Security & Privacy Repositories

SkillSpector

by NVIDIA

Total Stargazers:17030

Total Subscribers:69

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

linsa

by linsa-io

Total Stargazers:16859

Total Subscribers:421

Work. Save. Share. Privately.

wazuh

by wazuh

Total Stargazers:16851

Total Subscribers:231

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

MHDDoS

by MatrixTM

Total Stargazers:16690

Total Subscribers:197

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods

ffuf

by ffuf

Total Stargazers:16668

Total Subscribers:170

Fast web fuzzer written in Go

semgrep

by semgrep

Total Stargazers:16603

Total Subscribers:117

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Signal-Desktop

by signalapp

Total Stargazers:16527

Total Subscribers:410

A private messenger for Windows, macOS, and Linux.

lynis

by CISOfy

Total Stargazers:16320

Total Subscribers:349

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

javascript-obfuscator

by javascript-obfuscator

Total Stargazers:16250

Total Subscribers:188

A powerful obfuscator for JavaScript and Node.js

cryptomator

by cryptomator

Total Stargazers:16115

Total Subscribers:206

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

impacket

by fortra

Total Stargazers:16084

Total Subscribers:370

Impacket is a collection of Python classes for working with network protocols.

Cloudflare-vless-trojan

by yonggekkk

Total Stargazers:16075

Total Subscribers:165

CF-workers/pages代理脚本：支持Vless-ws(tls)、Trojan-ws(tls)；Socks5/http本地代理脚本：可选ECH-TLS、普通TLS、无TLS三种代理模式

systeminformer

by winsiderss

Total Stargazers:15962

Total Subscribers:286

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com

lantern

by getlantern

Total Stargazers:15959

Total Subscribers:459

Open-source VPN for speed, privacy, and censorship circumvention. Free to download on Android, iOS, Windows, macOS, and Linux.

zaproxy

by zaproxy

Total Stargazers:15764

Total Subscribers:393

The ZAP by Checkmarx Core project

bytecode-viewer

by Konloch

Total Stargazers:15639

Total Subscribers:370

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

evilginx2

by kgretzky

Total Stargazers:15626

Total Subscribers:366

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

ecapture

by gojue

Total Stargazers:15464

Total Subscribers:106

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

PentestGPT

by GreyDGL

Total Stargazers:15448

Total Subscribers:365

Automated Penetration Testing Agentic Framework Powered by Large Language Models

organicmaps

by organicmaps

Total Stargazers:15395

Total Subscribers:112

🍃 Organic Maps is a free Android & iOS offline maps app for more than 6M travelers, tourists, hikers, and cyclists. It uses crowd-sourced OpenStreetMap data and is developed with love by the community. No ads, no tracking, no data collection, no crapware. Please donate to support the development!

supertokens-core

by supertokens

Total Stargazers:15298

Total Subscribers:104

Open source alternative to Auth0 / Firebase Auth / AWS Cognito

social-engineer-toolkit

by trustedsec

Total Stargazers:15293

Total Subscribers:680

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

bounty-program

by zama-ai

Total Stargazers:15254

Total Subscribers:123

Zama Bounty Program: Contribute to the FHE space and Zama's open source libraries and get rewarded 💰

brook

by txthinking

Total Stargazers:15178

Total Subscribers:460

A cross-platform programmable network tool

amass

by owasp-amass

Total Stargazers:15150

Total Subscribers:223

In-depth attack surface mapping and asset discovery

zitadel

by zitadel

Total Stargazers:15009

Total Subscribers:64

ZITADEL - Identity infrastructure, simplified for you.

amnezia-client

by amnezia-vpn

Total Stargazers:14982

Total Subscribers:126

Amnezia VPN Client (Desktop+Mobile)

oauth2-proxy

by oauth2-proxy

Total Stargazers:14946

Total Subscribers:102

A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.

