Topics / #security
Security projects on GitHub
Protecting systems and data: vulnerabilities, hardening, and offensive and defensive techniques.
As of , the most-starred Security projects on GitHub are developer-roadmap (369.6K stars), rea (290.9K stars) and ECC (281.5K stars). GitHub.Locker tracks 976 Security repositories with 16.3M stars combined. The fastest-growing on October 16 was rea, with +17.7K stars in a day.
Hot right now
Most stars gained in a day · Oct 16
rea
morluto/rea · ★ 290.9KREA lets AI coding agents reverse engineer apps, binaries, websites, and other software through a single MCP server and CLI, returning findings with the evidence behind them so an agent can explain a feature or rebuild it.
+1.2Kxerj
xerj-org/xerj · ★ 6.9KXERJ is a local-first search engine that automatically indexes any folder - code, docs, logs, PDFs - so an AI coding agent can pull the exact passage it needs instead of grepping or reading whole files into context, and it speaks the Elasticsearch API so existing clients work against it unchanged.
+1.2KECC
affaan-m/ECC · ★ 281.5KECC is a performance-optimization system (a harness) for coding agents: it plans before building, verifies changes with tests, reviews its own work from a fresh context, remembers what matters, and turns repeated wins into reusable skills. It works with Claude Code, Codex, Cursor, OpenCode and other agent harnesses.
+758ponytail
DietrichGebert/ponytail · ★ 165.2KPonytail is a skill for AI coding agents that channels the laziest senior dev in the room: the agent writes only what the task needs, on the belief that the best code is the code you never wrote.
The all-time top
Top 100 of 976 · by stars
- 369.6K
#1 · nilbuild/developer-roadmapdeveloper-roadmap
Community-driven roadmaps, guides and resources that show developers what to learn next and in what order — from frontend and backend to AI, DevOps and dozens of other paths.
- 290.9K
#2 · morluto/rea
rea
REA lets AI coding agents reverse engineer apps, binaries, websites, and other software through a single MCP server and CLI, returning findings with the evidence behind them so an agent can explain a feature or rebuild it.
- 281.5K
#3 · affaan-m/ECCECC
ECC is a performance-optimization system (a harness) for coding agents: it plans before building, verifies changes with tests, reviews its own work from a fresh context, remembers what matters, and turns repeated wins into reusable skills. It works with Claude Code, Codex, Cursor, OpenCode and other agent harnesses.
- 4

linux
252.2Ktorvalds/linux · CThis is the Linux kernel itself - the core of any Linux operating system. It manages hardware and system resources and provides the fundamental services all other software runs on.
- 5

the-book-of-secret-knowledge
250.7Ktrimstray/the-book-of-secret-knowledgeA massive curated collection of lists, manuals, cheatsheets, blogs, hacks, one-liners and CLI/GUI/web tools that the author gathers from everyday sysadmin, DevOps and security work.
- 6

awesome-go
188.8Kavelino/awesome-go · GoA curated list of awesome Go frameworks, libraries, and software, organized by category.
- 7

ponytail
165.2KDietrichGebert/ponytail · JavaScriptPonytail is a skill for AI coding agents that channels the laziest senior dev in the room: the agent writes only what the task needs, on the belief that the best code is the code you never wrote.
- 8

free-for-dev
139.7Kripienaar/free-for-dev · HTMLA curated list of SaaS, PaaS, and IaaS offerings that have free tiers useful for DevOps engineers, sysadmins, and infrastructure developers.
- 9

gstack
136.7Kgarrytan/gstack · TypeScriptgstack is Garry Tan's personal Claude Code setup: a pack of 23 opinionated skills that act like a full engineering team (CEO, eng manager, designer, reviewer, QA, security officer, release engineer) inside Claude Code.
- 10

