Trending repositories

1.NationalSecurityAgency / ghidra

Ghidra is a software reverse engineering (SRE) framework

• software-analysis
• disassembler
• reverse-engineering

2.keycloak / keycloak

Open Source Identity and Access Management For Modern Applications and Services

• keycloak
• oidc
• saml

3.iBotPeaches / Apktool

A tool for reverse engineering Android apk files

• apktool
• apk
• android
• reverse-engineering
• arsc
• 9patch

4.microg / GmsCore

Free implementation of Play Services

• java
• android
• microg
• google-cloud-messaging
• maps
• auth
• +8 more

5.cryptomator / cryptomator

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

• cryptomator
• java
• cloud-storage
• cryptography
• crypto
• security
• +2 more

6.beemdevelopment / Aegis

A free, secure and open source app for Android to manage your 2-step verification tokens.

• otp
• totp
• hotp
• android
• secure
• encryption
• +3 more

7.emanuele-f / PCAPdroid

No-root network monitor, firewall and PCAP dumper for Android

• pcap
• capture-traffic
• android
• no-root
• traffic-monitor
• pcap-files
• +6 more

8.zaproxy / zaproxy

The ZAP by Checkmarx Core project

• zap
• zap-development
• dast
• appsec
• zaproxy
• security
• +3 more

9.aklivity / zilla

🦎 A lightweight, streaming-native, multi-protocol gateway for AI, APIs, and real-time data. Route LLM requests across providers, govern MCP tools, and connect Kafka, MQTT, and HTTP through one high-performance engine with shared security and observability.

• kafka
• rest
• server-sent-events
• streaming-api
• grpc
• mqtt
• +9 more

10.dromara / Sa-Token

✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名

• java
• token
• authorization
• sso
• aouth2
• springcloud

11.supertokens / supertokens-core

Open source alternative to Auth0 / Firebase Auth / AWS Cognito

• authentication
• session-management
• login
• supertokens
• java
• signin
• +13 more

12.Col-E / Recaf

The modern Java bytecode editor

• java
• bytecode
• bytecode-engineering
• reverse-engineering
• jvm-bytecode
• decompile
• +8 more

13.Konloch / bytecode-viewer

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

• java-decompiler
• apk
• java
• procyon
• cfr
• fernflower
• +14 more

14.justauth / JustAuth

🏆Gitee 最有价值开源项目 🚀:100: 小而全而美的第三方登录开源组件。目前已支持Github、Gitee、微博、钉钉、百度、Coding、腾讯云开发者平台、OSChina、支付宝、QQ、微信、淘宝、Google、Facebook、抖音、领英、小米、微软、今日头条、Teambition、StackOverflow、Pinterest、人人、华为、企业微信、酷家乐、Gitlab、美团、饿了么、推特、飞书、京东、阿里云、喜马拉雅、Amazon、Slack和 Line 等第三方平台的授权登录。 Login, so easy!

• justauth
• oauth2
• qqlogin
• googlelogin
• weixinlogin

15.yacy / yacy_search_server

Distributed Peer-to-Peer Web Search Engine and Intranet Search Appliance

• decentralized
• p2p
• p2p-network
• privacy
• privacy-protection
• search-engine
• +7 more

16.apache / shardingsphere

Empowering Data Intelligence with Distributed SQL for Sharding, Scalability, and Security Across All Databases.

• database
• distributed-database
• distributed-sql-database
• sql
• shard
• database-cluster
• +10 more

17.JetBrains / fernflower

Decompiler from Java bytecode to Java, used in IntelliJ IDEA.

• java
• decompiler
• reverse-engineering

18.CarGuo / GSYVideoPlayer

Video players (IJKplayer, ExoPlayer, MediaPlayer), HTTPS, 16k page size, danmaku (bullet chat) support, external subtitles, support for filters, watermarks, and GIF screenshots, pre-roll and mid-roll ads, multiple simultaneous playback, basic seeking/dragging, volume and brightness adjustment, play-while-cache support

• android
• video
• player
• ijkplayer
• ffmpeg
• exoplayer
• +4 more

19.jwtk / jjwt

Java JWT: JSON Web Token for Java and Android

• jwt
• java
• java-jwt
• jjwt
• jwt-token
• jwt-tokens
• +14 more

20.Peergos / Peergos

A p2p, secure file storage, social network and application protocol

• java
• peer-to-peer
• encryption
• social-network
• ipfs
• storage
• +13 more

21.wuyouzhuguli / SpringAll

循序渐进，学习Spring Boot、Spring Boot & Shiro、Spring Batch、Spring Cloud、Spring Cloud Alibaba、Spring Security & Spring Security OAuth2，博客Spring系列源码：https://mrbird.cc

• spring-boot
• springboot
• learning
• shiro
• spring-boot-learning
• spring-security
• +1 more

22.Netflix / zuul

Zuul is a gateway service that provides dynamic routing, monitoring, resiliency, security, and more.

