Awesome

GitHub projects from awesome lists

Search awesome repositories

Search names, descriptions, topics, tags, and stacks, then tune results by ecosystem, freshness, health, and cross-list signal.

Continue with GitHub Browse awesome lists Request a list

Repos indexed: 21,464
Awesome lists tracked: 149
Current results: 140

Find repositories

Start broad, then narrow by ecosystem, freshness, health, and growth.

Unsure which signals matter? Read the repository shortlisting guide.

Clear 1 refinement

Search repositories

Search mode

Keyword Semantic

Tune results

The controls most people need first.

Awesome list

Language

Freshness

Sort

Direction

More filters Topics, generated tags, stack, files, age, archive status, and growth.

Ecosystem

GitHub topic

Generated tag

Framework or stack

Package manager

Files

Has file

Choose a suggestion or use commas to require multiple files.

Health

Minimum stars

Repository age

Uses known first-commit dates.

Archive status

AI development signals

Momentum

Unmaintained for

Commit velocity

Star growth

Reset filters

140 repos shown

List: awesome-security

Browse

Highlighted

Open highlighted repo slot

Put your repository first

Promote a GitHub repo at the top of Awesome repository list views for 7 days.

swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Stack

Python

GitHub topics

#bounty #bugbounty #bypass #cheatsheet #enumeration #hacking

Updated: 2026-08-27
Lists: 3 list mentions
First commit: 2016-10-18
History: 6 history points
License: MIT
Issues: Disabled

81,649

stars

Forks: 17,461
Commits: 2,202 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

skylot/jadx

Dex to Java decompiler

Stack

Java Gradle

GitHub topics

#android #decompiler #dex #java

Updated: 2026-10-09
Lists: 3 list mentions
First commit: 2013-03-18
History: 6 history points
License: Apache-2.0
Issues: 449 open

50,798

stars

Forks: 5,789
Commits: 2,722 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

rapid7/metasploit-framework

Metasploit Framework

AI dev

Stack

Ruby Next.js React Sinatra Bundler .NET SDK Gradle

GitHub topics

#hacktoberfest

Updated: 2026-10-08
Lists: 3 list mentions
First commit: 2013-08-22
History: 8 history points
License: NOASSERTION
Issues: 604 open

39,121

stars

Forks: 14,995
Commits: 83,292 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Stack

Go Celery Cobra Django Django REST Framework Bun Bundler Cargo

GitHub topics

#containers #devsecops #docker #go #golang #hacktoberfest

Updated: 2026-10-12
Lists: 3 list mentions
First commit: 2019-03-27
History: 7 history points
License: Apache-2.0
Issues: 261 open

38,368

stars

Forks: 755
Commits: 4,273 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

soxoj/maigret

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

Stack

Python Flask pytest pip Poetry

GitHub topics

#cli #cybersecurity #identification #information-gathering #infosec #investigation

Updated: 2026-10-05
Lists: 3 list mentions
First commit: 2020-01-08
History: 6 history points
License: MIT
Issues: 60 open

38,349

stars

Forks: 3,018
Commits: 1,675 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

fingerprintjs/fingerprintjs

The most advanced free and open-source browser fingerprinting library

Stack

TypeScript Express npm Yarn

GitHub topics

#audio-fingerprinting #browser #browser-fingerprint #browser-fingerprinting #detection #fingerprint

Updated: 2026-10-14
Lists: 2 list mentions
First commit: 2015-02-11
History: 17 history points
License: MIT
Issues: 22 open

28,598

stars

Forks: 2,629
Commits: 940 commits
Star growth, last 7 days: +36 +0.1%
Commit velocity, last 7 days: +6 +0.6%

Website GitHub

iBotPeaches/Apktool

A tool for reverse engineering Android apk files

Stack

Java Gradle

GitHub topics

#9patch #android #apk #apktool #arsc #reverse-engineering

Updated: 2026-10-15
Lists: 2 list mentions
First commit: 2010-03-12
History: 6 history points
License: Apache-2.0
Issues: 78 open

25,916

stars

Forks: 4,047
Commits: 2,375 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

getsops/sops

Simple and flexible tool for managing secrets

Stack

Go gRPC Go Cargo Go modules

GitHub topics

#aws #azure #devops #gcp #pgp #secret-distribution

Updated: 2026-10-05
Lists: 1 list mention
First commit: 2015-08-13
History: 5 history points
License: MPL-2.0
Issues: 452 open