Awesome-Hacking
122.8KHack-with-Github/Awesome-HackingA massive index that links out to dozens of other awesome-lists covering nearly every security domain: android security, bug bounty, fuzzing, malware analysis, OSINT, reverse engineering, web hacking, and more.
- 11
v2rayN
118.4K2dust/v2rayN · C#v2rayN is a free, open-source GUI client for Windows, Linux and macOS that manages proxy connections using protocols like V2Ray, Xray, sing-box, Trojan, Shadowsocks and others.
- 12

awesome-mac
116.3Kjaywcjlove/awesome-mac · SwiftIt is a curated, categorized list of high-quality macOS software, covering everything from text editors and developer tools to design apps, utilities, and security tools.
- 13
deno
108.7Kdenoland/deno · RustDeno is a runtime for JavaScript, TypeScript, and WebAssembly that focuses on secure defaults and good developer experience. It's built on V8, Rust, and Tokio.
- 14

agent-skills
107.4Kaddyosmani/agent-skills · JavaScriptA collection of 25 production-grade engineering skills that encode senior-engineer workflows, quality gates, and best practices so AI coding agents follow them consistently across the whole development lifecycle.
- 15

nodebestpractices
105.7Kgoldbergyoni/nodebestpractices · DockerfileA curated, community-maintained list that summarizes the top Node.js best practices, style guides, and architectural tips, organized into chapters covering architecture, error handling, code style, testing, production readiness, security, performance, and Docker.
- 16

every-programmer-should-know
100.5Kmtdvio/every-programmer-should-knowA curated, highly opinionated collection of technical resources — articles, books, videos and papers — covering things every software developer should know, from algorithms and data structures to security, architecture and career advice.
- 17

localsend
94.6Klocalsend/localsend · DartLocalSend is a free, open-source app for securely sharing files and messages with nearby devices over your local network, without needing an internet connection - a cross-platform AirDrop alternative for Windows, macOS, Linux, Android and iOS.
- 18

bitcoin
90.4Kbitcoin/bitcoin · C++Bitcoin Core is the reference client for the Bitcoin peer-to-peer network: it connects to that network to download and fully validate every block and transaction. It also ships an optional wallet and graphical user interface.
- 19

ghidra
89.8KNationalSecurityAgency/ghidra · JavaGhidra is a software reverse engineering (SRE) framework created and maintained by the NSA's Research Directorate, used to disassemble, decompile, graph, and analyze compiled code.
- 20

syncthing
89.5Ksyncthing/syncthing · GoSyncthing is an open-source continuous file synchronization program that keeps files in sync between two or more computers over a peer-to-peer connection.
- 21
awesome-interview-questions
85KDopplerHQ/awesome-interview-questionsA curated list of lists of technical interview questions, covering dozens of languages, frameworks, databases, and topics like algorithms and system design.
- 22

cs-video-courses
83.7KDeveloper-Y/cs-video-coursesA curated list of university-level Computer Science courses that have publicly available video lectures, covering topics from intro programming to machine learning, security, robotics, and more.
- 23

PayloadsAllTheThings
81.8Kswisskyrepo/PayloadsAllTheThings · PythonA massive curated collection of payloads, bypass techniques, and exploitation methodology for web application security testing, pentesting, and CTF challenges.
- 24
caddy
78.1Kcaddyserver/caddy · GoCaddy is a fast, extensible web server written in Go that enables HTTPS automatically by default. It can act as an HTTP/1-2-3 server, reverse proxy, and general platform for running Go-based 'apps' (modules).
- 25
awesome-claude-skills
77.3KComposioHQ/awesome-claude-skills · PythonA comprehensive and curated list of 1000+ production-ready Claude Skills and Plugins for enhancing productivity across Claude.ai, Claude Code, and other coding agents like Codex, Cursor, Gemini CLI, and Antigravity.
- 26

ruflo
75.8Kruvnet/ruflo · TypeScriptRuflo is an agent meta-harness for Claude Code and Codex: it adds 100+ specialized agents, coordinated swarms, self-learning memory, and cross-machine federation on top of those coding agents so they can collaborate instead of running solo.
- 27
superset
75.2Kapache/superset · PythonApache Superset is a modern, enterprise-ready business intelligence web application for data exploration and visualization: build dashboards, charts, and query data with a built-in SQL editor.
- 28

Front-End-Checklist
74.5Kthedaviddias/Front-End-Checklist · MDXFront-End Checklist is an open-source front-end quality system that turns front-end best practices into a practical review workflow, usable by humans and AI agents via web, MCP server, or this README.
- 29

