Security & Privacy

rustdesk

rustdesk

★ 118,485

A self-hostable open-source remote desktop application.

2dust

v2rayN

★ 111,916

A GUI client for Windows, Linux and macOS, support Xray and sing-box and others.

fatedier

frp

★ 108,244

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

home-assistant

core

★ 89,377

Home Assistant runs home automation locally, connecting devices and services while keeping control and data on the user's system.

sherlock-project

sherlock

★ 86,903

Hunt down social media accounts by username across social networks.

macrozheng

mall

★ 84,311

mall项目是一套电商系统，包括前台商城系统及后台管理系统，基于Spring Boot+MyBatis实现，采用Docker容器化部署。 前台商城系统包含首页门户、商品推荐、商品搜索、商品展示、购物车、订单流程、会员中心、客户服务、帮助中心等模块。 后台管理系统包含商品管理、订单管理、会员管理、促销管理、运营管理、内容管理、统计报表、财务管理、权限管理、设置等模块。.

caddyserver

caddy

★ 74,212

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

unionlabs

union

★ 73,889

Union is a zero-knowledge interoperability protocol for transferring data and assets between blockchains without a trusted intermediary.

NationalSecurityAgency

ghidra

★ 71,235

Ghidra, from the NSA Research Directorate, is a software reverse engineering framework with disassembly, decompilation, graphing, and scripting across many processors.

gorhill

uBlock

★ 66,438

uBlock Origin is an efficient, low-memory content blocker for Chromium and Firefox that filters ads, trackers, and other unwanted content.

socketio

socket.io

★ 63,175

Bidirectional and low-latency communication for every platform. Questions Our issues list is exclusively reserved for bug reports and feature requests.

WerWolv

ImHex

★ 54,258

ImHex is a hex editor for reverse engineers and programmers, with byte patching, patch management, unlimited undo/redo, and its own pattern language for binary analysis.

KeygraphHQ

shannon

★ 46,076

Shannon is an autonomous white-box AI pentester that analyzes source code, finds attack paths and runs real exploits to prove vulnerabilities pre-production.

usestrix

strix

★ 43,481

Autonomous AI penetration-testing agents that run your code, find vulnerabilities, and verify them with real proofs of concept, plugging into CI/CD pipelines.

amruthpillai

reactive-resume

★ 39,731

Reactive Resume is a self-hosted resume builder with editable layouts, PDF export, import tools, and privacy-focused local control.

aquasecurity

trivy

★ 36,996

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

nginx

nginx

★ 31,177

NGINX is the source for the web server and reverse proxy used to serve, route, and balance high-traffic applications.

atuinsh

atuin

★ 30,867

Making your shell magical. Additionally, it provides optional and _fully encrypted_ synchronisation of your history between machines, via an Atuin server.

openssl

openssl

★ 30,515

General purpose TLS and crypto library. Download ======== For Production Use Source code tarballs of the official releases can be downloaded from openssl-library.org/source/.

community-scripts

ProxmoxVE

★ 29,029

Proxmox VE Helper-Scripts (Community Edition). Paste a command into your Proxmox shell, answer a few prompts, and your container or VM is up and running.

authelia

authelia

★ 28,337

The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

ente

ente

★ 27,981

End-to-end encrypted cloud for everything. On top of this platform, we have built three apps so far: Ente Photos (an alternative to Apple and Google Photos), Ente Locker (a safe space for your most important documents and credentials), and Ente Auth (a 2FA alternative to the deprecated Authy).

OpenZeppelin

openzeppelin-contracts

★ 27,196

OpenZeppelin Contracts is a library for secure smart contract development.

trufflesecurity

trufflehog

★ 27,134

TruffleHog scans repositories, filesystems, and cloud services for exposed credentials, then checks whether the secrets still work.

cilium

cilium

★ 24,756

eBPF-based Networking, Security, and Observability

agentscope-ai

QwenPaw

★ 23,935

Your Personal AI Assistant; easy to install, deploy on your own machine or on the cloud; supports multiple chat apps with easily extensible capabilities.

chaitin

SafeLine

★ 21,909

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

m1k1o

neko

★ 21,727

A self hosted virtual browser that runs in docker and uses WebRTC.

vxcontrol

pentagi

★ 21,117

PentAGI runs fully autonomous AI agents for complex penetration testing, self-hosted and configurable with OpenAI, Anthropic, Ollama, and other LLM providers.

