Open highlighted repo slot
Put your repository first
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
GitHub projects from awesome lists
Search names, descriptions, topics, tags, and stacks, then tune results by ecosystem, freshness, health, and cross-list signal.
Open highlighted repo slot
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
Cross-platform desktop GUI app to clean image metadata
The future of online communications.
Phishing Campaign Toolkit
Security sensor for realtime threat detection and protection
A p2p, secure file storage, social network and application protocol
A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.
A fork and successor of the Sulley Fuzzing Framework
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.
ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.
A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
A secure low code deception runtime framework, leveraging AI for System Virtualization.
🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)
DEPRECATED - MozDef: Mozilla Enterprise Defense Platform
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
AI Native platform to get companies compliant - Vanta & Drata Alternative
A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
Find web directories without bruteforce
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.
Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
Reverse proxies cheatsheet
An authentication system generator for Rails applications.
linuxprivchecker.py -- a Linux Privilege Escalation Check Script
Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.
wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).
Database anonymization and test data management
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS