Search awesome repositories

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Comfortably monitor your Internet traffic 🕵️‍♂️

Opiniated RAG for integrating GenAI in your apps 🧠 Focus on your product rather than the RAG. Easy integration in existing products with customisation! Any LLM: GPT4, Groq, Llama. Any Vectorstore: PGVector, Faiss. Any Files. Anyway you want.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

🕵️‍♂️ All-in-one OSINT tool for analysing any website

The official NGINX Open Source repository.

Set up a personal VPN in the cloud

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Infisical is the open-source platform for secrets, certificates, and privileged access management.

The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.

⚙️ NGINX config generator on steroids 💉

Find, verify, and analyze leaked credentials

UNIX-like reverse engineering framework and command-line toolset

SQL powered operating system instrumentation, monitoring, and analytics.

Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)

Checklist of the most important security countermeasures when designing, testing, and releasing your API

Simple and flexible tool for managing secrets

The authentication glue you need.

Community guide to securing and improving privacy on macOS.

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

Empowering People Ethically 🚀 — Matomo is hiring! Join us → https://matomo.org/jobs Matomo is the leading open-source alternative to Google Analytics, giving you complete control and built-in privacy. Easily collect, visualise, and analyse data from websites & apps. Star us on GitHub ⭐️ – Pull Requests welcome!

Weighs the soul of incoming HTTP requests to stop AI crawlers

The easiest, and most secure way to access and protect all of your infrastructure.

🤖 The Modern Port Scanner 🤖