23,320

stars

Forks: 1,092
Commits: 2,710 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

frida/frida

Main repo for hosting release binaries

Stack

Meson Meson

GitHub topics

#frida #instrumentation #vala

Updated: 2026-10-05
Lists: 1 list mention
First commit: 2013-04-10
History: 5 history points
License: NOASSERTION
Issues: 1,972 open

22,128

stars

Forks: 2,222
Commits: 4,806 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

bee-san/RustScan

🤖 The Modern Port Scanner 🤖

Stack

Rust Cargo

GitHub topics

#docker #hacking #hacktoberfest #networking #nmap #pentesting

Updated: 2026-10-13
Lists: 5 list mentions
First commit: 2020-07-11
History: 9 history points
License: GPL-3.0
Issues: 18 open

20,575

stars

Forks: 1,395
Commits: 1,063 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

wazuh/wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Stack

C++ pytest Starlette CMake Go modules npm

GitHub topics

#cloud-security #compliance #configuration-assessement #container-security #cybersecurity #file-integrity-monitoring

Updated: 2026-10-03
Lists: 4 list mentions
First commit: 2005-09-23
History: 9 history points
License: NOASSERTION
Issues: 3,145 open

17,104

stars

Forks: 2,523
Commits: 51,684 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

zaproxy/zaproxy

The ZAP by Checkmarx Core project

Stack

Java Gradle pip

GitHub topics

#appsec #dast #hacktoberfest #opensource #security #security-scanner

Updated: 2026-10-08
Lists: 4 list mentions
First commit: 2010-08-16
History: 7 history points
License: Apache-2.0
Issues: 864 open

15,931

stars

Forks: 2,668
Commits: 10,412 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

owasp-amass/amass

In-depth attack surface mapping and asset discovery

Stack

Go gRPC Go Go modules

GitHub topics

#attack-surfaces #dns #enumeration #go #golang #information-gathering

Updated: 2026-07-19
Lists: 5 list mentions
First commit: 2017-09-28
History: 8 history points
License: NOASSERTION
Issues: 244 open

15,334

stars

Forks: 2,200
Commits: 2,874 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

crowdsecurity/crowdsec

Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.

AI dev

Stack

Go Cobra Gin gRPC Go Go modules

GitHub topics

#anti-bot #blocklist #bot-detection #bot-protection #cybersecurity #docker

Updated: 2026-10-07
Lists: 3 list mentions
First commit: 2020-05-15
History: 6 history points
License: MIT
Issues: 308 open

15,103

stars

Forks: 729
Commits: 2,799 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

evilsocket/opensnitch

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

Stack

Python gRPC Go Go modules pip

GitHub topics

#application-firewall #data-breach #firewall #linux #networking #security

Updated: 2026-07-26
Lists: 2 list mentions
First commit: 2017-04-16
History: 6 history points
License: GPL-3.0
Issues: 209 open

14,153

stars

Forks: 677
Commits: 2,293 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

OWASP/mastg

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

AI dev

Stack

Python Android CMake Gradle pip

GitHub topics

#android #android-application #compliancy-checklist #dynamic-analysis #hacking #ios

Updated: 2026-10-10
Lists: 2 list mentions
First commit: 2016-10-01
History: 6 history points
License: CC-BY-SA-4.0
Issues: 242 open

13,240

stars

Forks: 2,824
Commits: 10,744 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

bunkerity/bunkerweb

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

AI dev

Stack

Python FastAPI Flask Starlette CMake .NET SDK Go modules

GitHub topics

#antibot #cybersecurity #devops #devsecops #dnsbl #docker

Updated: 2026-10-07
Lists: 5 list mentions
First commit: 2019-08-20
History: 11 history points
License: AGPL-3.0
Issues: 197 open

11,061

stars

Forks: 649
Commits: 10,816 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

aboul3la/Sublist3r

Fast subdomains enumeration tool for penetration testers

Stack

Python pip

Updated: 2024-08-02
Lists: 2 list mentions
First commit: 2015-12-15
History: 6 history points
License: GPL-2.0
Issues: 255 open

11,047

stars

Forks: 2,213
Commits: 138 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

firezone/firezone

Blazing-fast remote access

AI dev

Stack

Elixir Android Axum Ecto Phoenix Cargo Mix Gradle

GitHub topics

#cloud #devsecops #elixir #elixir-lang #liveview #network

Updated: 2026-10-04
Lists: 5 list mentions
First commit: 2020-04-22
History: 11 history points
License: Apache-2.0
Issues: 343 open