SecLists
74.2Kdanielmiessler/SecLists · PHPSecLists is a huge collection of ready-made wordlists for security testing: usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells and more, all gathered in one repository.
- 30
union
73.7Kunionlabs/union · RustUnion is a zero-knowledge bridging protocol that lets you pass messages, transfer assets and NFTs, and use DeFi across Cosmos chains and EVM chains like Ethereum, without relying on oracles, multi-signatures, or trusted third parties.
- 31

moby
72.2Kmoby/moby · GoMoby is Docker's open-source upstream project: a 'Lego set' of toolkit components (build tools, registry, orchestration, runtime) plus a framework for assembling them into custom container-based systems.
- 32

awesome-courses
71.9Kprakhar1989/awesome-coursesIt is a curated list of free, high-quality computer science courses from universities around the world, each one making its lecture materials, assignments, notes and readings available online.
- 33
vaultwarden
69.2Kdani-garcia/vaultwarden · RustVaultwarden is an unofficial, Rust-written server that implements the Bitwarden Client API, so you can run your own password-manager backend instead of using Bitwarden's official hosted service.
- 34

strix
69.1Kusestrix/strix · PythonStrix is an open-source tool that uses autonomous AI agents to pentest your application like real hackers: it runs your code dynamically, finds vulnerabilities, and proves them with working exploits instead of just flagging suspicious patterns.
- 35
uBlock
68.6Kgorhill/uBlock · JavaScriptuBlock Origin (uBO) is a free, open-source browser extension that blocks ads, trackers, coin miners, popups, anti-blockers, and malware sites in Chromium and Firefox.
- 36
v2rayNG
64.1K2dust/v2rayNG · Kotlinv2rayNG is an Android client for V2Ray that lets you connect through proxy servers using either the Xray core or the v2fly core, supporting protocols like VMess, VLESS, Trojan, Shadowsocks and SOCKS5.
- 37
pi-hole
61.3Kpi-hole/pi-hole · ShellPi-hole is a DNS sinkhole that blocks ads and trackers for every device on your network, without needing any software installed on the devices themselves.
- 38

mkcert
59.7KFiloSottile/mkcert · Gomkcert is a simple zero-config tool that creates locally-trusted TLS certificates for development, so your local HTTPS sites don't show browser warnings.
- 39

shadowsocks-windows
59.5Kshadowsocks/shadowsocks-windows · C#Shadowsocks-windows is a Windows desktop client for Shadowsocks, a SOCKS5/HTTP proxy protocol designed to circumvent internet censorship, written in C#.
- 40

dive-into-llms
56.8KLordog/dive-into-llms · Jupyter NotebookIt's a free Chinese-language tutorial series called 'Dive into LLMs' (《动手学大模型》) that teaches large language model concepts through hands-on coding exercises, built from Shanghai Jiao Tong University's NLP and AI-security course materials.
- 41

awesome-ios
53.6Kvsouza/awesome-ios · SwiftA curated list of awesome resources for the iOS ecosystem, covering both Objective-C and Swift projects across dozens of categories like analytics, networking, UI, architecture, and ARKit.
- 42

awesome-openclaw-skills
53.2KVoltAgent/awesome-openclaw-skillsThis is a curated awesome-list of 5,400+ community-built skills for OpenClaw, a locally-running AI assistant, sourced and filtered from OpenClaw's official public registry (ClawHub).
- 43
Docker-OSX
53Ksickcodes/Docker-OSX · ShellDocker-OSX lets you run a full macOS virtual machine inside a Docker container using KVM, giving near-native performance for security research, CI/CD, and development without owning a real Mac.
- 44

professional-programming
51.6Kcharlax/professional-programming · PythonIt's a curated collection of learning resources (articles, books, talks, papers) meant to make software engineers more well-rounded professionals, covering everything from algorithms to career growth to system architecture.
- 45

go-ethereum
51.4Kethereum/go-ethereum · GoGo-ethereum (geth) is the Go implementation of the Ethereum protocol — the main CLI client used to run a full Ethereum node, sync the blockchain, and expose JSON-RPC APIs to interact with the network.
- 46

