Security GitHub Repositories (2026) · Open Source Tools

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

Reverse engineer anything with agents, from app behavior down to native binaries.

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

A WiFi security auditing software

Get Android app updates straight from the source.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Free Windows, Mac and Linux cleaner, scanner, and more.

Open-source AI-powered offensive security harness for automated penetration testing.

A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.

🕵️‍♂️ All-in-one OSINT tool for analysing any website

The cross-harness, self-improving memory layer for AI agents. Join our community: https://discord.com/invite/zdNChS2fBu

agent runtime security - zero trust, zero setup, zero latency agent sandboxing

Free and Open Source Reverse Engineering Platform powered by rizin

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Comfortably monitor your network traffic 🕵️‍♂️

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com

A vulnerability scanner for container images and filesystems

End-to-end encrypted notes, tasks, files, passwords, journal and bookmarks. Keyed by a 12-word BIP-39 phrase: no email, no password, no account to leak. The full client source for web, desktop and mobile is published, along with the encryption (XChaCha20-Poly1305, HKDF-SHA256, Ed25519) and the threat model, so the privacy claims are falsifiable.