Awesome List

Awesome Web Security

๐Ÿถ A curated list of Web Security materials and resources.

qazbnm456/awesome-web-security #awesome #awesome-list #list #penetration-testing #security #web #websecurity
List stars
13,913
README repos
129
Indexed repos
122
List commits
584
Forks
1,884
Open issues
20

Tracked list growth

GitHub stars and default-branch commits for qazbnm456/awesome-web-security.

Latest scan 2026-10-18 10:50

Likes history

GitHub stars

Commits history

Default branch commits

Indexed repositories

11 repos matching these filters.

Latest repo push 2026-10-18

Filter this list

Search within Awesome Web Security or narrow by ecosystem and project health.

Clear 1 refinement
Search mode
Tune results
More filters Topics, generated tags, stack, files, age, archive status, and growth.
Ecosystem
Files

Choose a suggestion or use commas to require multiple files.

Health

Uses known first-commit dates.

Momentum
Filters by observed commit-count growth over the repository's latest 7-day capture window. Repositories without a recent baseline are excluded.
Filters by observed GitHub star growth over the repository's latest 7-day capture window. Repositories without a recent baseline are excluded.
Reset filters
Highlighted

Open highlighted repo slot

Put your repository first

Promote a GitHub repo at the top of Awesome repository list views for 7 days.

projectdiscovery/nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

AI dev
Updated
2026-10-18
Lists
3 list mentions
First commit
2020-04-03
License
MIT
Issues
141 open
Forks
3,970
Commits
6,694 commits
Star growth, last 7 days
+81 +0.3%
Commit velocity, last 7 days
+14 +0.2%
cossacklabs/acra

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

Updated
2026-04-23
Lists
4 list mentions
First commit
2016-11-21
License
Apache-2.0
Issues
29 open
Forks
140
Commits
1,059 commits
Star growth, last 7 days
-1 -0.1%
Commit velocity, last 7 days
0 0.0%
vigolium/vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

AI dev
Updated
2026-10-18
Lists
1 list mention
First commit
2026-05-23
License
NOASSERTION
Issues
4 open
Forks
163
Commits
295 commits
Star growth, last 7 days
0 0.0%
Commit velocity, last 7 days
0 0.0%
WebDecoy/FCaptcha

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

Updated
2026-10-16
Lists
3 list mentions
First commit
2025-12-29
License
MIT
Issues
10 open
Forks
24
Commits
207 commits
Star growth, last 7 days
0 0.0%
Commit velocity, last 7 days
0 0.0%
bad-antics/marshall-extensions

๐Ÿ”Œ OSINT & Security Extensions for Marshall Browser - Installable plugins for enhanced reconnaissance and security testing

Updated
2026-02-27
Lists
1 list mention
First commit
2026-01-25
License
Unknown
Issues
0 open
Forks
0
Commits
12 commits
Star growth, last 7 days
0 0.0%
Commit velocity, last 7 days
0 0.0%