CL4R1T4S
51.3Kelder-plinius/CL4R1T4SCL4R1T4S is a crowd-sourced archive of leaked/extracted system prompts, guidelines, and internal tool definitions from major AI products like ChatGPT, Claude, Gemini, Grok, Perplexity, Cursor, Lovable, and Replit, published for AI transparency.
- 47

jadx
51Kskylot/jadx · Javajadx is a Dex to Java decompiler: command line and GUI tools that produce Java source code from Android Dex and Apk files.
- 48

x64dbg
49.9Kx64dbg/x64dbg · C++x64dbg is an open-source user-mode debugger for Windows, built specifically for reverse engineering and malware analysis.
- 49

awesome-design-patterns
49.4KDovAmir/awesome-design-patternsA curated list of links to resources about software and architecture design patterns, covering everything from language-specific patterns to cloud, serverless, microservices, IoT, big data, ML, databases, DevOps, mobile, front-end and security.
- 50

shannon
49KKeygraphHQ/shannon · TypeScriptShannon is an autonomous AI pentester that analyzes your web application's source code, maps attack vectors, and then executes real exploits against the running app to prove vulnerabilities before they reach production — 'no exploit, no report'.
- 51

Projects
48Kkaran/ProjectsA curated list of practical programming project ideas, grouped by category, that anyone can solve in any programming language.
- 52
acme.sh
47.8Kacmesh-official/acme.sh · Shellacme.sh is a pure Unix shell script client for the ACME protocol that automatically issues, renews, and installs free SSL/TLS certificates from CAs like Let's Encrypt or ZeroSSL.
- 53

big-list-of-naughty-strings
47.7Kminimaxir/big-list-of-naughty-strings · PythonIt is a curated collection of strings with a high probability of breaking software when used as user input, meant to help QA testing of input validation.
- 54
open-code-review
47.5Kalibaba/open-code-review · GoAn AI-powered code review CLI born inside Alibaba: it reads Git diffs, sends changed files to a configurable LLM agent, and returns structured review comments with line-level precision.
- 55

okhttp
47.1Klysine-dev/okhttp · KotlinOkHttp is an efficient HTTP client for the JVM, Android, and GraalVM, handling HTTP/1.1, HTTP/2, websockets, and SSE with connection pooling and transparent GZIP.
- 56
copyparty
47.1K9001/copyparty · Pythoncopyparty is a portable, single-file server that turns almost any device into a full-featured file server, supporting resumable uploads/downloads over HTTP(S), WebDAV, SFTP, FTP(S), TFTP and SMB, with a built-in media player, thumbnails and search.
- 57
v2ray-core
46.9Kv2ray/v2ray-core · GoProject V (v2ray-core) is a set of network tools for building your own proxy network that secures your connections and helps you bypass network restrictions while protecting your privacy.
- 58

paperless-ngx
46.8Kpaperless-ngx/paperless-ngx · PythonPaperless-ngx is a self-hosted document management system that turns scanned physical documents into a searchable online archive, with OCR, indexing and archiving built in.
- 59

system-design
46.6Kkaranpratapsingh/system-designIt is a free course and ebook that teaches how to design large-scale systems and prepares readers for system design interviews.
- 60
milvus
46.4Kmilvus-io/milvus · GoMilvus is a high-performance, cloud-native vector database built to store and search embedding vectors at scale for AI applications like semantic search, RAG, and recommendation systems.
- 61
mitmproxy
45.7Kmitmproxy/mitmproxy · Pythonmitmproxy is an interactive, SSL/TLS-capable intercepting proxy for HTTP/1, HTTP/2, and WebSockets, used by penetration testers and developers to inspect and modify traffic. mitmdump is its CLI version, and mitmweb is a web-based interface.
- 62

CppCoreGuidelines
45.4Kisocpp/CppCoreGuidelines · CSSThe C++ Core Guidelines are a collaborative set of best-practice rules for writing modern C++ (C++11 and later), covering interfaces, resource management, memory management, and concurrency, with the goal of making code type-safe, leak-free, and fast.
- 63
hyperswitch
45.3Kjuspay/hyperswitch · RustHyperswitch is an open-source, composable payments platform that lets businesses route, retry, vault, and reconcile payments across 120+ payment processors like Stripe, Adyen, Braintree, and Worldpay, either self-hosted or as a SaaS.
- 64

