All projects
Repositories in this selection 478 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Sswisskyrepo / PayloadsAllTheThingsA list of useful payloads and bypass for Web Application Security and Pentest/CTFPythonMIT · PermissiveInsufficient rank history82,31517,558——2026-10-30
2—Mmitmproxy / mitmproxyAn interactive proxy for inspecting HTTP and TLS traffic.PythonMIT · PermissiveInsufficient rank history46,5654,920——2026-11-01
3—Mmukul975 / Anthropic-Cybersecurity-Skills817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0PythonApache-2.0 · PermissiveInsufficient rank history35,4504,318——2026-08-31
4—Llissy93 / web-checkA tool for analyzing publicly available website information.TypeScriptMIT · PermissiveInsufficient rank history35,3312,922——2026-11-02
5—OOWASP / CheatSheetSeriesOWASP reference collection of concise guidance on application security topics.JavaScriptCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history33,8504,709——2026-11-02
6—Pprojectdiscovery / nucleiA template-based scanner for application and infrastructure vulnerabilities.GoMIT · PermissiveInsufficient rank history32,5413,962——2026-11-02
7—Iimthenachoman / How-To-Secure-A-Linux-ServerA guide collecting Linux server hardening steps.UnknownCC-BY-SA-4.0 · Share derivative sourceInsufficient rank history32,0222,172——2026-09-07
8—Ggitleaks / gitleaksFind secrets with Gitleaks 🔑GoMIT · PermissiveInsufficient rank history30,6032,330——2026-10-28
9—Ttrailofbits / algoA deployment tool for configuring a personal VPN environment.PythonAGPL-3.0 · Share derivative sourceInsufficient rank history30,4482,370——2026-10-28
10—IInfisical / infisicalInfisical is the open-source platform for securing secrets, certificates, access, and AI Agents.TypeScriptNOASSERTION · Restricted / unknownInsufficient rank history30,2192,407——2026-11-02
11—Ttrufflesecurity / trufflehogFind, verify, and analyze leaked credentialsGoAGPL-3.0 · Share derivative sourceInsufficient rank history28,8202,681——2026-11-02
12—Ddigitalocean / nginxconfig.io⚙️ NGINX config generator on steroids 💉JavaScriptMIT · PermissiveInsufficient rank history28,2582,030——2024-12-14
13—OOpenZeppelin / openzeppelin-contractsOpenZeppelin component library for smart contract development.SolidityMIT · PermissiveInsufficient rank history27,34212,418——2026-11-02
14—Ggoauthentik / authentikThe authentication glue you need.PythonNOASSERTION · Restricted / unknownInsufficient rank history26,2082,099——2026-11-02
15—Rradareorg / radare2UNIX-like reverse engineering framework and command-line toolsetCNOASSERTION · Restricted / unknownInsufficient rank history25,2533,400——2026-11-02
16—TTecharoHQ / anubisWeighs the soul of incoming HTTP requests to stop AI crawlersGoMIT · PermissiveInsufficient rank history23,907804——2026-11-02
17—Oosquery / osquerySQL powered operating system instrumentation, monitoring, and analytics.C++NOASSERTION · Restricted / unknownInsufficient rank history23,7132,634——2026-10-31
18—Ggetsops / sopsSimple and flexible tool for managing secretsGoMPL-2.0 · Share derivative sourceInsufficient rank history23,5861,112——2026-11-02
19—Sshieldfy / API-Security-ChecklistChecklist of the most important security countermeasures when designing, testing, and releasing your APIUnknownMIT · PermissiveInsufficient rank history23,3412,645——2026-07-21
20—Cchaitin / SafeLineSafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.GoGPL-3.0 · Share derivative sourceInsufficient rank history23,1541,592——2026-10-22
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.