#security

digininja/DVWA

PHP

92

health

Damn Vulnerable Web Application (DVWA)

projectdiscovery/nuclei-templates

JavaScript

91

health

Community curated list of templates for the nuclei engine to find security vulnerabilities.

projectcalico/calico

Go

90

health

Cloud native networking and network security

wolfSSL/wolfssl

C

90

health

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.

dradis/dradis-ce

Ruby

90

health

Dradis Framework: Collaboration and reporting for IT Security teams

jason5ng32/MyIP

JavaScript

89

health

The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.

express-rate-limit/express-rate-limit

TypeScript

89

health

Basic rate-limiting middleware for the Express web server

AdventDevInc/kudu

TypeScript

89

health

Free Windows, Mac and Linux cleaner, scanner, and more.

0xMarcio/pocindex

Python

89

health

Search 82,000+ public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub.

Tencent/AI-Infra-Guard

Python

89

health

A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

Asymptote-Labs/agent-beacon

Go

89

health

The cross-harness, self-improving memory layer for AI agents.

luckyPipewrench/pipelock

Go

89

health

Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action receipts: verifiable audit evidence from outside the agent.

PentHertz/RF-Swift

Go

89

health

🚀 A powerful multi-platform RF toolbox that deploys specialized radio, hardware, and other security tools in seconds on Linux, Windows, and macOS - supporting x86_64, ARM64 (Raspberry Pi, Apple Silicon), and RISC-V architectures without disrupting your primary OS. 📡✨

go-acme/lego

Go

89

health

Let's Encrypt/ACME client and library written in Go

cilium/cilium

Go

89

health

eBPF-based Networking, Security, and Observability

majd/ipatool

Go

89

health

Command-line tool that allows you to search for iOS, iPadOS, tvOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages.

edoardottt/secfiles

Shell

89

health

My useful files for penetration tests, security assessments, bug bounty and other security related stuff

cure53/DOMPurify

JavaScript

88

health

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

openai/codex-security

TypeScript

88

health

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

fabriziosalmi/wildbox

Python

88

health

An open-source security platform for the community. Unified SIEM, SOAR, WAF, and more in a single, self-hosted solution.