headscale
44.7Kjuanfont/headscale · GoHeadscale is an open source, self-hosted implementation of the Tailscale control server, letting you run your own private Tailscale-compatible network instead of paying for Tailscale's hosted service.
- 65
curl
43.1Kcurl/curl · Ccurl is a command-line tool and library (libcurl) for transferring data to or from a server using URL syntax.
- 66
reverse-skill
42.4Kzhaoxuya520/reverse-skill · PowerShellIt is a skill pack that routes AI coding agents to the right reverse engineering, penetration testing, and security research methodology for a given task (APK, binary, JS, CTF, malware, etc.), checks which tools are installed, and runs a repeatable workflow instead of letting the agent guess commands.
- 67
Xray-core
42.2KXTLS/Xray-core · GoXray-core is the engine of 'Project X', a networking/proxy platform that implements protocols like VLESS, VMess, Trojan and Shadowsocks, with REALITY and XTLS for traffic obfuscation and censorship circumvention.
- 68

dubbo
41.6Kapache/dubbo · JavaApache Dubbo is an RPC and microservices framework — this repository is its Java implementation. It covers communication, service discovery, traffic management, observability, security, and tooling for building enterprise-grade microservices.
- 69

sniffnet
41.6KGyulyVGC/sniffnet · RustSniffnet is a cross-platform desktop app for monitoring your network traffic in real time, with a graphical interface instead of raw terminal output.
- 70
yarn
41.5Kyarnpkg/yarn · JavaScriptYarn 1.x is a fast, reliable and secure dependency manager for JavaScript projects — a command-line tool that installs your project's packages as an alternative to npm.
- 71

croc
40.6Kschollz/croc · Gocroc is a command-line tool that lets any two computers simply and securely transfer files and folders, using peer-to-peer transfer with a relay fallback and end-to-end encryption.
- 72

quivr
39.6KThe-Vibe-Company/quivr · GoQuivr is an open-source engine that turns your files and content streams into search and monitoring — a 'second brain' you can query, built around an opinionated RAG powered by generative AI.
- 73

metasploit-framework
39.2Krapid7/metasploit-framework · RubyMetasploit Framework is an open-source penetration testing framework written in Ruby — one of the best-known security toolkits on GitHub, with about 39,000 stars.
- 74

sing-box
38.9KSagerNet/sing-box · Gosing-box describes itself as 'the universal proxy platform' — a single Go program meant to run and configure various proxy protocols instead of needing separate tools for each one.
- 75

sqlmap
38.7Ksqlmapproject/sqlmap · Pythonsqlmap is an open-source penetration testing tool that automates detecting and exploiting SQL injection flaws and taking over the underlying database server.
- 76

trivy
38.5Kaquasecurity/trivy · GoTrivy is an all-in-one security scanner that finds vulnerabilities, misconfigurations, secrets, and software licenses across container images, filesystems, git repositories, VM images, and Kubernetes clusters.
- 77
istio
38.4Kistio/istio · GoIstio is an open-source service mesh that layers transparently onto existing distributed applications, giving you a uniform way to secure, connect, and monitor microservices with few or no code changes.
- 78

rufus
38Kpbatard/rufus · CRufus is a free utility for Windows that formats and creates bootable USB flash drives, used to make installers for Windows, Linux, FreeDOS and other bootable ISOs.
- 79

tailscale
37.7Ktailscale/tailscale · GoTailscale is a mesh VPN built on WireGuard that creates secure private networks between your devices with minimal configuration, adding 2FA/SSO login on top.
- 80
AdGuardHome
37.5KAdguardTeam/AdGuardHome · TypeScriptA free, open-source network-wide DNS server that blocks ads and trackers for every device on your home network: it re-routes tracking domains to a 'black hole', so no client-side software is needed on the devices themselves.
- 81

firecracker
37.4Kfirecracker-microvm/firecracker · RustFirecracker is an open-source virtualization technology for creating and managing secure, multi-tenant microVMs for container and function-based serverless workloads.
- 82
keycloak
37.4Kkeycloak/keycloak · JavaKeycloak is an open source Identity and Access Management solution that adds authentication and authorization to applications and services, so you do not need to build your own login, user storage, or permission logic.
- 83

interview_internal_reference
37.3K0voice/interview_internal_reference · PythonA curated collection of real technical interview questions and answers from major Chinese tech companies — Alibaba, Tencent, Baidu, Meituan, ByteDance and more — with analysis from expert interviewers.
- 84

