Trending repositories

1.NationalSecurityAgency / ghidra

Ghidra is a software reverse engineering (SRE) framework

• software-analysis
• disassembler
• reverse-engineering

2.usestrix / strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

• agents
• artificial-intelligence
• cybersecurity
• penetration-testing
• ai-penetration-testing
• ai-pentesting
• +14 more

3.NVIDIA / SkillSpector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

• agent-security
• agent-skills
• agentic-ai
• ai-security
• claude-code
• mcp
• +5 more

4.iBotPeaches / Apktool

A tool for reverse engineering Android apk files

• apktool
• apk
• android
• reverse-engineering
• arsc
• 9patch

5.skylot / jadx

Dex to Java decompiler

• android
• dex
• java
• decompiler

6.aquasecurity / trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

• security
• security-tools
• docker
• containers
• vulnerability-scanners
• vulnerability-detection
• +9 more

7.mytechnotalent / Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.

• reverse-engineering
• hacking
• x86
• x64
• assembly
• assembly-language
• +14 more

8.keycloak / keycloak

Open Source Identity and Access Management For Modern Applications and Services

• keycloak
• oidc
• saml

9.NVIDIA / garak

the LLM vulnerability scanner

• ai
• llm-evaluation
• llm-security
• security-scanners
• vulnerability-assessment

10.microg / GmsCore

Free implementation of Play Services

• java
• android
• microg
• google-cloud-messaging
• maps
• auth
• +8 more

11.pranshuparmar / witr

Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.

• cli
• devops
• freebsd
• golang
• linux
• macos
• +14 more

12.authelia / authelia

The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

• totp
• ldap
• sso-authentication
• two-factor-authentication
• docker
• kubernetes
• +14 more

13.MaxHu-xuan / chat-archive-guard

Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.

• chat-archive
• python
• secret-scanning
• sqlite
• chat-export
• jsonl
• +8 more

14.openssl / openssl

General purpose TLS and crypto library

• cryptography
• openssl
• encryption
• tls
• ssl
• decryption

15.kopia / kopia

Cross-platform backup tool for Windows, macOS & Linux with fast, incremental backups, client-side end-to-end encryption, compression and data deduplication. CLI and GUI included.

• deduplication
• backup
• google-cloud-storage
• encryption
• cloud

16.gchq / CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

• data-analysis
• data-manipulation
• encryption
• encoding
• compression
• parsing
• +1 more

17.homarr-labs / homarr

A modern and easy to use dashboard. 80+ integrations. 20K+ icons built in. Authentication out of the box. No YAML, drag and drop configuration.

• dashboard
• docker
• organization
• privacy
• selfhosting
• servarr

18.casdoor / casdoor

An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

• oidc
• sso
• oauth
• iam
• saml
• webauthn
• +14 more

19.InsForge / InsForge

The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.

• ai
• ai-agents
• coding
• oauth2
• postgresql
• deno
• +7 more

20.google / osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

• scanner
• security-audit
• security-tools
• vulnerability-scanner

21.zaproxy / zaproxy

The ZAP by Checkmarx Core project

• zap
• zap-development
• dast
• appsec
• zaproxy
• security
• +3 more

22.prowler-cloud / prowler

This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.

• security
• security-tools
• security-audit
• security-hardening
• hardening
• aws
• +14 more

23.google / oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software.

• fuzzing
• security
• stability
• oss-fuzz
• fuzz-testing
• vulnerabilities

24.anchore / grype

A vulnerability scanner for container images and filesystems

• containers
• security
• vulnerability
• docker
• golang
• go
• +9 more

25.goharbor / harbor

An open source trusted cloud native registry project that stores, signs, and scans content.

• cncf
• container
• registry
• helm
• cloud-native
• containers
• +6 more

26.mandiant / flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

• malware-analysis
• reverse-engineering
• flare

27.apache / caldera

Automated Adversary Emulation Platform

• adversary-emulation
• caldera
• security-automation
• red-team
• mitre-attack
• security-testing
• +1 more

28.openfga / openfga

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

• authorization
• permissions
• security
• zanzibar
• openfga
• entitlements
• +11 more

29.rathole-org / rathole

A lightweight and high-performance reverse proxy for NAT traversal, written in Rust. An alternative to frp and ngrok.

• nat
• tunnel
• rust
• network
• firewall
• frp
• +5 more

30.hslatman / awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

• security
• awesome
• hacktoberfest
• awesome-list

31.corazawaf / coraza

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

• coraza
• waf
• coraza-waf
• owasp-crs
• modsecurity
• coreruleset
• +6 more

32.foundry-rs / foundry

Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.

• rust
• solidity
• evm
• testing
• fuzzing
• blockchain
• +14 more

33.SoftEtherVPN / SoftEtherVPN

Cross-platform multi-protocol VPN software. Pull requests are welcome. The stable version is available at https://github.com/SoftEtherVPN/SoftEtherVPN_Stable.

