Best Open Source security Libraries

A curated list of the most popular GitHub repositories tagged with security. Select any project to visualize its architecture and dive into the codebase using RepoMind's AI engine.

#1trimstray/the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

207,179

Analyze Code

#2Hack-with-Github/Awesome-Hacking

A collection of various awesome lists for hackers, pentesters and security researchers

107,065

Analyze Code

#3swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

75,395Python

Analyze Code

#4Developer-Y/cs-video-courses

List of Computer Science courses with video lectures.

74,369

Analyze Code

#5caddyserver/caddy

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

70,249Go

Analyze Code

#6x64dbg/x64dbg

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

47,770C++

Analyze Code

#7mitmproxy/mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

42,349Python

Analyze Code

#8QuivrHQ/quivr

Opiniated RAG for integrating GenAI in your apps 🧠 Focus on your product rather than the RAG. Easy integration in existing products with customisation! Any LLM: GPT4, Groq, Llama. Any Vectorstore: PGVector, Faiss. Any Files. Anyway you want.

38,947Python

Analyze Code

#9GyulyVGC/sniffnet

Comfortably monitor your Internet traffic 🕵️‍♂️

32,816Rust

Analyze Code

#10aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

32,160Go

Analyze Code

#11Lissy93/web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

32,069TypeScript

Analyze Code

#12OWASP/CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

31,390Python

Analyze Code

#13trailofbits/algo

Set up a personal VPN in the cloud

30,347Python

Analyze Code

#14StevenBlack/hosts

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

29,865Python

Analyze Code

#15nginx/nginx

The official NGINX Open Source repository.

29,470C

Analyze Code

#16digitalocean/nginxconfig.io

⚙️ NGINX config generator on steroids 💉

28,315JavaScript

Analyze Code

#17hwdsl2/setup-ipsec-vpn

Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2

27,387Shell

Analyze Code

#18projectdiscovery/nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

27,127Go

Analyze Code

#19OpenZeppelin/openzeppelin-contracts

OpenZeppelin Contracts is a library for secure smart contract development.

26,991Solidity

Analyze Code

#20authelia/authelia

The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

26,811Go

Analyze Code

#21community-scripts/ProxmoxVE

Proxmox VE Helper-Scripts (Community Edition)

26,342Shell

Analyze Code

#22keepassxreboot/keepassxc

KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.

25,922C++

Analyze Code

#23Infisical/infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

25,024TypeScript

Analyze Code

#24gitleaks/gitleaks

Find secrets with Gitleaks 🔑

25,020Go

Analyze Code

#25trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

24,636Go

Analyze Code

#26imthenachoman/How-To-Secure-A-Linux-Server

An evolving how-to guide for securing a Linux server.

24,584

Analyze Code

#27cilium/cilium

eBPF-based Networking, Security, and Observability

23,820Go

Analyze Code

#28shieldfy/API-Security-Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

23,171

Analyze Code

#29radareorg/radare2

UNIX-like reverse engineering framework and command-line toolset

23,127C

Analyze Code

#30osquery/osquery

SQL powered operating system instrumentation, monitoring, and analytics.

23,113C++

Analyze Code

#31slimtoolkit/slim

Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)

22,977Go

Analyze Code

#32drduh/macOS-Security-and-Privacy-Guide

Community guide to securing and improving privacy on macOS.

22,496

Analyze Code

#33matomo-org/matomo

Empowering People Ethically 🚀 — Matomo is hiring! Join us → https://matomo.org/jobs Matomo is the leading open-source alternative to Google Analytics, giving you complete control and built-in privacy. Easily collect, visualise, and analyse data from websites & apps. Star us on GitHub ⭐️ – Pull Requests welcome!

21,288PHP

Analyze Code