📈 GH Trending Explorer 🎲 Surprise me

Search: web-application · AI hidden · clear

Check-Risk-WAF / Check-Risk-WAF

Check Risk WAF is an all-in-one Web Application Firewall with Anti-Bot and Anti-DDoS protection at L3, L4, and L7. Available on-premises or as SaaS, it protects web apps against OWASP Top 10 attacks, CWE vulnerabilities, botnets, and DoS/DDoS. Free and unlimited for everyone, forever for personal, non-commercial use.

▲ ~581/7d ★ 1.2k 7d ago
opentrap / opentrap

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

▲ 409/7d ★ 409 Java 1d ago
chaitin / SafeLine

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

▲ ~252/7d ★ 23k Go 1d ago
crowdsecurity / crowdsec

Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.

▲ ~72/7d ★ 15k Go 1d ago
corazawaf / coraza

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

▲ ~37/7d ★ 3.9k Go today
TryGhost / Ghost

Independent technology for modern publishing, memberships, subscriptions and newsletters.

▲ ~35/7d ★ 56k TypeScript today
bunkerity / bunkerweb

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

▲ ~33/7d ★ 11k Python today
pwa-builder / PWABuilder

The simplest way to create progressive web apps across platforms and devices. Start here. This repo is home to several projects in the PWABuilder family of tools.

▲ ~21/7d ★ 3.8k TypeScript today
projectsend / projectsend

Share files with your clients, from your own server. Free, open source (GPLv2), self-hosted — or use ProjectSend Cloud, the official hosted version run by the same team.

▲ ~9/7d ★ 2.0k PHP 1d ago
writefreely / writefreely

A clean, Markdown-based publishing platform made for writers. Write together and build a community.

▲ ~7/7d ★ 5.3k Go 21d ago
Athou / commafeed

Google Reader inspired self-hosted personal RSS reader.

▲ ~7/7d ★ 3.6k Java today
Safe3 / uusec-waf

Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

▲ ~5/7d ★ 1.7k Shell 3d ago
sassanix / Warracker

🛡️ Warracker is an open source, self-hostable warranty tracker to monitor expirations, store receipts, files. You own the data, your rules!

▲ ~5/7d ★ 1.5k JavaScript 1d ago
fabriziosalmi / caddy-waf

Caddy WAF (Regex Rules, IP and DNS filtering, Rate Limiting, GeoIP, Tor, Anomaly Detection)

▲ ~5/7d ★ 878 Go 6d ago
bottlepy / bottle

bottle.py is a fast and simple micro-framework for python web-applications.

▲ ~2/7d ★ 8.8k Python 13d ago
hanami / hanami

A flexible framework for maintainable Ruby apps

▲ ~2/7d ★ 6.4k Ruby today
owtf / owtf

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

▲ ~2/7d ★ 2.0k Python 3d ago
wallarm / gotestwaf

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

▲ ~2/7d ★ 1.8k Go 27d ago
eikek / sharry

Sharry is a self-hosted file sharing web application.

▲ ~2/7d ★ 1.4k Elm 7d ago
fgeek / pyfiscan

Free web-application vulnerability and version scanner

▲ ~2/7d ★ 576 Python 27d ago
LunarXuan / Pindo

Local-first fuse bead pattern generator|将图片与像素画转换为带编号、色号和用量统计的拼豆图纸

▲ ~2/7d ★ 450 TypeScript 4d ago
AhmadJeddi / SafeIP

A lightweight network security tool that verifies IP location, validates network safety, and prevents access to protected links when unexpected location changes are detected.

▲ ~2/7d ★ 35 JavaScript 1mo ago
cunzhangcrypto / fanwan

🍚 没得饭吃啷个办?先把饭碗儿摆出来嘛。一个有点土、有点好耍的开源在线饭碗儿,摆个碗、混口饭,顺便看看哪个兄弟伙最耿直。

▲ ~2/7d ★ 31 JavaScript 1mo ago
planety / prologue

Powerful and flexible web framework written in Nim

▲ ~1/7d ★ 1.4k Nim 🔥 1mo ago
nwjs / nw.js

Call all Node.js modules directly from DOM/WebWorker and enable a new way of writing applications with all Web technologies.

▲ ~0/7d ★ 41k JavaScript 1d ago
vaadin / framework

Vaadin 6, 7, 8 is a Java framework for modern Java web applications.

▲ ~0/7d ★ 1.8k Java 9d ago
ADD-SP / ngx_waf

Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块

▲ ~0/7d ★ 1.6k C 27d ago
fulcrologic / fulcro

A library for development of single-page full-stack web applications in clj/cljs

▲ ~0/7d ★ 1.6k Clojure 25d ago
givanz / Vvveb

Powerful and easy to use cms to build websites, blogs or ecommerce stores.

