1.opentrap / opentrap
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
+268 stars
from 504 · score 5.59
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
11 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.chaitin / SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
+183 stars
from 22,957 · score 5.21
3.mdpsec / bug-bounty-hunting-prompts
Reusable prompts for a structured, evidence-first bug bounty hunting workflow
+131 stars
from 764 · score 4.88
4.OWASP / CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
+97 stars
from 33,739 · score 4.58
5.juice-shop / juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
+91 stars
from 14,235 · score 4.52
6.urbanadventurer / WhatWeb
Next generation web scanner
+62 stars
from 6,913 · score 4.14
7.openappsec / openappsec
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
+9 stars
from 1,733 · score 2.30
8.paragonie / awesome-appsec
A curated list of resources for learning about application security
+6 stars
from 7,122 · score 1.95
9.jassics / cybersecurity-roadmap
Skills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelines
+6 stars
from 502 · score 1.95
10.syhunt / php2shell-protection
Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance
+4 stars
from 115 · score 1.61
11.Safe3 / uusec-waf
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
+2 stars
from 1,717 · score 1.10