Security tools
Repositories in this selection 677 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—NNationalSecurityAgency / ghidraGhidra is a software reverse engineering (SRE) frameworkJavaApache-2.0 · PermissiveInsufficient rank history97,32811,014——2026-11-02
2—Ssherlock-project / sherlockFind public social-network accounts by username.PythonMIT · PermissiveInsufficient rank history95,43011,364——2026-11-02
3—Hhome-assistant / core:house_with_garden: Open source home automation that puts local control and privacy first.PythonApache-2.0 · PermissiveInsufficient rank history91,92639,219——2026-11-03
4—ZZ4nzu / hackingtoolALL IN ONE Hacking Tool For HackersPythonMIT · PermissiveInsufficient rank history81,6199,191——2026-10-31
5—Ddanielmiessler / SecListsSecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.PHPMIT · PermissiveInsufficient rank history74,51325,205——2026-11-02
6—Uunionlabs / unionThe trust-minimized, zero-knowledge bridging protocol, designed for censorship resistance, extremely high security, and usage in decentralized finance.RustApache-2.0 · PermissiveInsufficient rank history73,7303,921——2026-07-25
7—Uusestrix / strixAn AI-assisted application penetration-testing tool.PythonApache-2.0 · PermissiveInsufficient rank history73,3748,264——2026-10-30
8—Ddani-garcia / vaultwardenProvide an unofficial password-vault server compatible with Bitwarden clients.RustAGPL-3.0 · Share derivative sourceInsufficient rank history70,1233,400——2026-11-02
9—Ppi-hole / pi-holeA black hole for Internet advertisementsShellNOASSERTION · Restricted / unknownInsufficient rank history61,6353,375——2026-11-02
10—KKeygraphHQ / shannonAn AI-assisted security tester for web applications and APIs.TypeScriptAGPL-3.0 · Share derivative sourceInsufficient rank history50,9605,926——2026-10-27
11—Mmitmproxy / mitmproxyAn interactive proxy for inspecting HTTP and TLS traffic.PythonMIT · PermissiveInsufficient rank history46,5654,920——2026-11-01
12—GGyulyVGC / sniffnetA graphical tool for monitoring network traffic.RustApache-2.0 · PermissiveInsufficient rank history41,8151,941——2026-11-02
13—Uumami-software / umamiUmami is a privacy-first web and product analytics platform. Traffic, campaigns, behavior, conversions, and revenue in one place. No cookies, no surveillance, self-hosted or in the cloud.TypeScriptMIT · PermissiveInsufficient rank history39,8828,477——2026-11-03
14—Rrapid7 / metasploit-frameworkMetasploit FrameworkRubyNOASSERTION · Restricted / unknownInsufficient rank history39,29815,001——2026-11-03
15—Aaquasecurity / trivyA scanner for security issues in containers, code and cloud environments.GoApache-2.0 · PermissiveInsufficient rank history38,914818——2026-11-02
16—Ssqlmapproject / sqlmapA tool for SQL injection detection and database security assessment.PythonNOASSERTION · Restricted / unknownInsufficient rank history38,8306,435——2026-11-02
17—AAdguardTeam / AdGuardHomeA DNS server for network-wide ad and tracker filtering.TypeScriptGPL-3.0 · Share derivative sourceInsufficient rank history38,0732,589——2026-11-02
18—Bblakeblackshear / frigateNVR with realtime local object detection for IP camerasPythonMIT · PermissiveInsufficient rank history37,1663,787——2026-11-02
19—Hhashicorp / vaultA tool for secrets management, encryption as a service, and privileged access managementGoNOASSERTION · Restricted / unknownInsufficient rank history36,4604,803——2026-11-03
20—Llissy93 / web-checkA tool for analyzing publicly available website information.TypeScriptMIT · PermissiveInsufficient rank history35,3312,922——2026-11-02
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.