• vpn-tunnel
• vpn-protocols
• softether-vpn
• vpn
• vpn-server
• ssl-vpn
• +12 more

34.open-policy-agent / opa

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

• opa
• policy
• declarative
• json
• compliance
• cloud-native
• +2 more

35.falcosecurity / falco

Cloud Native Runtime Security

• cncf
• containers
• security
• falco
• ebpf
• kubernetes
• +4 more

36.meirwah / awesome-incident-response

A curated list of tools for incident response

• incident-response
• security
• cybersecurity
• dfir
• awesome-list
• awesome
• +2 more

37.OJ / gobuster

Directory/File, DNS and VHost busting tool written in Go

• go
• pentesting
• tool
• dns
• web

38.cilium / tetragon

eBPF-based Security Observability and Runtime Enforcement

• bpf
• ebpf
• kernel
• kubernetes
• security

39.nearai / ironclaw

IronClaw is an Agent OS focused on privacy, security and extensibility

• codeact
• openclaw
• rlm
• rust
• wasm

40.ashishb / android-security-awesome

A collection of android security related resources

• awesome-list
• awesome
• list
• android
• security

41.mandiant / capa

The FLARE team's open-source tool to identify capabilities in executable files.

• malware-analysis
• reverse-engineering
• binary-analysis
• threat-intelligence
• gsoc-2026

42.androguard / androguard

Reverse engineering and pentesting for Android applications

• android
• dalvik
• reverse-engineering
• dex
• odex
• pentesting

43.stakater / Reloader

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!

• kubernetes
• openshift
• configmap
• secrets
• pods
• deployments
• +5 more

44.dexidp / dex

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

• oidc
• kubernetes
• idp
• identity-provider
• hacktoberfest

45.PyCQA / bandit

Bandit is a tool designed to find common security issues in Python code.

• linter
• bandit
• security-tools
• security-scanner
• security
• static-code-analysis
• +1 more

46.alphacep / vosk-api

Offline speech recognition API for Android, iOS, Raspberry Pi and servers with Python, Java, C# and Node

• speech-recognition
• asr
• voice-recognition
• speech-to-text
• android
• ios
• +14 more

47.kubescape / kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

• kubernetes
• security
• nsa
• mitre-attack
• devops
• best-practice
• +1 more

48.bridgecrewio / checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

• terraform
• static-analysis
• aws
• gcp
• azure
• aws-security
• +7 more

49.authzed / spicedb

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

• zanzibar
• permissions
• database
• distributed-systems
• security
• security-tools
• +12 more

50.ory / hydra

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

• hydra
• oauth2
• openid-connect
• docker
• server
• security
• +14 more

51.cure53 / DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

• xss
• sanitizer
• dom
• security
• javascript
• dompurify
• +5 more

52.firezone / firezone

Blazing-fast remote access

• cloud
• vpn
• security
• wireguard
• wireguard-vpn
• vpn-server
• +10 more

53.in-toto / witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

• security-tools
• security
• attestation
• verification
• supply-chain

54.apache / casbin

Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

• casbin
• access-control
• authorization
• rbac
• abac
• acl
• +12 more

55.dromara / Sa-Token

✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名

• java
• token
• authorization
• sso
• aouth2
• springcloud

56.ory / kratos

Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

• identity
• identity-management
• user-management
• users
• user
• login
• +5 more

57.dwisiswant0 / apkleaks

Scanning APK file for URIs, endpoints & secrets.

• mobile-security
• android-security
• reverse-engineering
• bugbounty
• static-analysis
• apk
• +2 more

58.aya-rs / aya

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

• ebpf
• bpf
• rust
• observability
• security

59.gojue / ecapture

Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.

• golang
• ebpf
• tls
• ssl
• android
• linux
• +13 more

60.openziti / ziti

The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti

• networking
• vpn-2
• appsec
• network
• zero-trust
• zero-trust-cloud
• +14 more

61.google / syzkaller

syzkaller is an unsupervised coverage-guided kernel fuzzer

• linux
• kernel
• fuzz-testing
• fuzzing
• fuzzer
• testing
• +3 more

62.lief-project / LIEF

LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

• reverse-engineering
• malware-analysis
• binary-analysis
• parser
• modification
• executable-formats
• +13 more

63.JonathanSalwan / Triton

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

• reverse-engineering
• symbolic-execution
• binary-analysis
• program-analysis
• taint-analysis
• binary-translation
• +5 more

64.cert-manager / cert-manager

Automatically provision and manage TLS certificates in Kubernetes

• kubernetes
• letsencrypt
• tls
• certificate
• crd
• hacktoberfest

65.google / nsjail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

• security
• linux-namespaces
• linux
• process-isolation
• seccomp-bpf-policies
• chroot

66.mandiant / flare-floss

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

• malware
• deobfuscation
• strings
• flare
• malware-analysis
• gsoc-2026

67.securego / gosec

Go security checker

• golang
• security
• security-tools
• security-automation
• static-analysis
• static-code-analysis

68.arkime / arkime

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

• network-monitoring
• pcap
• packet-capture
• nsm
• javascript
• c
• +2 more

69.ValueCell-ai / valuecell

ValueCell is a community-driven, multi-agent platform for financial applications.