holehe

by megadose

Total Stargazers:14900

Total Subscribers:313

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

panda-vpn-pro

by DiningFactory

Total Stargazers:14892

Total Subscribers:119

🚁🚀 2026机场推荐 | 熊猫VPN（PandaVPNPro）已确定跑路！快连VPN ，小牛加速器（小牛VPN）体验不佳且价格贵。低价机场，便宜机场，平价机场，性价比机场，高速机场，稳定机场，一元机场，翻墙机场，付费机场，收费机场，冷门机场，优质机场，廉价机场。机场评测，中国翻墙，科学上网，梯子。非永久免费梯子，官网，非永久免费VPN，非免费机场！VPN China。按量计费机场，按量付费机场，不限时机场。机场节点订阅，节点分享，Clash节点，V2ray节点，非免费节点。适用ClashForWindows，V2rayN，singbox，nekobox，小火箭等代理软件🚀🚁

wifiphisher

by wifiphisher

Total Stargazers:14838

Total Subscribers:701

The Rogue Access Point Framework

crowdsec

by crowdsecurity

Total Stargazers:14825

Total Subscribers:123

CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

prowler

by prowler-cloud

Total Stargazers:14802

Total Subscribers:126

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

dirsearch

by maurosoria

Total Stargazers:14719

Total Subscribers:310

Web path scanner

codex-auth-helper

by zhishile

Total Stargazers:14596

Total Subscribers:16

Codex登陆助手：安全地在本地导出您的已登录 ChatGPT 会话配置，生成符合 Codex 规范的 auth.json 本地备份文件。

notesnook

by streetwriters

Total Stargazers:14575

Total Subscribers:75

A fully open source & end-to-end encrypted note taking alternative to Evernote.

fscan

by shadow1ng

Total Stargazers:14535

Total Subscribers:112

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

logto

by logto-io

Total Stargazers:14528

Total Subscribers:105

🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

HackBrowserData

by moonD4rk

Total Stargazers:14522

Total Subscribers:165

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

subfinder

by projectdiscovery

Total Stargazers:14421

Total Subscribers:162

Fast passive subdomain enumeration tool.

casdoor

by casdoor

Total Stargazers:14391

Total Subscribers:81

An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

binwalk

by ReFirmLabs

Total Stargazers:14333

Total Subscribers:359

Firmware Analysis Tool

Reverse-Engineering

by mytechnotalent

Total Stargazers:14272

Total Subscribers:304

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.

gobuster

by OJ

Total Stargazers:14111

Total Subscribers:178

Directory/File, DNS and VHost busting tool written in Go

cert-manager

by cert-manager

Total Stargazers:14077

Total Subscribers:144

Automatically provision and manage TLS certificates in Kubernetes

opensnitch

by evilsocket

Total Stargazers:14058

Total Subscribers:213

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

libsodium

by jedisct1

Total Stargazers:13951

Total Subscribers:376

A modern, portable, easy to use crypto library.

opennhp

by OpenNHP

Total Stargazers:13917

Total Subscribers:829

A lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the AI-driven world.

kratos

by ory

Total Stargazers:13871

Total Subscribers:114

Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

juice-shop

by juice-shop

Total Stargazers:13848

Total Subscribers:183

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

awesome-web-security

by qazbnm456

Total Stargazers:13783

Total Subscribers:344

🐶 A curated list of Web Security materials and resources.

clients

by bitwarden

Total Stargazers:13770

Total Subscribers:127

Bitwarden client apps (web, browser extension, desktop, and cli).

fancyss

by hq450

Total Stargazers:13750

Total Subscribers:353

fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.

portmaster

by safing

Total Stargazers:13707

Total Subscribers:93

🏔 Love Freedom - ❌ Block Mass Surveillance

pwntools

by Gallopsled

Total Stargazers:13694

Total Subscribers:275

CTF framework and exploit development library

dnscrypt-proxy

by DNSCrypt

Total Stargazers:13658

Total Subscribers:317

dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.

DVWA

by digininja

Total Stargazers:13655

Total Subscribers:320

Damn Vulnerable Web Application (DVWA)

GTFOBins.github.io

by GTFOBins

Total Stargazers:13652

Total Subscribers:156

GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

john

by openwall

Total Stargazers:13622

Total Subscribers:300

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

Security & Privacy

Offensive and defensive security, identity and privacy.