NationalSecurityAgency / ghidra

Ghidra is an NSA-created software reverse engineering framework with disassembly, decompilation, graphing, and scripting for compiled code.

YunaiV / ruoyi-vue-pro

Chinese-language full-stack admin platform (Spring Boot + Vue) with RBAC, multi-tenancy, workflow, payments, mall, CRM/ERP modules, and WeChat mini-program support.

opentrap / opentrap

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

AbdurazaaqMohammed / MP-Manager

Dual pane Material Design file manager for Android focused on viewing and managing APK files.

conductor-oss / conductor

Conductor is an event driven agentic workflow engine providing durable and highly resilient execution engine for applications and AI Agents

cryptomator / cryptomator

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

ageerle / ruoyi-ai

Enterprise-grade AI agent framework with multi-provider LLM management, secure knowledge bases and high-precision RAG, visual workflow orchestration, and multi-agent coordination.

GrapheneOS / Auditor

Hardware-based attestation and intrusion detection app for Android. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

apache / shardingsphere

Empowering Data Intelligence with Distributed SQL for Sharding, Scalability, and Security Across All Databases.

zaproxy / zaproxy

The ZAP by Checkmarx Core project

Netflix / zuul

Zuul is a gateway service that provides dynamic routing, monitoring, resiliency, security, and more.

pig-mesh / pig

↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.

ikarus23 / MifareClassicTool

An Android NFC app for reading, writing, analyzing, etc. MIFARE Classic RFID tags.

DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Gedsh / InviZible

Android application for online privacy and security

Peergos / Peergos

A p2p, secure file storage, social network and application protocol

itext / itext-java

iText for Java represents the next level of SDKs for developers that want to take advantage of the benefits PDF can bring. Equipped with a better document engine, high and low-level programming capabilities and the ability to create, edit and enhance PDF documents, iText can be a boon to nearly every workflow.

OpenAEV-Platform / openaev

Open Adversarial Exposure Validation Platform

ReaJason / MemShellParty

一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率

akto-api-security / akto

Akto is the fastest growing AI Security platform for your teams to secure AI agents, MCPs, LLMs, Agent skills, Gen AI apps in your organization.

SonarSource / sonar-java

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

mateaix / mateclaw

🤖 MateClaw — Your second brain with Multi-Agent Orchestration, MCP Protocol, Skills & Memory, Dream, and Multi-Channel Support. Built on Spring AI Alibaba.

Igalia / wolvic

A fast and secure browser for standalone virtual-reality and augmented-reality headsets.

oversecured / ovaa

Oversecured Vulnerable Android App

KouShenhai / KCloud-Platform-IoT

KCloud-Platform-IoT（老寇IoT云平台）是一个企业级单体架构和微服务架构的IoT云平台。采用DDD(领域驱动设计)思想，基于Spring Boot 4.1.1、Spring Cloud 2025.1.3、Spring Cloud Alibaba 2025.1.0.0 最新版本开发的云服务多租户IoT平台，家人们，点个star！拜托啦~

yimindev / dati

Turn your database into secure, semantically rich MCP tools for agents.

redisson / redisson

Redisson: Valkey & Redis Java Client and Real-Time Data Platform. Sync/Async/RxJava/Reactive API. Over 50 Valkey and Redis based Java objects and services: Set, Multimap, SortedSet, Map, List, Queue, Deque, Semaphore, Lock, AtomicLong, Map Reduce, Bloom filter, Spring, Tomcat, Scheduler, JCache API, Hibernate, RPC, local cache..

oracle / graal

GraalVM compiles applications into native executables that start instantly, scale fast, and use fewer compute resources 🚀

APIJSON / APIJSON

🏆 Real-Time no-code, powerful and secure ORM 🚀 providing APIs and Docs without coding by Backend, and Frontend(Client) can customize response JSONs 🏆 实时 零代码、全功能、强安全 ORM 库 🚀 后端接口和文档零代码，前端(客户端) 定制返回 JSON 的数据和结构

spring-projects / spring-security

Spring Security

google / tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

Graylog2 / graylog2-server

Free and open log management

apache / shiro

Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management

Loophole-LLC / Bastillion

Bastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.

i2p / i2p.i2p

I2P is an anonymizing network, offering a simple layer that identity-sensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties.

pac4j / pac4j

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

find-sec-bugs / find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

sparrowwallet / sparrow

Desktop Bitcoin Wallet focused on security and privacy. Free and open source.

