Trending repositories

1.NationalSecurityAgency / ghidra

Ghidra is a software reverse engineering (SRE) framework

• software-analysis
• disassembler
• reverse-engineering

2.iBotPeaches / Apktool

A tool for reverse engineering Android apk files

• apktool
• apk
• android
• reverse-engineering
• arsc
• 9patch

3.keycloak / keycloak

Open Source Identity and Access Management For Modern Applications and Services

• keycloak
• oidc
• saml

4.microg / GmsCore

Free implementation of Play Services

• java
• android
• microg
• google-cloud-messaging
• maps
• auth
• +8 more

5.aklivity / zilla

🦎 A lightweight, streaming-native, multi-protocol gateway for AI, APIs, and real-time data. Route LLM requests across providers, govern MCP tools, and connect Kafka, MQTT, and HTTP through one high-performance engine with shared security and observability.

• kafka
• rest
• server-sent-events
• streaming-api
• grpc
• mqtt
• +9 more

6.emanuele-f / PCAPdroid

No-root network monitor, firewall and PCAP dumper for Android

• pcap
• capture-traffic
• android
• no-root
• traffic-monitor
• pcap-files
• +6 more

7.cryptomator / cryptomator

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

• cryptomator
• java
• cloud-storage
• cryptography
• crypto
• security
• +2 more

8.beemdevelopment / Aegis

A free, secure and open source app for Android to manage your 2-step verification tokens.

• otp
• totp
• hotp
• android
• secure
• encryption
• +3 more

9.zaproxy / zaproxy

The ZAP by Checkmarx Core project

• zap
• zap-development
• dast
• appsec
• zaproxy
• security
• +3 more

10.dromara / Sa-Token

✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名

• java
• token
• authorization
• sso
• aouth2
• springcloud

11.Col-E / Recaf

The modern Java bytecode editor

• java
• bytecode
• bytecode-engineering
• reverse-engineering
• jvm-bytecode
• decompile
• +8 more

12.supertokens / supertokens-core

Open source alternative to Auth0 / Firebase Auth / AWS Cognito

• authentication
• session-management
• login
• supertokens
• java
• signin
• +13 more

13.Konloch / bytecode-viewer

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

• java-decompiler
• apk
• java
• procyon
• cfr
• fernflower
• +14 more

14.justauth / JustAuth

🏆Gitee 最有价值开源项目 🚀:100: 小而全而美的第三方登录开源组件。目前已支持Github、Gitee、微博、钉钉、百度、Coding、腾讯云开发者平台、OSChina、支付宝、QQ、微信、淘宝、Google、Facebook、抖音、领英、小米、微软、今日头条、Teambition、StackOverflow、Pinterest、人人、华为、企业微信、酷家乐、Gitlab、美团、饿了么、推特、飞书、京东、阿里云、喜马拉雅、Amazon、Slack和 Line 等第三方平台的授权登录。 Login, so easy!

• justauth
• oauth2
• qqlogin
• googlelogin
• weixinlogin

15.Peergos / Peergos

A p2p, secure file storage, social network and application protocol

• java
• peer-to-peer
• encryption
• social-network
• ipfs
• storage
• +13 more

16.yacy / yacy_search_server

Distributed Peer-to-Peer Web Search Engine and Intranet Search Appliance

• decentralized
• p2p
• p2p-network
• privacy
• privacy-protection
• search-engine
• +7 more

17.CarGuo / GSYVideoPlayer

Video players (IJKplayer, ExoPlayer, MediaPlayer), HTTPS, 16k page size, danmaku (bullet chat) support, external subtitles, support for filters, watermarks, and GIF screenshots, pre-roll and mid-roll ads, multiple simultaneous playback, basic seeking/dragging, volume and brightness adjustment, play-while-cache support

• android
• video
• player
• ijkplayer
• ffmpeg
• exoplayer
• +4 more

18.apache / shardingsphere

Empowering Data Intelligence with Distributed SQL for Sharding, Scalability, and Security Across All Databases.

• database
• distributed-database
• distributed-sql-database
• sql
• shard
• database-cluster
• +10 more

19.JetBrains / fernflower

Decompiler from Java bytecode to Java, used in IntelliJ IDEA.

• java
• decompiler
• reverse-engineering

20.wuyouzhuguli / SpringAll

循序渐进，学习Spring Boot、Spring Boot & Shiro、Spring Batch、Spring Cloud、Spring Cloud Alibaba、Spring Security & Spring Security OAuth2，博客Spring系列源码：https://mrbird.cc

• spring-boot
• springboot
• learning
• shiro
• spring-boot-learning
• spring-security
• +1 more

21.jwtk / jjwt

Java JWT: JSON Web Token for Java and Android

• jwt
• java
• java-jwt
• jjwt
• jwt-token
• jwt-tokens
• +14 more

22.Netflix / zuul

Zuul is a gateway service that provides dynamic routing, monitoring, resiliency, security, and more.