23.elunez / eladmin

eladmin jpa 版本：项目基于 Spring Boot 2.7.18、 Jpa、 Spring Security、Redis、Vue的前后端分离的后台管理系统，项目采用分模块开发方式， 权限控制采用 RBAC，支持数据字典与数据权限管理，支持一键生成前后端代码，支持动态路由

• spring-boot
• spring-security
• jpa
• redis
• vue
• element-ui
• +4 more

24.apereo / cas

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

• sso-authentication
• authentication
• authorization
• java
• websso
• saml2
• +14 more

25.Loophole-LLC / Bastillion

Bastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.

• ssh
• bastion-host
• java
• javascript
• web-app
• web-based
• +8 more

26.google / tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

27.MovingBlocks / Terasology

Terasology - open source voxel world

• java
• game
• voxel
• sandbox
• game-engine
• game-engine-3d
• +3 more

28.membrane / api-gateway

API Gateway bridging modern and legacy APIs with WSDL-to-OpenAPI, SOAP-to-REST, XML, OAuth2, and GraphQL.

• oauth2
• api-gateway
• api
• rest
• openapi
• soap
• +3 more

29.springdoc / springdoc-openapi

Library for OpenAPI 3 with spring-boot

• openapi3
• spring-boot
• springdoc-openapi
• swagger-ui
• swagger-documentation
• openapi
• +14 more

30.gravitee-io / gravitee-api-management

Gravitee.io - OpenSource API Management

• api
• api-management
• gateway
• java
• vertx
• api-gateway
• +1 more

31.dineshshetty / Android-InsecureBankv2

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

32.hyphanet / fred

Freenet REference Daemon

• anonymity
• hyphanet
• privacy

33.CalebFenton / simplify

Android virtual machine and deobfuscator

• deobfuscation
• java
• optimization
• android
• reverse-engineering
• malware-analysis
• +9 more

34.sqlancer / sqlancer

Automated testing to find logic and performance bugs in database systems

• testing
• sql
• dbms
• fuzzing
• dbms-testing
• sqlite
• +5 more

35.schemacrawler / SchemaCrawler

Free database schema discovery and comprehension tool

• schemacrawler
• jdbc
• database-diagrams
• schema
• java
• database
• +11 more

36.ac-pm / Inspeckage

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

• android-application
• security-analysis
• dynamic-analysis
• xposed

37.Hakky54 / certificate-ripper

🔐 A CLI tool to extract server certificates

• certificate
• ssl
• x509
• tls
• java
• macos
• +7 more

38.find-sec-bugs / find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

• findbugs
• java
• security-audit
• owasp
• taint-analysis
• code-analysis
• +5 more

39.tink-crypto / tinkArchived

Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.

• cryptography
• java
• cpp
• go
• objc
• crypto
• +2 more

40.sirixdb / sirix

SirixDB is an an embeddable, bitemporal, append-only database system and event store, storing immutable lightweight snapshots. It keeps the full history of each resource. Every commit stores a space-efficient snapshot through structural sharing. It is log-structured and never overwrites data. SirixDB uses a novel page-level versioning approach.

• xquery
• java
• temporal-data
• storage
• snapshot
• comparison
• +14 more

41.tink-crypto / tink-java

Java implementation of Tink

• crypto
• cryptography
• java
• security

42.pac4j / pac4j

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

• java
• security
• authentication
• authorization
• cas
• oauth
• +14 more

43.oversecured / ovaa

Oversecured Vulnerable Android App

• appsec
• android-security
• vulnerable-application
• vulnerable-android-apps
• mobile-security

44.OpenIdentityPlatform / OpenAM

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

• openam
• sso
• oauth
• saml
• aaa
• authentication
• +14 more

45.Password4j / password4j

Java cryptographic library that supports Argon2, bcrypt, scrypt and PBKDF2 aimed to protect passwords in databases. Easy to use by design, highly customizable, secure and portable. All the implementations follow the standards and have been reviewed to perform better in the JVM.

