Top Python Security repositories on GitHub

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

• pentest
• payload
• bypass
• web-application
• hacking
• vulnerability

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

• python
• security
• man-in-the-middle
• tls
• ssl
• http

Opiniated RAG for integrating GenAI in your apps 🧠 Focus on your product rather than the RAG. Easy integration in existing products with customisation! Any LLM: GPT4, Groq, Llama. Any Vectorstore: PGVector, Faiss. Any Files. Anyway you want.

• ai
• llm
• api
• chatbot
• chatgpt
• database

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

• owasp
• code
• security
• cheatsheets
• best-practices
• appsec

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

• python
• unified-hosts
• malware
• ad-blocker
• porn-filter
• social-media-filter

Set up a personal VPN in the cloud

• vpn-server
• strongswan
• ansible
• vpn
• ikev2
• security

Open-source AI hackers to find and fix your app’s vulnerabilities.

• agents
• artificial-intelligence
• cybersecurity
• penetration-testing
• ai-penetration-testing
• ai-pentesting

The authentication glue you need.

• saml
• saml-idp
• saml-sp
• oauth2
• oauth2-server
• oauth2-client

open-source agentic AI data assistant for the next generation of AI + Data products.

• database
• gpt-4
• vicuna
• private
• security
• llm

Daemon to ban hosts that cause multiple authentication errors

• linux
• macos
• security
• intrusion-prevention
• fail2ban
• bsd

754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 26 security domains · Apache 2.0

• ai-agents
• claude-code
• cybersecurity
• incident-response
• mitre-attack
• penetration-testing

The Rogue Access Point Framework

• wifiphisher
• wifi
• rogue
• access-point
• python
• security

Web path scanner

• fuzzer
• fuzzing
• python
• security
• dirsearch
• hacking

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

• security
• security-tools
• security-audit
• security-hardening
• hardening
• aws

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

• application-firewall
• firewall
• linux
• networking
• security
• data-breach

🐶 A curated list of Web Security materials and resources.

• awesome-list
• awesome
• list
• web
• security
• websecurity

Exploitation Framework for Embedded Devices

• python
• security
• infosec
• router-exploitation-framework
• routersploit-framework
• exploits

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

• forensics
• mobile
• security
• android
• ios
• forensics-tools

Universal Radio Hacker: Investigate Wireless Protocols Like A Boss

• security
• wireless
• iot
• hacking
• hackrf
• rtl-sdr

Scapy: the Python-based interactive packet manipulation program & library.

• scapy
• python
• network
• network-analysis
• network-visualization
• network-discovery

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

• nginx
• modsecurity
• docker
• security
• dnsbl
• reverse-proxy

Main Sigma Rule Repository

• security
• monitoring
• siem
• logging
• signatures
• elasticsearch

Low code web framework for real world applications, in Python and Javascript

• frappe
• erpnext
• python
• javascript
• web-framework
• full-stack

📱 objection - runtime mobile exploration

• mobile
• pentest
• framework
• ios
• instrumentation
• frida

A free & open modern, fast email client with user-friendly encryption and privacy features

• e-mail
• security
• pgp
• search-engine
• tags
• imap-client