Trending repositories

1.NationalSecurityAgency / ghidra

Ghidra is a software reverse engineering (SRE) framework

• software-analysis
• disassembler
• reverse-engineering

2.iBotPeaches / Apktool

A tool for reverse engineering Android apk files

• apktool
• apk
• android
• reverse-engineering
• arsc
• 9patch

3.mitschud / DirtyFrag

Ephemeral root via the CVE-2026-43284 page-cache exploit

4.keycloak / keycloak

Open Source Identity and Access Management For Modern Applications and Services

• keycloak
• oidc
• saml

5.microg / GmsCore

Free implementation of Play Services

• java
• android
• microg
• google-cloud-messaging
• maps
• auth
• +8 more

6.beemdevelopment / Aegis

A free, secure and open source app for Android to manage your 2-step verification tokens.

• otp
• totp
• hotp
• android
• secure
• encryption
• +3 more

7.zaproxy / zaproxy

The ZAP by Checkmarx Core project

• zap
• zap-development
• dast
• appsec
• zaproxy
• security
• +3 more

8.cryptomator / cryptomator

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

• cryptomator
• java
• cloud-storage
• cryptography
• crypto
• security
• +2 more

9.emanuele-f / PCAPdroid

No-root network monitor, firewall and PCAP dumper for Android

• pcap
• capture-traffic
• android
• no-root
• traffic-monitor
• pcap-files
• +6 more

10.dromara / Sa-Token

✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名

• java
• token
• authorization
• sso
• aouth2
• springcloud

11.Col-E / Recaf

The modern Java bytecode editor

• java
• bytecode
• bytecode-engineering
• reverse-engineering
• jvm-bytecode
• decompile
• +8 more

12.Konloch / bytecode-viewer

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

• java-decompiler
• apk
• java
• procyon
• cfr
• fernflower
• +14 more

13.yacy / yacy_search_server

Distributed Peer-to-Peer Web Search Engine and Intranet Search Appliance

• decentralized
• p2p
• p2p-network
• privacy
• privacy-protection
• search-engine
• +7 more

14.supertokens / supertokens-core

Open source alternative to Auth0 / Firebase Auth / AWS Cognito

• authentication
• session-management
• login
• supertokens
• java
• signin
• +13 more

15.justauth / JustAuth

🏆Gitee 最有价值开源项目 🚀:100: 小而全而美的第三方登录开源组件。目前已支持Github、Gitee、微博、钉钉、百度、Coding、腾讯云开发者平台、OSChina、支付宝、QQ、微信、淘宝、Google、Facebook、抖音、领英、小米、微软、今日头条、Teambition、StackOverflow、Pinterest、人人、华为、企业微信、酷家乐、Gitlab、美团、饿了么、推特、飞书、京东、阿里云、喜马拉雅、Amazon、Slack和 Line 等第三方平台的授权登录。 Login, so easy!

• justauth
• oauth2
• qqlogin
• googlelogin
• weixinlogin

16.CarGuo / GSYVideoPlayer

Video players (IJKplayer, ExoPlayer, MediaPlayer), HTTPS, 16k page size, danmaku (bullet chat) support, external subtitles, support for filters, watermarks, and GIF screenshots, pre-roll and mid-roll ads, multiple simultaneous playback, basic seeking/dragging, volume and brightness adjustment, play-while-cache support

• android
• video
• player
• ijkplayer
• ffmpeg
• exoplayer
• +4 more

17.apache / shardingsphere

Empowering Data Intelligence with Distributed SQL for Sharding, Scalability, and Security Across All Databases.

• database
• distributed-database
• distributed-sql-database
• sql
• shard
• database-cluster
• +10 more

18.Peergos / Peergos

A p2p, secure file storage, social network and application protocol

• java
• peer-to-peer
• encryption
• social-network
• ipfs
• storage
• +13 more

19.Hakky54 / certificate-ripper

🔐 A CLI tool to extract server certificates

• certificate
• ssl
• x509
• tls
• java
• macos
• +7 more

20.JetBrains / fernflower

Decompiler from Java bytecode to Java, used in IntelliJ IDEA.