BroadleafCommerce / BroadleafCommerce

Broadleaf Commerce CE - an eCommerce framework based on Java and Spring

spring-projects / spring-security-samples

—

spring-guides / tut-spring-security-and-angular-js

Spring Security and Angular:: A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication.

mateaix / matecloud

🔥MateCloud是一款基于Spring Cloud Alibaba的微服务架构。目前已经整合Spring Boot 4.0.8、 SpringCloud 2025、Spring Cloud Alibaba 2025、Spring AI 2.0.1、Spring Security Oauth2、Feign、Dubbo、JetCache、RocketMQ等，支持多租户的低代码平台，Saas平台开发套件

aklivity / zilla

🦎 A lightweight, multi-protocol gateway for event-driven applications and AI agents. Expose and govern Kafka, MQTT, APIs, and MCP through one high-performance engine with shared routing, security, schema, and observability.

murraco / spring-boot-jwt

JWT auth service using Spring Boot, Spring Security and MySQL

gradle / gradle-profiler

A tool for gathering profiling and benchmarking information for Gradle builds

batfish / batfish

Batfish is a network configuration analysis tool that can find bugs and guarantee the correctness of (planned or current) network configurations. It enables network engineers to rapidly and safely evolve their network, without fear of outages or security breaches.

OWASP / SecurityShepherd

Web and mobile application security training platform

aliyun / aliyun-openapi-java-sdk

The Alibaba Cloud V1.0 SDK will soon enter the Basic Security Maintenance phase and is no longer recommended for use. V2.0 SDK is available here: https://github.com/aliyun/alibabacloud-java-sdk

google / conscrypt

Conscrypt is a Java Security Provider that implements parts of the Java Cryptography Extension and Java Secure Socket Extension.

LSPosed / DisableFlagSecure

—

hantsy / spring-reactive-sample

Spring Reactive playground

secure-software-engineering / FlowDroid

FlowDroid Static Data Flow Tracker

CodeIntelligenceTesting / jazzer

Coverage-guided, in-process fuzzing for the JVM

potato-security / PotatoTool

这款工具是一款功能强大的网络安全综合工具，旨在为安全从业者、红蓝对抗人员和网络安全爱好者提供全面的网络安全解决方案。它集成了多种实用功能，包括解密、分析、扫描、溯源等，为用户提供了便捷的操作界面和丰富的功能选择。This tool offers robust network security solutions for professionals and enthusiasts. With features like decryption, analysis, scanning, and traceability, it provides a user-friendly interface and diverse functionality.

javapackager / JavaPackager

Gradle/Maven plugin to package Java applications as native Windows, MacOS, or Linux executables and create installers for them.

casid / jte

Secure and speedy templates for Java and Kotlin.

steve-community / steve

SteVe - OCPP server implementation in Java. Your trusted open-source EV charging station management system since 2013. Used by CPOs, manufacturers and developers worldwide. Managed cloud →

apache / ofbiz-framework

Apache OFBiz is an open source product for the automation of enterprise processes. It includes framework components and business applications for ERP, CRM, E-Business/E-Commerce, Supply Chain Management and Manufacturing Resource Planning. OFBiz provides a foundation and starting point for reliable, secure and scalable enterprise solutions.

googlesamples / android-testdpc

Test DPC is a sample device policy controller for use with Android Enterprise. It gives developers the ability to see how their app will behave in a managed context such as device owner or within a managed profile. Users can set up a work profile, enable work apps, set applications restrictions, manage security polices, and much more. The app also serves as a implementation reference for other DPCs

google / tsunami-security-scanner-plugins

This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.