• pbkdf2
• bcrypt
• scrypt
• argon2
• password
• hashing
• +10 more

46.SonarSource / sonar-java

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

• java
• sonarqube
• static-code-analysis
• static-analyzer
• static-analysis
• language-team
• +5 more

47.nsacyber / GRASSMARLINArchived

Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber

• ics
• scada
• network
• networking
• monitor
• monitoring
• +5 more

48.OpenAS2 / OpenAs2App

OpenAS2 is a java-based implementation of the EDIINT AS2 standard. It is intended to be used as a server. It is extremely configurable and supports a wide variety of signing and encryption algorithms.

49.Cap-go / capacitor-native-biometric

Secure biometric authentication for Capacitor with Face ID, Touch ID, and Android biometrics.

• capacitor
• capacitor-plugin
• ionic

50.struppigel / PortEx

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

51.Hakky54 / ayza

🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more

• tls
• ssl
• certificate
• keystore
• truststore
• mutual-authentication
• +13 more

52.bbottema / simple-java-mail

Simple API, Complex Emails (Jakarta Mail smtp wrapper)

• java
• java-mail
• outlook
• batch-processing
• smime
• dkim
• +14 more

53.andrewmichaelsmith / bluepot

Bluetooth Honeypot

54.OpenIdentityPlatform / OpenDJ

OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance

• ldap-server
• ldap
• opendj
• rest
• rest2ldap
• opends
• +6 more

55.OpenHFT / Zero-Allocation-Hashing

Zero-allocation hashing for Java

• java
• hashing
• high-performance
• farmhash
• murmurhash3
• cityhash
• +3 more

56.BastiaanJansen / otp-java

A small and easy-to-use one-time password generator library for Java implementing RFC 4226 (HOTP) and RFC 6238 (TOTP).

• java
• otp
• totp
• hotp
• 2fa
• two-factor-authentication
• +4 more

57.funkygao / cp-ddd-framework

轻量级DDD正向/逆向业务建模框架，支撑复杂业务系统的架构演化！

• ddd
• extension
• ddd-architecture
• clean-architecture
• framework
• enterprise-architecture
• +5 more

58.AndroidVTS / android-vts

Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.

59.googleapis / google-oauth-java-client

Google OAuth Client Library for Java

60.Hakky54 / mutual-tls-ssl

🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC, WebSocket and ElasticSearch examples are included

• tls
• truststore
• certificate
• keystore
• encryption
• openssl
• +14 more

61.Warxim / petep

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

• proxy
• tcp
• tcp-proxy
• penetration-testing
• hacking
• security
• +14 more

62.baumschubser / hotpants

HOTP/TOTP one time passwords on java phones (J2ME)

• hotp
• j2me
• j2me-platform
• one-time-pad
• otp
• otp-generator
• +4 more

63.google / binnaviArchived

BinNavi is a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.

• reverse-engineering
• java
• binnavi
• yfiles
• analysis

64.square / keywhizArchived

A system for distributing and managing secrets

• keywhiz
• secret-management
• secret-distribution
• enterprise-software
• manage-secrets
• secrets
• +2 more

65.k3b / APhotoManager

Manage local photos on Android: gallery, geotag with photomap, privacy, tags, find, sort, view, copy, send, ... .

• android
• photos
• gallery
• photo-manager
• xmp
• exif
• +14 more

66.Guichaguri / MinimalFTP

A lightweight, simple FTP server. Pure Java, no dependencies.

• ftp
• ftp-server
• java
• minimal
• file-transfer
• tls

67.iSECPartners / Introspy-Android

Security profiling for blackbox Android

68.abstractj / kaliumArchived

Java binding to the Networking and Cryptography (NaCl) library with the awesomeness of libsodium

• libsodium
• java
• nacl
• java-bindings
• cryptography

69.capacitor-community / generic-oauth2

Generic Capacitor OAuth 2 client plugin. Stop the war in Ukraine!

• capacitor
• oauth2
• oauth2-client
• capacitor-plugin
• social-login
• authentication

70.pac4j / vertx-pac4j

Security library for Vert.x: OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

• java
• vertx
• security
• authentication
• authorization
• cas
• +14 more

71.wavesplatform / WavesJ

Java library for interacting with the Waves blockchain.

• java-library
• blockchain
• cryptography

72.dhatim / dropwizard-jwt-cookie-authentication

Dropwizard bundle managing authentication through JWT cookies

• jwt
• cookie
• java
• dropwizard
• module

73.schmalle / Servletpot

Webapplication Honeypot