GitHub stars · 开源序

Commercial use

More filters

CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save

1chaitin / SafeLineSafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.GoGPL-3.0 · Share derivative sourceInsufficient rank history23,1541,592——2026-10-22

2MobSF / Mobile-Security-Framework-MobSFMobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.PythonGPL-3.0 · Share derivative sourceInsufficient rank history22,1133,799——2026-11-01

3crowdsecurity / crowdsecOpen-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.GoMIT · PermissiveInsufficient rank history15,431756——2026-11-02

4Hacker0x01 / hacker101Source code for Hacker101.com - a free online web and mobile security class.SCSSNOASSERTION · Restricted / unknownInsufficient rank history14,6152,661——2025-02-22

5nahamsec / Resources-for-Beginner-Bug-Bounty-HuntersA list of resources for those interested in getting started in bug bountiesUnknownUnknown · Restricted / unknownInsufficient rank history12,3122,053——2024-07-23

6bunkerity / bunkerweb🛡️ Open-source and cloud-native Web Application Firewall (WAF)PythonAGPL-3.0 · Share derivative sourceInsufficient rank history11,207666——2026-11-02

7infoslack / awesome-web-hackingA list of web application securityUnknownMIT · PermissiveInsufficient rank history7,3391,370——2026-10-29

8vavkamil / awesome-bugbounty-toolsA curated list of various bug bounty toolsUnknownCC0-1.0 · PermissiveInsufficient rank history6,4481,038——2026-11-01

9elementalsouls / Claude-BugHunterA Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.PythonMIT · PermissiveInsufficient rank history5,398824——2026-11-02

10lunasec-io / lunasecLunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/TypeScriptNOASSERTION · Restricted / unknownInsufficient rank history1,473165——2024-05-02

11blst-security / cherrybombStop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.RustApache-2.0 · PermissiveInsufficient rank history1,23884——2024-10-25

12bountyyfi / lonkeroLonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.RustNOASSERTION · Restricted / unknownInsufficient rank history1,09994——2026-11-02

13h5i-dev / h5iAn Axum-based Rust web framework for building and verifying web apps with Lean 4, featuring optional GPU acceleration and integrated development infrastructure for red-teaming and CI/CD.RustApache-2.0 · PermissiveInsufficient rank history88777——2026-11-02

14ossamayasserr / WebAppPentestRoadmapRoadmap for Web Application Penetration Testing | FREE Resources (Not Pirated)PythonGPL-3.0 · Share derivative sourceInsufficient rank history46289——2023-08-25

15Ares-X / VulWikiThe Chinese vulnerability knowledge base organizes the principles and public recurrence data of Web, middleware, network equipment and system vulnerabilities, and supports retrieval by product, CVE, and fingerprint. Chinese vulnerability knowledge base.PythonUnknown · Restricted / unknownInsufficient rank history22875——2026-11-02

16elbraino / awesome-blackhat-arsenalCurated collection of cybersecurity tools featured in Black Hat Arsenal events.PythonCC0-1.0 · PermissiveInsufficient rank history19235——2026-09-21