feed · watching · stats · help with your tokens
AI & LLMAgents & MCPSelf-hostedNetworkingSecurityDevOps & cloudData & databasesWebMobileTerminalDeveloper toolsLearningMusic & mediaHome & IoT
PythonTypeScriptJavaScriptGoRustCC++JavaC#SwiftKotlinPHPRubyShellHTMLZig
- caddyserver/caddy
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
- rclone/rclone
"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files
- The-Vibe-Company/quivr
An open-source engine that turns continuous content streams into search and monitoring. Durable ingestion, hybrid search, alerts, and plugins for formats, models and business rules.
- aquasecurity/trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
- vxcontrol/pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- projectdiscovery/nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- gitleaks/gitleaks
Find secrets with Gitleaks 🔑
- authelia/authelia
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
- trufflesecurity/trufflehog
Find, verify, and analyze leaked credentials
- cilium/cilium
eBPF-based Networking, Security, and Observability
- TecharoHQ/anubis
Weighs the soul of incoming HTTP requests to stop AI crawlers
- getsops/sops
Simple and flexible tool for managing secrets
- slimtoolkit/slim
Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
- chaitin/SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
- twpayne/chezmoi
Manage your dotfiles across multiple diverse machines, securely.
- gravitational/teleport
The easiest, and most secure way to access and protect all of your infrastructure.
- bettercap/bettercap
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
- ory/hydra
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
- ffuf/ffuf
Fast web fuzzer written in Go
- gotify/server
A simple server for sending and receiving messages in real-time per WebSocket. (Includes a sleek web-ui)
- owasp-amass/amass
In-depth attack surface mapping and asset discovery
- crowdsecurity/crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
- txthinking/brook
A cross-platform programmable network tool
- shadow1ng/fscan
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
- projectdiscovery/subfinder
Fast passive subdomain enumeration tool.
- bytebase/bytebase
Database governance built for humans and agents — controlling changes and access across every major database.
- moonD4rk/HackBrowserData
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
- kopia/kopia
Cross-platform backup tool for Windows, macOS & Linux with fast, incremental backups, client-side end-to-end encryption, compression and data deduplication. CLI and GUI included.
- gophish/gophish
Open-Source Phishing Toolkit
- OJ/gobuster
Directory/File, DNS and VHost busting tool written in Go