All projects
Repositories in this selection 20 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—OOWASP / CheatSheetSeriesOWASP reference collection of concise guidance on application security topics.JavaScriptCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history33,8504,709——2026-11-02
2—MMobSF / Mobile-Security-Framework-MobSFMobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.PythonGPL-3.0 · Share derivative sourceInsufficient rank history22,1133,799——2026-11-01
3—Vvitalysim / Awesome-Hacking-ResourcesA collection of hacking / penetration testing resources to make you better!UnknownGPL-3.0 · Share derivative sourceInsufficient rank history17,5902,227——2026-05-21
4—Oowasp-amass / amassIn-depth attack surface mapping and asset discoveryGoNOASSERTION · Restricted / unknownInsufficient rank history15,4542,201——2026-10-25
5—Jjuice-shop / juice-shopOWASP Juice Shop: Probably the most modern and sophisticated insecure web applicationTypeScriptMIT · PermissiveInsufficient rank history14,33820,436——2026-10-30
6—OOWASP / wstgThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.CSSCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history10,1791,730——2026-11-01
7—Iinfoslack / awesome-web-hackingA list of web application securityUnknownMIT · PermissiveInsufficient rank history7,3391,370——2026-10-29
8—Pparagonie / awesome-appsecA curated list of resources for learning about application securityPHPMIT · PermissiveInsufficient rank history7,128808——2025-02-22
9—Uurbanadventurer / WhatWebNext generation web scannerRubyGPL-2.0 · Share derivative sourceInsufficient rank history6,9761,019——2026-04-02
10—Mmicrosoft / agent-governance-toolkitAI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.PythonMIT · PermissiveInsufficient rank history6,5111,125——2026-11-02
11—Mmadhuakula / kubernetes-goatKubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀HTMLMIT · PermissiveInsufficient rank history5,9311,104——2026-04-16
12—OOWASP / NettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability ManagementPythonApache-2.0 · PermissiveInsufficient rank history5,7021,228——2026-10-30
13—DDefectDojo / django-DefectDojoOpen-Source Unified Vulnerability Management, DevSecOps & ASPMPythonBSD-3-Clause · PermissiveInsufficient rank history5,1812,014——2026-11-03
14—DDependencyTrack / dependency-trackDependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.JavaApache-2.0 · PermissiveInsufficient rank history4,400853——2026-11-03
15—Ccorazawaf / corazaOWASP Coraza WAF is a golang modsecurity compatible web application firewall libraryGoApache-2.0 · PermissiveInsufficient rank history3,989378——2026-10-31
16—Hhusnainfareed / awesome-ethical-hacking-resources😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.UnknownMIT · PermissiveInsufficient rank history3,821559——2026-04-18
17—Mmicrocosm-cc / bluemondaybluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSSGoBSD-3-Clause · PermissiveInsufficient rank history3,730202——2025-04-04
18—BBearer / bearerCode security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.GoNOASSERTION · Restricted / unknownInsufficient rank history2,779155——2026-11-02
19—Oopenappsec / openappsecopen-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.C++Apache-2.0 · PermissiveInsufficient rank history1,742138——2026-09-06
20—Iinsidersec / insiderStatic Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).GoMIT · PermissiveInsufficient rank history55480——2022-04-10
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.