Top Security repositories on GitHub

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

• awesome
• awesome-list
• lists
• manuals
• resources
• howtos

A collection of various awesome lists for hackers, pentesters and security researchers

• hacking
• security
• bug-bounty
• awesome
• android
• fuzzing

List of Computer Science courses with video lectures.

• computer-science
• algorithms
• systems
• databases
• machine-learning
• web-development

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

• pentest
• payload
• bypass
• web-application
• hacking
• vulnerability

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

• go
• web-server
• caddyfile
• http
• http-server
• reverse-proxy

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

• agents
• artificial-intelligence
• cybersecurity
• penetration-testing
• ai-penetration-testing
• ai-pentesting

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

• debugger
• windows
• x64
• disassembler
• reverse-engineering
• security

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

• penetration-testing
• pentesting
• security-audit
• security-automation
• security-tools
• ai-penetration-testing

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

• python
• security
• man-in-the-middle
• tls
• ssl
• http

Comfortably monitor your network traffic 🕵️‍♂️

• networking
• packet-sniffer
• rust-crate
• linux
• macos
• packet-capture

Opiniated RAG for integrating GenAI in your apps 🧠 Focus on your product rather than the RAG. Easy integration in existing products with customisation! Any LLM: GPT4, Groq, Llama. Any Vectorstore: PGVector, Faiss. Any Files. Anyway you want.

• ai
• llm
• api
• chatbot
• chatgpt
• database

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

• security
• security-tools
• docker
• containers
• vulnerability-scanners
• vulnerability-detection

🕵️‍♂️ All-in-one OSINT tool for analysing any website

• osint
• privacy
• security
• security-tools
• sysadmin

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

• owasp
• code
• security
• cheatsheets
• best-practices
• appsec

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

• ai-agents
• claude-code
• cybersecurity
• incident-response
• mitre-attack
• penetration-testing

The official NGINX Open Source repository.

• content-cache
• load-balancer
• reverse-proxy
• web-server
• http
• https

An evolving how-to guide for securing a Linux server.

• linux
• hardening
• hardening-steps
• security
• security-hardening
• server

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

• cve-scanner
• subdomain-takeover
• nuclei-engine
• vulnerability-detection
• vulnerability-assessment
• vulnerability-scanner

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

• python
• unified-hosts
• malware
• ad-blocker
• porn-filter
• social-media-filter