Awesome

GitHub projects from awesome lists

Search awesome repositories

Search names, descriptions, topics, tags, and stacks, then tune results by ecosystem, freshness, health, and cross-list signal.

Continue with GitHub Browse awesome lists Request a list

Repos indexed: 21,464
Awesome lists tracked: 149
Current results: 14

Find repositories

Start broad, then narrow by ecosystem, freshness, health, and growth.

Unsure which signals matter? Read the repository shortlisting guide.

Clear 1 refinement

Search repositories

Search mode

Keyword Semantic

Tune results

The controls most people need first.

Awesome list

Language

Freshness

Sort

Direction

More filters Topics, generated tags, stack, files, age, archive status, and growth.

Ecosystem

GitHub topic

Generated tag

Framework or stack

Package manager

Files

Has file

Choose a suggestion or use commas to require multiple files.

Health

Minimum stars

Repository age

Uses known first-commit dates.

Archive status

AI development signals

Momentum

Unmaintained for

Commit velocity

Star growth

Reset filters

14 repos shown

Topic: vulnerability

Browse

Highlighted

Open highlighted repo slot

Put your repository first

Promote a GitHub repo at the top of Awesome repository list views for 7 days.

swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Stack

Python

GitHub topics

#bounty #bugbounty #bypass #cheatsheet #enumeration #hacking

Updated: 2026-08-27
Lists: 3 list mentions
First commit: 2016-10-18
History: 6 history points
License: MIT
Issues: Disabled

81,649

stars

Forks: 17,461
Commits: 2,202 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Stack

Go Celery Cobra Django Django REST Framework Bun Bundler Cargo

GitHub topics

#containers #devsecops #docker #go #golang #hacktoberfest

Updated: 2026-10-12
Lists: 3 list mentions
First commit: 2019-03-27
History: 7 history points
License: Apache-2.0
Issues: 261 open

38,368

stars

Forks: 755
Commits: 4,273 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

chaitin/SafeLine

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

Stack

Go Gin gRPC Go Go modules

GitHub topics

#api-gateway #application-security #appsec #blueteam #bruteforce #captcha

Updated: 2026-09-10
Lists: 2 list mentions
First commit: 2023-04-11
History: 8 history points
License: GPL-3.0
Issues: 69 open

22,604

stars

Forks: 1,533
Commits: 927 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

anchore/grype

A vulnerability scanner for container images and filesystems

Stack

Go Cobra gRPC Go Ruby on Rails Bundler Mix Go modules

GitHub topics

#container-image #containers #cyclonedx #docker #go #golang

Updated: 2026-10-09
Lists: 1 list mention
First commit: 2020-05-26
History: 1 history point
License: Apache-2.0
Issues: 417 open

13,010

stars

Forks: 913
Commits: 2,404 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

infobyte/faraday

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

Stack

Python Celery Flask pytest pip uv

GitHub topics

#appsec #autonomous-agents #autonomous-pentest #collaboration #continuous-scanning #cve

Updated: 2026-10-06
Lists: 1 list mention
First commit: 2013-11-06
History: 5 history points
License: GPL-3.0
Issues: 15 open

6,769

stars

Forks: 1,076
Commits: 14,159 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

Tencent/AI-Infra-Guard

A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

AI dev

Stack

Python Cobra FastAPI Gin pytest Go modules npm PEP 517

GitHub topics

#agent #agent-security #agentic-ai #ai-infra #ai-red-teaming #ai-safety

Updated: 2026-09-10
Lists: 4 list mentions
First commit: 2025-01-02
History: 9 history points
License: Apache-2.0
Issues: 37 open

6,214

stars

Forks: 580
Commits: 1,863 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

alexandreborges/malwoverview

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

Stack

Python PEP 517 pip

GitHub topics

#alienvault #cve #cve-search #cybersecurity #malpedia #malshare

Updated: 2026-09-22
Lists: 1 list mention
First commit: 2018-09-08
History: 2 history points
License: GPL-3.0
Issues: 0 open

4,132

stars

Forks: 559
Commits: 656 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

Bearer/bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Stack

Go Cobra Django Django REST Framework Express Bundler Composer .NET SDK

GitHub topics

#appsec #code-quality #compliance #dataflow #devsecops #devsecops-tools

Updated: 2026-10-05
Lists: 1 list mention
First commit: 2022-09-27
History: 5 history points
License: NOASSERTION
Issues: 26 open

2,756

stars

Forks: 156
Commits: 1,443 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

vulnersCom/getsploit

Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.

Stack

Python pytest uv

GitHub topics

#cli #cve #exploit #exploit-database #exploitdb #exploits

Updated: 2026-10-06
Lists: 1 list mention
First commit: 2017-06-04
History: 5 history points
License: MIT
Issues: 6 open

1,827

stars

Forks: 245
Commits: 44 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

globocom/secDevLabs

A laboratory for learning secure web and mobile development in a practical manner.

Stack

PHP Android Angular Cobra Echo CocoaPods Dart Pub Go modules

GitHub topics

#development #hacktoberfest #hacktoberfest2022 #labs #owasp-top-10 #security

Updated: 2024-09-25
Lists: 1 list mention
First commit: 2018-12-01
History: 5 history points
License: BSD-3-Clause
Issues: 31 open

979

stars

Forks: 464
Commits: 710 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

GitHub

cloudfuzz/android-kernel-exploitation

Android Kernel Exploitation

Stack

C++ CMake

GitHub topics

#android #exploit-dev #exploit-development #exploitation #kernel #linux

Updated: 2022-02-13
Lists: 1 list mention
First commit: 2020-04-16
History: 5 history points
License: GPL-3.0
Issues: 4 open

652

stars

Forks: 98
Commits: 40 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

20urc3/Sekiryu

Comprehensive toolkit for Ghidra headless.

Archived

Stack

Python pip

GitHub topics

#binary #binary-exploitation #c #cpp #ghidra #ghidra-decompiler

Updated: 2025-04-17
Lists: 1 list mention
First commit: 2022-12-06
History: 124 history points
License: Apache-2.0
Issues: 3 open

360

stars

Forks: 22
Commits: 180 commits
Star growth, last 7 days: 0 0.0%
Commit velocity, last 7 days: 0 0.0%

Website GitHub

karimhabush/cyberowl

Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.

Stack

Python Express Scrapy Vue npm pip Poetry

GitHub topics

#cisa #cve #security #security-alerts #vulnerability

Updated: 2026-10-05
Lists: 1 list mention
First commit: 2022-02-15
History: 5 history points
License: MIT
Issues: 32 open

263

stars

Forks: 21
Commits: 3,936 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

Website GitHub

v8blink/Chromium-based-XSS-Taint-Tracking

Cyclops 是一款具有 XSS 检测功能的浏览器

GitHub topics

#cyclops #cyclops-browser #cyclopsbrowser #security #taint-tracking #vulnerability

Updated: 2024-06-30
Lists: 1 list mention
First commit: 2022-04-30
History: 5 history points
License: GPL-3.0
Issues: 4 open

127

stars

Forks: 12
Commits: 44 commits
Star growth, last 7 days: No 7-day history
Commit velocity, last 7 days: No 7-day history

GitHub

Search awesome repositories

Find repositories

Put your repository first

How it works

Pricing

How it works

Pricing