• agentic-ai
• agents
• ai
• assitant
• crypto
• equity
• +6 more

70.str4d / rage

A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.

• cli
• encryption
• zero-configuration
• secure-by-default
• unix-philosophy
• curve25519
• +5 more

71.kubeshark / kubeshark

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.

• kubernetes
• golang
• rest
• grpc
• devops
• sniffer
• +14 more

72.pic-standard / pic-standard

Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.

• action-proposals
• agentic-ai
• agents
• ai
• cli
• crewai
• +14 more

73.CTFd / CTFd

CTFs as you need them

• ctf
• security
• education
• flask
• ctfd

74.googleapis / google-api-nodejs-client

Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.

• google
• google-api
• nodejs
• client
• client-library

75.pglombardo / PasswordPusher

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

• security
• password-expiration
• password
• password-safety
• communicate-passwords
• password-pusher
• +13 more

76.aquasecurity / tracee

Linux Runtime Security and Forensics using eBPF

• ebpf
• linux
• bpf
• security
• golang
• docker
• +2 more

77.jaksi / sshesame

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

• ssh
• honeypot
• go
• golang
• security

78.tclahr / uac

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

• incident-response
• forensics
• computer-forensics
• triage
• linux
• aix
• +14 more

79.openiddict / openiddict-core

Flexible and versatile OAuth 2.0/OpenID Connect stack for .NET

• openidconnect
• oauth2
• aspnetcore
• dotnet

80.cloud-custodian / cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

• aws
• compliance
• cloud
• rules-engine
• cloud-computing
• management
• +8 more

81.static-web-server / static-web-server

A cross-platform, high-performance and asynchronous web server for static files-serving. ⚡

• rust-lang
• http-server
• docker-image
• static-web-server
• file-server
• linux
• +14 more

82.elceef / dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

• phishing
• typosquatting
• domains
• dns
• osint
• idn
• +6 more

83.GreenmaskIO / greenmask

Database anonymization and test data management

• golang
• obfuscation
• postgresql
• security
• security-tools
• anonymization
• +14 more

84.ozeranskii / httptap

Rich-powered CLI that breaks each HTTP request into DNS, connect, TLS, wait, and transfer phases with waterfall timelines, compact summaries, or metrics-only output.

• cli
• diagnostics
• http
• http2
• monitoring
• networking
• +5 more

85.Karib0u / rustinel

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

• blue-team
• detection-engineering
• edr
• endpoint-detection
• etw
• incident-response
• +14 more

86.antonio-morales / Fuzzing101

An step by step fuzzing tutorial. A GitHub Security Lab initiative

• fuzzing
• security
• bug-hunting
• afl
• fuzzilli
• fuzzer
• +7 more

87.openappsec / openappsec

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

• api-security
• application-security
• kubernetes
• nginx
• web-application-firewall
• appsec
• +9 more

88.google / grr

GRR Rapid Response: remote live forensics for incident response

89.josstei / maestro-orchestrate

Multi-agent orchestration platform for Gemini CLI, Claude Code, Codex, and Qwen Code — 39 specialists, parallel subagents, persistent sessions, and built-in code review, debugging, security, SEO, accessibility, and compliance tools

• agentic
• ai-agents
• code-review
• developer-tools
• gemini
• gemini-cli
• +14 more

90.OpenNHP / opennhp

Make your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.

• cybersecurity
• zero-trust
• zero-trust-network-access
• zero-trust-security

91.splunk / security_content

Splunk Security Content

• splunk
• detection
• engineering
• responses
• cicd
• cybersecurity
• +1 more

92.RyanDFIR / hindsight

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

• google-chrome
• hindsight
• chrome
• forensics
• dfir
• browser-forensics
• +2 more

93.linkerd / linkerd2

Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.

• service-mesh
• rust
• golang
• kubernetes
• linkerd
• cloud-native

94.apereo / cas

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

• sso-authentication
• authentication
• authorization
• java
• websso
• saml2
• +14 more

95.astrid-runtime / astrid

Astrid is a portable, capability-secure operating system for composable software.

• agent-runtime
• ai-agents
• capability-security
• llm
• mcp
• microkernel
• +4 more

96.cilium / hubble

Hubble - Network, Service & Security Observability for Kubernetes using eBPF

• ebpf
• observability
• kubernetes
• metrics
• networking
• security
• +2 more

97.RetireJS / retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

• vulnerabilities
• scanner
• firefox-extension
• grunt-plugins
• javascript
• vulnerable-libraries
• +8 more

98.google / timesketch

Collaborative forensic timeline analysis

• forensics
• dfir
• security
• timeline
• analysis

99.zitadel / oidc

Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation

• oidc
• oauth2
• openidconnect
• server
• client
• go
• +13 more

100.Hakky54 / certificate-ripper

🔐 A CLI tool to extract server certificates

• certificate
• ssl
• x509
• tls
• java
• macos
• +7 more