read the documentation before use
Open screens/snackbars/dialogs/bottomSheets without context, manage states and inject dependencies easily with Get.
A collection of GPT system prompts and various prompt injection/leaking knowledge.
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
A dependency injection based application framework for Go.
Clean Architecture template for Golang services
A framework for distributed systems verification, with fault injection
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
Dependency injection framework for Swift with iOS/macOS/Linux
SwiftUI sample app using Clean Architecture. Examples of working with SwiftData persistence, networking, dependency injection, unit testing, and more.