Security Open Source Projects

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

A collection of various awesome lists for hackers, pentesters and security researchers

Laravel is a web application framework with expressive, elegant syntax. We’ve already laid the foundation for your next big idea — freeing you to create without sweating the small things.

List of Computer Science courses with video lectures.

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Comfortably monitor your Internet traffic 🕵️‍♂️

ASP.NET Core is a cross-platform .NET framework for building modern cloud-based web applications on Windows, Mac, or Linux.

Making Docker and Kubernetes management easy.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Laravel is a web application framework with expressive, elegant syntax.

🕵️‍♂️ All-in-one OSINT tool for analysing any website

A curated list of awesome awesomeness

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

Set up a personal VPN in the cloud

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Jitsi Meet - Secure, Simple and Scalable Video Conferences that you use as a standalone app or embed in your web application.

An evolving how-to guide for securing a Linux server.

循序渐进，学习Spring Boot、Spring Boot & Shiro、Spring Batch、Spring Cloud、Spring Cloud Alibaba、Spring Security & Spring Security OAuth2，博客Spring系列源码：https://mrbird.cc

Cloud-native high-performance edge/middle/service proxy

The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

Infisical is the open-source platform for secrets, certificates, and privileged access management.

Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. Supports Ubuntu, Debian, CentOS/RHEL, Alpine Linux and Raspberry Pi OS. Includes client config and management scripts.

Find secrets with Gitleaks 🔑

KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.

Free and open source laravel eCommerce platform

REST API for any Postgres database

OpenZeppelin Contracts is a library for secure smart contract development.

Find, verify, and analyze leaked credentials

A tool for reverse engineering Android apk files

eBPF-based Networking, Security, and Observability

UNIX-like reverse engineering framework and command-line toolset

SQL powered operating system instrumentation, monitoring, and analytics.

Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)

Checklist of the most important security countermeasures when designing, testing, and releasing your API

Ember.js - A JavaScript framework for creating ambitious web applications

Simple and flexible tool for managing secrets

Community guide to securing and improving privacy on macOS.

The authentication glue you need.

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2023

Empowering People Ethically 🚀 — Matomo is hiring! Join us → https://matomo.org/jobs Matomo is the leading open-source alternative to Google Analytics, giving you complete control and built-in privacy. Easily collect, visualise, and analyse data from websites & apps. Star us on GitHub ⭐️ – Pull Requests welcome!

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Vitess is a database clustering system for horizontal scaling of MySQL.

🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability.

Security Guide for Developers

Manage your dotfiles across multiple diverse machines, securely.

The easiest, and most secure way to access and protect all of your infrastructure.

A Django content management system focused on flexibility and user experience

High-Performance server for NATS.io, the cloud and edge native messaging system.

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

open-source agentic AI data assistant for the next generation of AI + Data products.

Free and Open Source Reverse Engineering Platform powered by rizin

SimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS, Android and desktop apps 📱!

Get Android app updates straight from the source.

Build the best interview map. The current content includes JS, network, browser related, performance optimization, security, framework, Git, data structure, algorithm, etc.

Daemon to ban hosts that cause multiple authentication errors