All projects
Repositories in this selection 27 · UTC 2026-11-03
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—KKeygraphHQ / shannonAn AI-assisted security tester for web applications and APIs.TypeScriptAGPL-3.0 · Share derivative sourceInsufficient rank history50,9605,926——2026-10-27
2—Ssqlmapproject / sqlmapA tool for SQL injection detection and database security assessment.PythonNOASSERTION · Restricted / unknownInsufficient rank history38,8306,435——2026-11-02
3—OOWASP / CheatSheetSeriesOWASP reference collection of concise guidance on application security topics.JavaScriptCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history33,8504,709——2026-11-02
4—Cchaitin / SafeLineSafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.GoGPL-3.0 · Share derivative sourceInsufficient rank history23,1541,592——2026-10-22
5—Zzaproxy / zaproxyThe ZAP by Checkmarx Core projectJavaApache-2.0 · PermissiveInsufficient rank history16,0942,690——2026-11-02
6—Mmaurosoria / dirsearchWeb path scannerPythonUnknown · Restricted / unknownInsufficient rank history15,0342,462——2026-11-01
7—Jjuice-shop / juice-shopOWASP Juice Shop: Probably the most modern and sophisticated insecure web applicationTypeScriptMIT · PermissiveInsufficient rank history14,33820,436——2026-10-30
8—OOWASP / wstgThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.CSSCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history10,1791,730——2026-11-01
9—Iinfoslack / awesome-web-hackingA list of web application securityUnknownMIT · PermissiveInsufficient rank history7,3391,370——2026-10-29
10—Mmicrosoft / Security-1018 Lessons, Kick-start Your Cybersecurity Learning.HTMLCC0-1.0 · PermissiveInsufficient rank history7,024936——2026-08-24
11—Uurbanadventurer / WhatWebNext generation web scannerRubyGPL-2.0 · Share derivative sourceInsufficient rank history6,9761,019——2026-04-02
12—Iinfobyte / faradayOpen-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.PythonGPL-3.0 · Share derivative sourceInsufficient rank history6,8391,089——2026-10-29
13—Aawarexone / Agentic-Bug-HunterAI-powered bug bounty hunting toolkit that works with or without subscription.PythonMIT · PermissiveInsufficient rank history5,559979——2026-10-28
14—OOWASP / Go-SCPGolang Secure Coding Practices guideGoCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history5,299406——2024-05-31
15—DDefectDojo / django-DefectDojoOpen-Source Unified Vulnerability Management, DevSecOps & ASPMPythonBSD-3-Clause · PermissiveInsufficient rank history5,1812,014——2026-11-03
16—Jjassics / security-study-planComplete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...UnknownUnknown · Restricted / unknownInsufficient rank history5,120646——2026-10-10
17—Aandresriancho / w3afw3af: web application attack and audit framework, the open source web vulnerability scanner.PythonUnknown · Restricted / unknownInsufficient rank history4,9121,239——2023-02-22
18—Pprojectdiscovery / interactshAn OOB interaction gathering server and client libraryGoMIT · PermissiveInsufficient rank history4,614489——2026-11-02
19—Oopenziti / zitiThe parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZitiGoApache-2.0 · PermissiveInsufficient rank history4,468280——2026-11-03
20—DDependencyTrack / dependency-trackDependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.JavaApache-2.0 · PermissiveInsufficient rank history4,400853——2026-11-03
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.