Open-source repositories gaining traction right now.
27 repositories

uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean.

Sponsor Star qeeqbox / social-analyzer API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

Star projectdiscovery / nuclei-templates Community curated list of templates for the nuclei engine to find security vulnerabilities.

Star thalesgroup-cert / Watcher Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.

Automatic Exploit Generation with LLMs


Secure Wireless Data-Transfer over BLE and USB for Passwords, Pentesting and Media Control.

Secure DNS over HTTPS Worker is a Cloudflare Worker that provides a custom DNS over HTTPS (DoH) endpoint along with a simple, educational web page for users. It allows users to securely encrypt their DNS queries using their own domain, protecting privacy and bypassing ISP-level monitoring.

A monitoring hub that watches popular open-source repositories and uses AI to detect when commits are patching security vulnerabilities - often before a CVE is even assigned. Findings are published to a retro-themed website with an RSS feed.

IP Security Analyzer: A pro-grade Cloudflare Worker for forensic intelligence. Detects VPNs, Proxies & Hosting IPs via heuristic ASN auditing. Includes Security Scoring, WebRTC Leak Test, ISP classification, and Geo-location. Built with a modern Bento UI and live terminal logs. Powerful, open-source and real-time network forensic tool.

URILoot is a browser extension designed for Bug Bounty Hunters and Pentesters. Makes fetching uris easy from various sources.

Open-source security dashboard using Have I Been Pwned and multiple security APIs

A Java based password strength checker that validates input using predefined security constraints

Collection of extracted skills from popular AI agents product like Kimi, GLM & Minimax

Complete security layer for OpenClaw - CLI Scanner + Live Dashboard. Secrets detection, config hardening, prompt injection scanning, MCP server auditing. Zero telemetry.

Firmware reverse engineering and vulnerability research on Xiaomi Redmi Watch 5 Active (SiFli SF32LB551)

Professional Open Source Command & Control Framework


Some of the interesting payloads out there, use them for testing your web sites or your web applications

DefVault detects and stops phishing, malware, and RAT attacks before credentials are exposed, protecting both enterprise infrastructure and individual users while preserving usability.


Network Security Toolkit - IP info, geolocation, speed test, breach check, DNS security

Automated scraper that extracts and decodes hidden Spotify TOTP secrets (nuances) with real-time cryptographic analysis

TOLONG JANGAN LUPA NAKAN

Get premium features for free (EDUCATIONAL USE ONLY)

Share secrets via encrypted one-time links. E2E encrypted in the browser, server never sees plaintext. Optional EVM payment to unlock.

Client-side document notarization using Merkle trees, SHA-256 proofs, and Ethereum wallet signatures
Paste a github.com URL. Submissions are reviewed before they are tracked.