TecharoHQ

anubis

★ 20,820

Weighs the soul of incoming HTTP requests to stop AI crawlers

apache

shardingsphere

★ 20,768

Empowering Data Intelligence with Distributed SQL for Sharding, Scalability, and Security Across All Databases.

larksuite

cli

★ 15,723

The official Lark/Feishu CLI tool, maintained by the larksuite team, built for humans and AI Agents. Covers core business domains including Messenger, Docs, Base, Sheets, Calendar, Mail, Tasks, Meetings, and more, with 200+ commands and 20+ AI Agent Skills.

passteque

gluetun

★ 14,997

VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.

canopy-network

canopy

★ 14,483

The official go implementation of the Canopy Network protocol. Here you'll find:** ➪ A recursive framework to build blockchains.

streetwriters

notesnook

★ 14,318

A fully open source & end-to-end encrypted note taking alternative to Evernote.

alam00000

bentopdf

★ 14,268

The Privacy First PDF Toolkit. BentoPDF BentoPDF** is a powerful, privacy-first, client-side PDF toolkit that is self hostable and allows you to manipulate, edit, merge, and process PDF files directly in your browser.

Automattic

harper

★ 13,834

Offline, privacy-first grammar checker. Fast, open-source, Rust-powered.

amir20

dozzle

★ 13,696

Realtime log viewer for containers. Supports Docker, Swarm and K8s.

NVIDIA

SkillSpector

★ 13,660

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks.

juice-shop

juice-shop

★ 13,537

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application.

zedeus

nitter

★ 13,328

Alternative Twitter front-end. It's impossible to use Twitter without JavaScript enabled, and as of 2024 you need to sign up.

89luca89

distrobox

★ 12,793

Use any linux distribution inside your terminal. Enable both backward and forward compatibility with software and freedom to use whatever distribution you re more comfortable with. Mirror available at:.

bia-pain-bache

BPB-Worker-Panel

★ 12,577

A GUI Panel providing Worker subscriptions for VLESS, Trojan and Warp configs alongside a private DoH server and chain proxies, offering full DNS, clean IP, Fragment, Warp, Warp pro and routing settings for cross-platform clients using Amnezia, Wireguard, Sing-box, Clash/Mihomo and Xray cores.

nearai

ironclaw

★ 12,546

IronClaw is an Agent OS focused on privacy, security and extensibility.

rybbit-io

rybbit

★ 12,520

Rybbit - open-source and privacy-friendly alternative to Google Analytics that is 10x more intuitive.

future-architect

vuls

★ 12,218

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices. Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go.

BishopFox

sliver

★ 11,577

Adversary Emulation Framework. Sliver's implants support C2 over Mutual TLS (mTLS), WireGuard, HTTP(S), and DNS and are dynamically compiled with per-binary asymmetric encryption keys.

k1tbyte

Wand-Enhancer

★ 10,541

Wand Enhancer adds interface improvements, interoperability tools, and an optional local web panel to the Wand desktop application.

vercel-labs

portless

★ 10,222

Replace port numbers with stable, named local URLs. For humans and agents.

CodebuffAI

codebuff

★ 7,976

Generate code from the terminal. **Loaded**, Built-in web research, browser use, and more.

yaklang

yakit

★ 7,635

Yakit is a cybersecurity toolkit built around a modular client that supports vulnerability scanning, threat hunting, asset analysis, and operational workflows for security teams.

ethereum-optimism

optimism

★ 6,458

Optimism is Ethereum, scaled. Optimism is a project dedicated to scaling Ethereum's technology and expanding its ability to coordinate people from across the world to build effective decentralized economies and governance systems.

cilium

tetragon

★ 4,855

eBPF-based Security Observability and Runtime Enforcement. Cilium’s new Tetragon component enables powerful real-time, eBPF-based Security Observability and Runtime Enforcement.

homarr-labs

homarr

★ 4,383

A modern and easy to use dashboard. 40+ integrations. 20K+ icons built in. Authentication out of the box. No YAML, drag and drop configuration.

elastic

elasticsearch-py

★ 4,383

elasticsearch-py is the official Python client for Elasticsearch, providing typed query construction, index and document lifecycle APIs, bulk operations, async compatibility, and version-aware client behavior.

