Repository Index

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

• firewall
• http-flood
• security
• sql-injection

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

• static-analysis
• dynamic-analysis
• mobsf
• android-security

Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.

• security
• waf
• anti-bot
• blocklist

Source code for Hacker101.com - a free online web and mobile security class.

• education
• hacking
• security
• hackerone

🐶 A curated list of Web Security materials and resources.

• awesome-list
• awesome
• list
• web

A list of resources for those interested in getting started in bug bounties

• bug-bounty-hunters
• hackers
• xss
• bug-bounty

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

• nginx
• modsecurity
• docker
• security

A list of web application security

• penetration-testing
• web-hacking
• vulnerabilities
• scanner

Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

• waf
• application-security
• web-application-firewall
• modsecurity

🌐 The all-in-one tool, for keeping track of your domain name portfolio. Got domain names? Get Domain Locker!

• dashboard
• domain-investment
• domain-management
• monitoring

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

• tokenization
• web-security
• compliance
• security

TranslatedARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · Champion of the Baidu agent+ Attack and Defense Challenge

• artex
• ai-agent
• cybersecurity
• security

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

• cve-scanning
• pentesting-tools
• rust
• vulnerability-scanners

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

• fastapi
• flask
• django
• content-security-policy

Reusable prompts for a structured, evidence-first bug bounty hunting workflow

• application-security
• bug-bounty
• bug-bounty-hunting
• cybersecurity

The AI Agent for Cyber Security.

• ai-agent
• ai-security
• appsec
• bug-bounty

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity

:hammer: A multiple reverse shell session/client manager via terminal

• socket
• python
• ctf
• attack-defense

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

• anti-bot
• behavioral-analysis
• bot-detection
• captcha