• java
• decompiler
• reverse-engineering

21.Netflix / zuul

Zuul is a gateway service that provides dynamic routing, monitoring, resiliency, security, and more.

22.apereo / cas

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

• sso-authentication
• authentication
• authorization
• java
• websso
• saml2
• +14 more

23.sqlancer / sqlancer

Automated testing to find logic and performance bugs in database systems

• testing
• sql
• dbms
• fuzzing
• dbms-testing
• sqlite
• +5 more

24.jwtk / jjwt

Java JWT: JSON Web Token for Java and Android

• jwt
• java
• java-jwt
• jjwt
• jwt-token
• jwt-tokens
• +14 more

25.wuyouzhuguli / SpringAll

循序渐进，学习Spring Boot、Spring Boot & Shiro、Spring Batch、Spring Cloud、Spring Cloud Alibaba、Spring Security & Spring Security OAuth2，博客Spring系列源码：https://mrbird.cc

• spring-boot
• springboot
• learning
• shiro
• spring-boot-learning
• spring-security
• +1 more

26.membrane / api-gateway

API Gateway bridging modern and legacy APIs with WSDL-to-OpenAPI, SOAP-to-REST, XML, OAuth2, and GraphQL.

• oauth2
• api-gateway
• api
• rest
• openapi
• soap
• +3 more

27.MovingBlocks / Terasology

Terasology - open source voxel world

• java
• game
• voxel
• sandbox
• game-engine
• game-engine-3d
• +3 more

28.pac4j / pac4j

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

• java
• security
• authentication
• authorization
• cas
• oauth
• +14 more

29.dineshshetty / Android-InsecureBankv2

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

30.hyphanet / fred

Freenet REference Daemon

• anonymity
• hyphanet
• privacy

31.gravitee-io / gravitee-api-management

Gravitee.io - OpenSource API Management

• api
• api-management
• gateway
• java
• vertx
• api-gateway
• +1 more

32.CalebFenton / simplify

Android virtual machine and deobfuscator

• deobfuscation
• java
• optimization
• android
• reverse-engineering
• malware-analysis
• +9 more

33.springdoc / springdoc-openapi

Library for OpenAPI 3 with spring-boot

• openapi3
• spring-boot
• springdoc-openapi
• swagger-ui
• swagger-documentation
• openapi
• +14 more

34.ac-pm / Inspeckage

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

• android-application
• security-analysis
• dynamic-analysis
• xposed

35.find-sec-bugs / find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

• findbugs
• java
• security-audit
• owasp
• taint-analysis
• code-analysis
• +5 more

36.OpenIdentityPlatform / OpenAM

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

• openam
• sso
• oauth
• saml
• aaa
• authentication
• +14 more

37.oversecured / ovaa

Oversecured Vulnerable Android App

• appsec
• android-security
• vulnerable-application
• vulnerable-android-apps
• mobile-security

38.struppigel / PortEx

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

39.google / tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

40.schemacrawler / SchemaCrawler

Free database schema discovery and comprehension tool

• schemacrawler
• jdbc
• database-diagrams
• schema
• java
• database
• +11 more

41.Password4j / password4j

Java cryptographic library that supports Argon2, bcrypt, scrypt and PBKDF2 aimed to protect passwords in databases. Easy to use by design, highly customizable, secure and portable. All the implementations follow the standards and have been reviewed to perform better in the JVM.

• pbkdf2
• bcrypt
• scrypt
• argon2
• password
• hashing
• +10 more

42.elunez / eladmin

eladmin jpa 版本：项目基于 Spring Boot 2.7.18、 Jpa、 Spring Security、Redis、Vue的前后端分离的后台管理系统，项目采用分模块开发方式， 权限控制采用 RBAC，支持数据字典与数据权限管理，支持一键生成前后端代码，支持动态路由

• spring-boot
• spring-security
• jpa
• redis
• vue
• element-ui
• +4 more

43.tink-crypto / tinkArchived

Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.