9,110

stars

Forks: 463
Commits: 11,892 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

bridgecrewio/checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Stack

Python Django Express Flask gRPC Go Bundler .NET SDK Go modules

GitHub topics

#aws #aws-security #azure #cloudformation #compliance #devops

Updated: 2026-10-12
Lists: 3 list mentions
First commit: 2019-11-27
History: 6 history points
License: Apache-2.0
Issues: 194 open

9,061

stars

Forks: 1,434
Commits: 17,465 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

99designs/aws-vault

A vault for securely storing and accessing AWS credentials in development environments

Stack

Go Go modules

GitHub topics

#aws #aws-vault #cli #credentials #iam #keychain

Updated: 2025-12-30
Lists: 1 list mention
First commit: 2015-08-11
History: 5 history points
License: MIT
Issues: 2 open

8,996

stars

Forks: 827
Commits: 1,225 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

volatilityfoundation/volatility

An advanced memory forensics framework

Archived

Stack

Python pip

GitHub topics

#malware #memory #python #ram #volatility-framework

Updated: 2025-05-16
Lists: 2 list mentions
First commit: 2009-04-03
History: 5 history points
License: GPL-2.0
Issues: 221 open

8,057

stars

Forks: 1,346
Commits: 2,827 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

arkime/arkime

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

AI dev

Stack

C Express Vite Vue npm

GitHub topics

#big-data #c #javascript #network-monitoring #nsm #packet-capture

Updated: 2026-10-03
Lists: 1 list mention
First commit: 2012-07-06
History: 5 history points
License: Apache-2.0
Issues: 39 open

7,519

stars

Forks: 1,171
Commits: 6,751 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

guardicore/monkey

Infection Monkey - An open-source adversary emulation platform

Stack

Python Flask Next.js pytest React npm PEP 517 pip

GitHub topics

#adversary-emulation #infection-monkey #penetration-testing #security-automation #security-tools

Updated: 2025-05-01
Lists: 2 list mentions
First commit: 2015-08-30
History: 6 history points
License: GPL-3.0
Issues: 240 open

7,096

stars

Forks: 825
Commits: 19,752 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

aquasecurity/tfsec

Tfsec is now part of Trivy

Stack

Go Cobra gRPC Go Go modules pip

GitHub topics

#aws #azure #ci #compliance #devops #devsecops

Updated: 2026-03-25
Lists: 1 list mention
First commit: 2019-03-04
History: 5 history points
License: MIT
Issues: Disabled

7,042

stars

Forks: 558
Commits: 1,356 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

fleetdm/fleet

Open device management

AI dev

Stack

Go Cobra Express gRPC Go React Bundler Go modules Gradle

GitHub topics

#binary-authorization #configuration-management #device-management #gitops #ios #linux

Updated: 2026-10-05
Lists: 2 list mentions
First commit: 2016-07-25
History: 5 history points
License: NOASSERTION
Issues: 3,788 open

6,948

stars

Forks: 1,045
Commits: 28,364 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

StackExchange/blackbox

Safely store secrets in Git/Mercurial/Subversion

Archived AI dev

Stack

Go Go modules

Updated: 2025-11-05
Lists: 1 list mention
First commit: 2014-04-06
History: 5 history points
License: MIT
Issues: Disabled

6,765

stars

Forks: 390
Commits: 538 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

lanmaster53/recon-ng

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

Stack

Python

Updated: 2026-10-05
Lists: 4 list mentions
First commit: 2012-10-24
History: 8 history points
License: GPL-3.0
Issues: 39 open

5,985

stars

Forks: 931
Commits: 1,029 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

trustedsec/ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

Stack

Python pip

Updated: 2024-09-22
Lists: 1 list mention
First commit: 2015-05-12
History: 5 history points
License: Unknown
Issues: 9 open

5,578

stars

Forks: 1,286
Commits: 1,517 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

USArmyResearchLab/Dshell

Dshell is a network forensic analysis framework.

Stack

Python pip

Updated: 2024-05-07
Lists: 1 list mention
First commit: 2014-12-17
History: 5 history points
License: NOASSERTION
Issues: 4 open

5,497

stars

Forks: 1,135
Commits: 254 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

Search awesome repositories

Find repositories

Put your repository first

How it works

Pricing

How it works

Pricing