23.apereo / cas

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

• sso-authentication
• authentication
• authorization
• java
• websso
• saml2
• +14 more

24.MovingBlocks / Terasology

Terasology - open source voxel world

• java
• game
• voxel
• sandbox
• game-engine
• game-engine-3d
• +3 more

25.elunez / eladmin

eladmin jpa 版本：项目基于 Spring Boot 2.7.18、 Jpa、 Spring Security、Redis、Vue的前后端分离的后台管理系统，项目采用分模块开发方式， 权限控制采用 RBAC，支持数据字典与数据权限管理，支持一键生成前后端代码，支持动态路由

• spring-boot
• spring-security
• jpa
• redis
• vue
• element-ui
• +4 more

26.sqlancer / sqlancer

Automated testing to find logic and performance bugs in database systems

• testing
• sql
• dbms
• fuzzing
• dbms-testing
• sqlite
• +5 more

27.gravitee-io / gravitee-api-management

Gravitee.io - OpenSource API Management

• api
• api-management
• gateway
• java
• vertx
• api-gateway
• +1 more

28.google / tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

29.CalebFenton / simplify

Android virtual machine and deobfuscator

• deobfuscation
• java
• optimization
• android
• reverse-engineering
• malware-analysis
• +9 more

30.Hakky54 / certificate-ripper

🔐 A CLI tool to extract server certificates

• certificate
• ssl
• x509
• tls
• java
• macos
• +7 more

31.membrane / api-gateway

API Gateway bridging modern and legacy APIs with WSDL-to-OpenAPI, SOAP-to-REST, XML, OAuth2, and GraphQL.

• oauth2
• api-gateway
• api
• rest
• openapi
• soap
• +3 more

32.dineshshetty / Android-InsecureBankv2

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

33.find-sec-bugs / find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

• findbugs
• java
• security-audit
• owasp
• taint-analysis
• code-analysis
• +5 more

34.schemacrawler / SchemaCrawler

Free database schema discovery and comprehension tool

• schemacrawler
• jdbc
• database-diagrams
• schema
• java
• database
• +11 more

35.hyphanet / fred

Freenet REference Daemon

• anonymity
• hyphanet
• privacy

36.OpenIdentityPlatform / OpenAM

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

• openam
• sso
• oauth
• saml
• aaa
• authentication
• +14 more

37.pac4j / pac4j

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

• java
• security
• authentication
• authorization
• cas
• oauth
• +14 more

38.springdoc / springdoc-openapi

Library for OpenAPI 3 with spring-boot

• openapi3
• spring-boot
• springdoc-openapi
• swagger-ui
• swagger-documentation
• openapi
• +14 more

39.ac-pm / Inspeckage

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

• android-application
• security-analysis
• dynamic-analysis
• xposed

40.tink-crypto / tinkArchived

Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.

• cryptography
• java
• cpp
• go
• objc
• crypto
• +2 more

41.Loophole-LLC / Bastillion

Bastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.

• ssh
• bastion-host
• java
• javascript
• web-app
• web-based
• +8 more

42.tink-crypto / tink-java

Java implementation of Tink

• crypto
• cryptography
• java
• security

43.oversecured / ovaa

Oversecured Vulnerable Android App

• appsec
• android-security
• vulnerable-application
• vulnerable-android-apps
• mobile-security

44.struppigel / PortEx

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

45.sirixdb / sirix

SirixDB is an an embeddable, bitemporal, append-only database system and event store, storing immutable lightweight snapshots. It keeps the full history of each resource. Every commit stores a space-efficient snapshot through structural sharing. It is log-structured and never overwrites data. SirixDB uses a novel page-level versioning approach.

• xquery
• java
• temporal-data
• storage
• snapshot
• comparison
• +14 more

46.Password4j / password4j

Java cryptographic library that supports Argon2, bcrypt, scrypt and PBKDF2 aimed to protect passwords in databases. Easy to use by design, highly customizable, secure and portable. All the implementations follow the standards and have been reviewed to perform better in the JVM.

• pbkdf2
• bcrypt
• scrypt
• argon2
• password
• hashing
• +10 more

47.SonarSource / sonar-java

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

• java
• sonarqube
• static-code-analysis
• static-analyzer
• static-analysis
• language-team
• +5 more

48.OpenIdentityPlatform / OpenDJ

OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance

• ldap-server
• ldap
• opendj
• rest
• rest2ldap
• opends
• +6 more

49.OpenAS2 / OpenAs2App

OpenAS2 is a java-based implementation of the EDIINT AS2 standard. It is intended to be used as a server. It is extremely configurable and supports a wide variety of signing and encryption algorithms.

50.bbottema / simple-java-mail

Simple API, Complex Emails (Jakarta Mail smtp wrapper)

• java
• java-mail
• outlook
• batch-processing
• smime
• dkim
• +14 more

51.AndroidVTS / android-vts

Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.

52.Cap-go / capacitor-native-biometric

Secure biometric authentication for Capacitor with Face ID, Touch ID, and Android biometrics.