• cryptography
• java
• cpp
• go
• objc
• crypto
• +2 more

44.Loophole-LLC / Bastillion

Bastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.

• ssh
• bastion-host
• java
• javascript
• web-app
• web-based
• +8 more

45.tink-crypto / tink-java

Java implementation of Tink

• crypto
• cryptography
• java
• security

46.sirixdb / sirix

SirixDB is an an embeddable, bitemporal, append-only database system and event store, storing immutable lightweight snapshots. It keeps the full history of each resource. Every commit stores a space-efficient snapshot through structural sharing. It is log-structured and never overwrites data. SirixDB uses a novel page-level versioning approach.

• xquery
• java
• temporal-data
• storage
• snapshot
• comparison
• +14 more

47.OpenIdentityPlatform / OpenDJ

OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance

• ldap-server
• ldap
• opendj
• rest
• rest2ldap
• opends
• +6 more

48.OpenAS2 / OpenAs2App

OpenAS2 is a java-based implementation of the EDIINT AS2 standard. It is intended to be used as a server. It is extremely configurable and supports a wide variety of signing and encryption algorithms.

49.google / binnaviArchived

BinNavi is a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.

• reverse-engineering
• java
• binnavi
• yfiles
• analysis

50.bbottema / simple-java-mail

Simple API, Complex Emails (Jakarta Mail smtp wrapper)

• java
• java-mail
• outlook
• batch-processing
• smime
• dkim
• +14 more

51.funkygao / cp-ddd-framework

轻量级DDD正向/逆向业务建模框架，支撑复杂业务系统的架构演化！

• ddd
• extension
• ddd-architecture
• clean-architecture
• framework
• enterprise-architecture
• +5 more

52.nsacyber / GRASSMARLINArchived

Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber

• ics
• scada
• network
• networking
• monitor
• monitoring
• +5 more

53.BastiaanJansen / otp-java

A small and easy-to-use one-time password generator library for Java implementing RFC 4226 (HOTP) and RFC 6238 (TOTP).

• java
• otp
• totp
• hotp
• 2fa
• two-factor-authentication
• +4 more

54.k3b / APhotoManager

Manage local photos on Android: gallery, geotag with photomap, privacy, tags, find, sort, view, copy, send, ... .

• android
• photos
• gallery
• photo-manager
• xmp
• exif
• +14 more

55.Warxim / petep

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

• proxy
• tcp
• tcp-proxy
• penetration-testing
• hacking
• security
• +14 more

56.hourianto / sporeflower

A J2ME-focused reverse-engineering, decompilation and remapping toolkit, aimed at semantically correct, recompilable output.

• cldc
• decompiler
• decompiler-java
• j2me
• java-decompiler
• midp

57.googleapis / google-oauth-java-client

Google OAuth Client Library for Java

58.Hakky54 / ayza

🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more

• tls
• ssl
• certificate
• keystore
• truststore
• mutual-authentication
• +13 more

59.Guichaguri / MinimalFTP

A lightweight, simple FTP server. Pure Java, no dependencies.

• ftp
• ftp-server
• java
• minimal
• file-transfer
• tls

60.OpenIdentityPlatform / OpenIG

OpenIG is an open-source identity gateway (reverse-proxy) that secures, routes, and manages web traffic. It enables authentication, access control, and integration with identity providers, delivering single sign-on and API security for web and cloud applications.

• sso
• reverse-proxy
• rewrite
• openam
• saml
• saml2
• +13 more

61.Cap-go / capacitor-native-biometric

Secure biometric authentication for Capacitor with Face ID, Touch ID, and Android biometrics.

• capacitor
• capacitor-plugin
• ionic

62.baumschubser / hotpants

HOTP/TOTP one time passwords on java phones (J2ME)

• hotp
• j2me
• j2me-platform
• one-time-pad
• otp
• otp-generator
• +4 more

63.jaiswalakshansh / Vuldroid

Vuldroid is a Vulnerable Android Application made with security issues in order to demonstrate how they can occur in code

• android-application
• webview-xss
• application-security
• vulnerable-application
• android-security
• deeplink