Security

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026

Community guide to securing and improving privacy on macOS.

Manage your dotfiles across multiple diverse machines, securely.

🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability.

Empowering People Ethically 🚀 — Matomo is hiring! Join us → https://matomo.org/jobs Matomo is the leading open-source alternative to Google Analytics, giving you complete control and built-in privacy. Easily collect, visualise, and analyse data from websites & apps. Star us on GitHub ⭐️ – Pull Requests welcome!

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Get Android app updates straight from the source.

Security Guide for Developers

The easiest, and most secure way to access and protect all of your infrastructure.

This repository contains a 90-day cybersecurity study plan, along with resources and materials for learning various cybersecurity concepts and technologies. The plan is organized into daily tasks, covering topics such as Network+, Security+, Linux, Python, Traffic Analysis, Git, ELK, AWS, Azure, and Hacking. The repository also includes a `LEARN.md

SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]

🤖 The Modern Port Scanner 🤖

Loads environment variables from .env for nodejs projects.

Useful tool to track location or mobile number

open-source agentic AI data assistant for the next generation of AI + Data products.

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

Free and Open Source Reverse Engineering Platform powered by rizin

SimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS, Android and desktop apps 📱!

Daemon to ban hosts that cause multiple authentication errors

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Fast web fuzzer written in Go

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com

A powerful obfuscator for JavaScript and Node.js

The ZAP by Checkmarx Core project

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.

This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

Web path scanner

The Rogue Access Point Framework

OpenVPN is an open source VPN daemon

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

Database governance built for humans and agents — controlling changes and access across every major database.

Source code for Hacker101.com - a free online web and mobile security class.

Open-Source Phishing Toolkit

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

How to improve NGINX performance, security, and other important things.

Directory/File, DNS and VHost busting tool written in Go

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

🐶 A curated list of Web Security materials and resources.

Damn Vulnerable Web Application (DVWA)

Make your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.

Nmap - the Network Mapper. Github mirror of official SVN repository.

Force Remove Copilot, Recall and More in Windows 11

面向开发人员梳理的代码安全指南