All projects
478 repositories · updated 2026-11-06
Loading…
1swisskyrepo / PayloadsAllTheThingsA list of useful payloads and bypass for Web Application Security and Pentest/CTFPythonMIT · PermissiveInsufficient rank history82,432
2mitmproxy / mitmproxyAn interactive proxy for inspecting HTTP and TLS traffic.PythonMIT · PermissiveInsufficient rank history46,663
3mukul975 / Anthropic-Cybersecurity-Skills817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0PythonApache-2.0 · PermissiveInsufficient rank history35,700
4lissy93 / web-checkA tool for analyzing publicly available website information.TypeScriptMIT · PermissiveInsufficient rank history35,392
5OWASP / CheatSheetSeriesOWASP reference collection of concise guidance on application security topics.JavaScriptCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history33,850
6projectdiscovery / nucleiA template-based scanner for application and infrastructure vulnerabilities.GoMIT · PermissiveInsufficient rank history32,642
7imthenachoman / How-To-Secure-A-Linux-ServerA guide collecting Linux server hardening steps.CC-BY-SA-4.0 · Share derivative sourceInsufficient rank history32,041
9trailofbits / algoA deployment tool for configuring a personal VPN environment.PythonAGPL-3.0 · Share derivative sourceInsufficient rank history30,454
10Infisical / infisicalInfisical is the open-source platform for securing secrets, certificates, access, and AI Agents.TypeScriptLicense not declaredInsufficient rank history30,219
11trufflesecurity / trufflehogFind, verify, and analyze leaked credentialsGoAGPL-3.0 · Share derivative sourceInsufficient rank history28,820
12digitalocean / nginxconfig.io⚙️ NGINX config generator on steroids 💉JavaScriptMIT · PermissiveInsufficient rank history28,246
13OpenZeppelin / openzeppelin-contractsOpenZeppelin component library for smart contract development.SolidityMIT · PermissiveInsufficient rank history27,352
14goauthentik / authentikThe authentication glue you need.PythonLicense not declaredInsufficient rank history26,208
15radareorg / radare2UNIX-like reverse engineering framework and command-line toolsetCLicense not declaredInsufficient rank history25,332
16TecharoHQ / anubisWeighs the soul of incoming HTTP requests to stop AI crawlersGoMIT · PermissiveInsufficient rank history23,983
17osquery / osquerySQL powered operating system instrumentation, monitoring, and analytics.C++License not declaredInsufficient rank history23,713
18getsops / sopsSimple and flexible tool for managing secretsGoMPL-2.0 · Share derivative sourceInsufficient rank history23,632
19shieldfy / API-Security-ChecklistChecklist of the most important security countermeasures when designing, testing, and releasing your APIMIT · PermissiveInsufficient rank history23,344
20chaitin / SafeLineSafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.GoGPL-3.0 · Share derivative sourceInsufficient rank history23,178