• capacitor
• capacitor-plugin
• ionic

53.OpenHFT / Zero-Allocation-Hashing

Zero-allocation hashing for Java

• java
• hashing
• high-performance
• farmhash
• murmurhash3
• cityhash
• +3 more

54.Hakky54 / ayza

🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more

• tls
• ssl
• certificate
• keystore
• truststore
• mutual-authentication
• +13 more

55.BastiaanJansen / otp-java

A small and easy-to-use one-time password generator library for Java implementing RFC 4226 (HOTP) and RFC 6238 (TOTP).

• java
• otp
• totp
• hotp
• 2fa
• two-factor-authentication
• +4 more

56.OpenIdentityPlatform / OpenIG

OpenIG is an open-source identity gateway (reverse-proxy) that secures, routes, and manages web traffic. It enables authentication, access control, and integration with identity providers, delivering single sign-on and API security for web and cloud applications.

• sso
• reverse-proxy
• rewrite
• openam
• saml
• saml2
• +13 more

57.hourianto / sporeflower

A J2ME-focused reverse-engineering, decompilation and remapping toolkit, aimed at semantically correct, recompilable output.

• cldc
• decompiler
• decompiler-java
• j2me
• java-decompiler
• midp

58.google / binnaviArchived

BinNavi is a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.

• reverse-engineering
• java
• binnavi
• yfiles
• analysis

59.nsacyber / GRASSMARLINArchived

Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber

• ics
• scada
• network
• networking
• monitor
• monitoring
• +5 more

60.Warxim / petep

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

• proxy
• tcp
• tcp-proxy
• penetration-testing
• hacking
• security
• +14 more

61.Guichaguri / MinimalFTP

A lightweight, simple FTP server. Pure Java, no dependencies.

• ftp
• ftp-server
• java
• minimal
• file-transfer
• tls

62.funkygao / cp-ddd-framework

轻量级DDD正向/逆向业务建模框架，支撑复杂业务系统的架构演化！

• ddd
• extension
• ddd-architecture
• clean-architecture
• framework
• enterprise-architecture
• +5 more

63.googleapis / google-oauth-java-client

Google OAuth Client Library for Java

64.k3b / APhotoManager

Manage local photos on Android: gallery, geotag with photomap, privacy, tags, find, sort, view, copy, send, ... .

• android
• photos
• gallery
• photo-manager
• xmp
• exif
• +14 more

65.baumschubser / hotpants

HOTP/TOTP one time passwords on java phones (J2ME)

• hotp
• j2me
• j2me-platform
• one-time-pad
• otp
• otp-generator
• +4 more

66.Hakky54 / mutual-tls-ssl

🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC, WebSocket and ElasticSearch examples are included

• tls
• truststore
• certificate
• keystore
• encryption
• openssl
• +14 more

67.andrewmichaelsmith / bluepot

Bluetooth Honeypot

68.marianobarrios / tls-channel

A Java library that implements a ByteChannel interface over SSLEngine, enabling easy-to-use (socket-like) TLS for Java applications.

• java
• ssl
• tls
• networking
• non-blocking
• library
• +5 more

69.square / keywhizArchived

A system for distributing and managing secrets

• keywhiz
• secret-management
• secret-distribution
• enterprise-software
• manage-secrets
• secrets
• +2 more

70.capacitor-community / generic-oauth2

Generic Capacitor OAuth 2 client plugin. Stop the war in Ukraine!

• capacitor
• oauth2
• oauth2-client
• capacitor-plugin
• social-login
• authentication

71.abstractj / kaliumArchived

Java binding to the Networking and Cryptography (NaCl) library with the awesomeness of libsodium

• libsodium
• java
• nacl
• java-bindings
• cryptography

72.afiqiqmal / SharedChamber

Android Secure SharedPreferences Using Facebook Conceal Encryption

• conceal
• facebook
• android
• encryption
• sharedpreferences
• secure-android-sharedpreferences
• +7 more

73.jaiswalakshansh / Vuldroid

Vuldroid is a Vulnerable Android Application made with security issues in order to demonstrate how they can occur in code

• android-application
• webview-xss
• application-security
• vulnerable-application
• android-security
• deeplink

74.wavesplatform / WavesJ

Java library for interacting with the Waves blockchain.

• java-library
• blockchain
• cryptography

75.yammer / dropwizard-auth-ldapArchived

Dropwizard Authentication Module for LDAP using JNDI.

76.networknt / light-graphql-4j

GraphQL implementation based on light-4j

• java
• graphql
• security
• relay
• relayjs
• graphql-validator
• +1 more

77.BastiaanJansen / jwt-java

JSON Web Token implementation for Java according to RFC 7519. Easily create, parse and validate JSON Web Tokens using a fluent API.

• java
• jwt
• java-jwt
• json-web-token
• json-web-signature
• jwt-authentication
• +2 more

78.nbauma109 / transformer-api

Unified Java API for multiple decompilers (Fernflower, Vineflower, Procyon, CFR, JD-Core, JADX)

• bytecode
• cfr
• decompilation
• decompiler
• fernflower
• jadx
• +7 more