Top Security repositories on GitHub

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

• awesome
• awesome-list
• lists
• manuals
• resources
• howtos

A collection of various awesome lists for hackers, pentesters and security researchers

• hacking
• security
• bug-bounty
• awesome
• android
• fuzzing

List of Computer Science courses with video lectures.

• computer-science
• algorithms
• systems
• databases
• machine-learning
• web-development

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

• pentest
• payload
• bypass
• web-application
• hacking
• vulnerability

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

• go
• web-server
• caddyfile
• http
• http-server
• reverse-proxy

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

• debugger
• windows
• x64
• disassembler
• reverse-engineering
• security

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

• python
• security
• man-in-the-middle
• tls
• ssl
• http

Opiniated RAG for integrating GenAI in your apps 🧠 Focus on your product rather than the RAG. Easy integration in existing products with customisation! Any LLM: GPT4, Groq, Llama. Any Vectorstore: PGVector, Faiss. Any Files. Anyway you want.

• ai
• llm
• api
• chatbot
• chatgpt
• database

Comfortably monitor your Internet traffic 🕵️‍♂️

• network-analysis
• networking
• packet-sniffer
• rust-crate
• linux
• macos

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

• security
• security-tools
• docker
• containers
• vulnerability-scanners
• vulnerability-detection

🕵️‍♂️ All-in-one OSINT tool for analysing any website

• osint
• privacy
• security
• security-tools
• sysadmin

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

• owasp
• code
• security
• cheatsheets
• best-practices
• appsec

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

• python
• unified-hosts
• malware
• ad-blocker
• porn-filter
• social-media-filter

Set up a personal VPN in the cloud

• vpn-server
• strongswan
• ansible
• vpn
• ikev2
• security

The official NGINX Open Source repository.

• content-cache
• load-balancer
• reverse-proxy
• web-server
• http
• https

⚙️ NGINX config generator on steroids 💉

• nginx
• nginx-configuration
• php-fpm
• ssl
• letsencrypt
• cdn

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

• cve-scanner
• subdomain-takeover
• nuclei-engine
• vulnerability-detection
• vulnerability-assessment
• vulnerability-scanner

Proxmox VE Helper-Scripts (Community Edition)

• home-assistant
• home-automation
• homelab
• homelab-setup
• lxc
• proxmox

Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. Supports Ubuntu, Debian, CentOS/RHEL, Amazon Linux, Alpine and Raspberry Pi. Includes client config and management scripts.

• vpn
• ipsec
• l2tp
• ikev2
• security
• vpn-server

The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

• totp
• ldap
• sso-authentication
• yubikey
• two-factor-authentication
• docker

OpenZeppelin Contracts is a library for secure smart contract development.

• ethereum
• solidity
• evm
• security
• smart-contracts

KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.

• keepassxc
• keepass
• password-manager
• linux
• windows
• cross-platform

Infisical is the open-source platform for secrets, certificates, and privileged access management.

• cli
• environment-variables
• secret-management
• secrets
• security
• open-source

Find secrets with Gitleaks 🔑

• security
• security-tools
• git
• golang
• go
• secret

Find, verify, and analyze leaked credentials

• secret
• trufflehog
• credentials
• security
• devsecops
• dynamic-analysis