PurpleI2P

i2pd

★ 4,145

I2P: End-to-End encrypted and anonymous Internet. I2P allows people from all around the world to communicate and share information without restrictions.

rotki

rotki

★ 3,957

A portfolio tracking, analytics, accounting and management application that protects your privacy.

coveragepy

coveragepy

★ 3,399

The code coverage tool for Python. It uses the code analysis tools and tracing hooks provided in the Python standard library to determine which lines are executable, and which have been executed.

davepoon

buildwithclaude

★ 3,224

A single hub to find Claude Skills, Agents, Commands, Hooks, Plugins, and Marketplace collections to extend Claude Code, Claude Desktop, Agent SDK and OpenClaw.

envoyproxy

gateway

★ 2,901

Manages Envoy Proxy as a Standalone or Kubernetes-based Application Gateway.

v2ray

domain-list-community

★ 2,653

Community managed domain list. Move To Domain list community This project manages a list of domains, to be used as geosites for routing purpose in Project V.

pac4j

pac4j

★ 2,521

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

IrosTheBeggar

mStream

★ 2,359

The easiest music streaming server available. Save music from youtube to wherever you want in your filesystem mStream can manage your torrents for you.

int128

kubelogin

★ 2,328

kubectl plugin for Kubernetes OpenID Connect authentication (kubectl oidc-login).

antrea-io

antrea

★ 1,806

Antrea is an open-source Kubernetes networking and security project built on Open vSwitch, providing pod networking, policy enforcement, observability integration, and gateway controls for production clusters.

AdventDevInc

kudu

★ 1,701

Free Windows, Mac and Linux cleaner, scanner, and more. Kudu Free, open-source system cleaner & security scanner for Windows, macOS, and Linux.

phishdestroy

destroylist

★ 1,662

Real-time phishing & scam domain blocklist, 190k+ curated threats, 888K+ community, free API, multiple formats.

hotyue

IP-Sentinel

★ 1,562

IP-Sentinel VPS IP IP Telegram . IP-Sentinel 是一款轻量化、模块化的分布式 VPS 资产养护系统，通过地理位置信号锚定与高拟真本土流量注入，精准解决 IP 定位偏移（IP送中）及风控分过高的痛点，并配合 Telegram 实现全球多节点“低功耗、拟真、无人值守”的自动化资产养护。

FossifyOrg

Messages

★ 1,457

An easy and quick way of managing SMS and MMS messages without ads.

sbondCo

Watcharr

★ 1,434

Open source, self-hostable watched list for all your content (movies, tv series, anime, games) with user authentication, modern and clean UI and a very simple setup.

moq-dev

moq

★ 1,420

Media over QUIC: Real-time latency at massive scale. Media over QUIC Media over QUIC (MoQ) is a next-generation live media protocol that provides real-time latency at massive scale.

hkjarral

AVA-AI-Voice-Agent-for-Asterisk

★ 1,159

An open-source AI Voice Agent that integrates with Asterisk/FreePBX using Audiosocket/RTP technology.

suzuki-shunsuke

pinact

★ 1,148

pinact is a CLI to edit GitHub Workflow and Composite action files and pin versions of Actions and Reusable Workflows. pinact can also update their versions and verify version annotations.

kitsumed

ShizuCallRecorder

★ 1,055

ShizuCallRecorder empowers ADB through Shizuku to record phone calls on non-rooted device!

Fanju6

NetProxy-Magisk

★ 1,034

Based on the sing-box core, this Android proxy module supports one-click start/stop of transparent proxy and is designed for Android devices.

flosell

trailscraper

★ 835

A command-line tool to get valuable information out of AWS CloudTrail.

CriticalPathSecurity

Zeek-Intelligence-Feeds

★ 398

Zeek-Formatted Threat Intelligence Feeds. Zeek Intel Threat Feed w/ Combined Indicators This is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data.