1Panel
37.2K1Panel-dev/1Panel · Go1Panel is an open-source Linux server management panel and lightweight AI management platform: a web GUI that gives you one-stop control over servers, websites, apps and AI agents.
- 85

server
37.1Knextcloud/server · PHPNextcloud server is a self-hosted platform for storing, syncing, and sharing your files, contacts, calendars, and more, with hundreds of apps (Mail, Video Chat, etc.) to extend it.
- 86

awesome-docker
37.1Kveggiemonk/awesome-dockerA curated ('awesome list') index of Docker-related projects and resources: engines, image builders, registries, orchestration tools, networking/security tooling, desktop/terminal UIs and learning materials.
- 87

shadowsocks-android
36.8Kshadowsocks/shadowsocks-android · KotlinThis is the official Shadowsocks client app for Android, Chrome OS, and Android TV, letting you route your device's traffic through a Shadowsocks proxy server.
- 88

frigate
36.7Kblakeblackshear/frigate · PythonFrigate is a complete, local network video recorder (NVR) that performs realtime AI object detection on IP camera feeds, built specifically for tight integration with Home Assistant.
- 89

restic
36.6Krestic/restic · Gorestic is a command-line backup program that is fast, secure, and efficient, supporting Linux, macOS, Windows, FreeBSD, and OpenBSD.
- 90
bitchat
36.6Kpermissionlesstech/bitchat · SwiftBitChat is a decentralized peer-to-peer messaging app that uses Bluetooth mesh for offline, local chat and the Nostr protocol for internet-based global reach, with no accounts, phone numbers, or central servers.
- 91

vault
36.4Khashicorp/vault · GoVault is a tool for securely accessing secrets such as API keys, passwords, and certificates, giving you a unified interface with tight access control and detailed audit logging.
- 92

CyberChef
36.1Kgchq/CyberChef · JavaScriptCyberChef is a web app that bundles encoding, encryption, compression, hashing and other data-analysis operations ('cyber' operations) into a single drag-and-drop recipe builder that runs entirely in your browser.
- 93
bulletproof-react
36Kalan2207/bulletproof-react · TypeScriptA reference architecture and best-practices guide for building production-ready React applications, demonstrated through a sample app that shows how to structure, test, secure, and scale a real-world codebase.
- 94

filebrowser
35.9Kfilebrowser/filebrowser · GoFile Browser is a self-hosted file manager you point at a directory on your server, giving you a web interface to upload, delete, preview, and edit files inside it.
- 95

awesome-sysadmin
35.4Kawesome-foss/awesome-sysadminA curated list of free and open-source sysadmin tools, covering everything from backups and configuration management to monitoring, CI/CD, virtualization, and VPNs.
- 96
web-check
35.1Klissy93/web-check · TypeScriptWeb-Check is an open-source OSINT dashboard that lets you analyse any website: it pulls IP info, SSL chain, DNS records, cookies, headers, server location, and more into one report so you can understand its tech stack and security posture.
- 97

changedetection.io
35.1Kdgtlmoon/changedetection.io · Pythonchangedetection.io monitors websites for changes and sends you alerts when content updates, prices drop, items restock, or pages get defaced.
- 98

AnotherRedisDesktopManager
34.8Kqishibo/AnotherRedisDesktopManager · JavaScriptAnother Redis Desktop Manager (AnotherRedisDesktopManager/ARDM) is a GUI desktop client for managing and browsing Redis databases, built to be faster and more stable than other Redis GUI tools, especially with huge key sets.
- 99

Anthropic-Cybersecurity-Skills
34.6Kmukul975/Anthropic-Cybersecurity-Skills · PythonAn open-source library of 818 production-grade cybersecurity skills for AI agents, covering 34 security domains and mapped to six frameworks including MITRE ATT&CK and NIST CSF 2.0.
- 100

nginx-proxy-manager
34.4KNginxProxyManager/nginx-proxy-manager · TypeScriptNginx Proxy Manager is a pre-built Docker container that gives you a web admin interface to manage Nginx reverse proxy hosts, including free SSL certificates, without needing to know Nginx configuration.
Showing the 100 most-starred of 976. See every one in the catalog.
Related topics
Often tagged together