Showing 36 of 1287 projects
A comprehensive, curated collection of tools, research, and resources for Android application security analysis and penetration testing.
A PKI/TLS toolkit for signing, verifying, and bundling TLS certificates, available as a CLI tool and HTTP API server.
An all-in-one, optionally distributed, multi-architecture honeypot platform with 20+ honeypots, visualization via Elastic Stack, and live attack maps.
A runtime mobile exploration toolkit powered by Frida for security assessment of iOS and Android apps without jailbreak.
A curated list of tools and resources for digital forensics and incident response (DFIR) teams.
A curated list of tools and resources for digital forensics and incident response (DFIR) teams.
A Kubernetes controller and tool for encrypting Secrets into SealedSecrets that can be safely stored in Git.
A cloud native runtime security tool for Linux that detects abnormal behavior and security threats in real-time.
A Go implementation of JSON Web Tokens (JWT) for signing, verifying, parsing, and generating tokens.
A secure, cross-platform Git credential helper that provides authentication to GitHub, Azure DevOps, Bitbucket, and GitLab.
A tool for securely storing AWS credentials in your OS keystore and generating temporary credentials for development.
A lightweight multi-architecture disassembly framework for binary analysis and reverse engineering.
A static analysis tool that scans Go source code for security vulnerabilities by analyzing the AST and SSA representations.
An open-source implementation of the Matter standard, a unified IP-based connectivity protocol for secure and interoperable smart home devices.
A rapid development PHP framework using MVC and design patterns to build robust web applications quickly.
Enterprise-ready zero-trust access platform built on WireGuard®.
A static analysis tool for detecting security misconfigurations and flaws in Nginx configuration files.
A malicious traffic detection system that monitors network traffic for blacklisted threats and suspicious activities using public feeds and heuristics.
A simple OIDC provider that enables passkey-only authentication for self-hosted services.
A minimal authorization library for Ruby on Rails using plain Ruby classes and object-oriented design.
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
An open-source implementation of lightweight VMs that perform like containers but offer VM-level isolation and security.
A simple Swift wrapper for the iOS/macOS Keychain that provides an easy-to-use API for secure credential storage.
Bandit is a tool designed to find common security issues in Python code.
Free and open log management
Query APIs, cloud services, and code directly with SQL using a zero-ETL approach—no database required.
A pure Go library for loading, compiling, debugging, and attaching eBPF programs to Linux kernel hooks.
A native Node.js library for hashing passwords using the bcrypt algorithm with async support and security best practices.
An open-source multi-cloud security auditing tool that assesses cloud environment security posture via provider APIs.
A curated collection of interesting, funny, and concerning search queries for Shodan.io to find exposed devices and services.
A PHP library for creating, parsing, and validating JSON Web Tokens (JWT) and JSON Web Signatures (JWS).
An open-source, large-scale network packet capture, indexing, and analysis system for security and network monitoring.
An open-source, large-scale network packet capture, indexing, and analysis system with a web interface.
A static analysis security vulnerability scanner for Ruby on Rails applications.
A performant, incremental type checker for Python with integrated security analysis via Pysa.
A command-line password manager for teams, built as a drop-in replacement for pass with GPG encryption and git versioning.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.