▲ ~0/7d ★ 1.2k HTML 5d ago
error311 / FileRise

🗂️ FileRise – lightweight, self-hosted file manager & storage hub with granular ACLs, resumable uploads, encrypted folders, WebDAV & SSO. Fully Docker / Unraid compatible.

▲ ~0/7d ★ 1.0k JavaScript 1d ago
structr / structr

ATTENTION: This repository is a clone of https://gitlab.structr.com/structr/structr. All development/issue tracking has moved there. | Structr is an integrated open-source low-code development and runtime environment that uses a graph database (Neo4j).

▲ ~0/7d ★ 828 Java 11d ago
vaadin / flow

Vaadin Flow is a Java framework binding Vaadin web components to Java. This is part of Vaadin 10+.

▲ ~0/7d ★ 758 Java today
ZishanAdThandar / pentest

Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.

▲ ~0/7d ★ 748 PHP 7d ago
consulo / consulo

Platform repository of Consulo. Plugins implementation hold in their repositories

▲ ~0/7d ★ 709 Java today
TotallyInformation / node-red-contrib-uibuilder

Easily create data-driven web UI's for Node-RED. Single- & Multi-page. Multiple UI's. Work with existing web development workflows or mix and match with no-code/low-code features.

▲ ~0/7d ★ 529 JavaScript 2d ago
aws-amplify / amplify-hosting

AWS Amplify Hosting provides a Git-based workflow for deploying and hosting fullstack serverless web applications.

▲ ~0/7d ★ 479 Dockerfile 🔥 2y ago
DeathShotXD / Comment2Shell

Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker

▲ ~0/7d ★ 64 Python 17d ago
15H4NT / Grade-Prophet

AI Study Coach 2026: Smart Exam Grade Predictor and Learning Planner

▲ ~0/7d ★ 56 HTML today
CodeByPinar / riskops

BT ve siber güvenlik risk yönetimi platformu — risk envanteri, 5×5 değerlendirme, aksiyon takibi ve kurumsal raporlama. PHP 8.3 + MariaDB, framework ve CDN kullanmadan.

▲ ~0/7d ★ 34 PHP 1mo ago
armourinfosec / Offensive-Web-Application-Security

A lab-driven course on breaking web applications and explaining how to fix them — 491 notes, 36 reproducible labs, mapped to OWASP WSTG and the PortSwigger Top 10 Web Hacking Techniques.

▲ ~0/7d ★ 33 1mo ago
vincenzo-afk / Developer-OS

Interactive Windows 11-inspired developer portfolio for Bharani Kumar S, built as a desktop-style web experience with verified projects, live data, and a grounded assistant.

▲ ~0/7d ★ 26 TypeScript 1mo ago
vincenzo-afk / MAYA

A private AI companion web app for emotionally aware chat, voice notes, memories, shared activities, and gentle continuity.

▲ ~0/7d ★ 26 TypeScript 1mo ago
tooladda-online / tic-tac-toe

Tic Tac Toe — Use Tic Tac Toe free on ToolAdda — quick, accurate, and browser-based. Free on ToolAdda.online.

▲ ~0/7d ★ 25 1mo ago
Piwigo / Piwigo

Manage your photos with Piwigo, a full featured open source photo gallery application for the web. Star us on Github! More than 200 plugins and themes available. Join us and contribute!

▲ ~-2/7d ★ 3.9k PHP 1d ago
codingo / NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

▲ ~-2/7d ★ 3.4k Python 10d ago
qcadoo / mes

qcadoo MES - friendly web manufacturing software

▲ ~-2/7d ★ 945 PLpgSQL 1d ago
OWASP / OWASP-VWAD

:warning: This repo is no longer in use. Please refer to https://vwad.owasp.org

▲ ~-2/7d ★ 881 29d ago
divinelabio / Aegis

Next-Gen Selfhosted Web Application Firewall (WAF) & Edge Reverse Proxy built in Go. Real-time threat defense, L7 traffic control, and unified admin console.

▲ ~-2/7d ★ 46 TypeScript 20d ago
agents-universe / agents-universe

不是问答机器人,而是能真正干活的数字分身。共享智能体,共享项目上下文,让项目所有成员一起协同工作。同时智能体会像人一样通过资料或者工作抽象和总结经验到项目上下文中

▲ ~-12/7d ★ 692 Python 2d ago
bountyyfi / lonkero

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

★ 1.1k Rust today
eigenpal / docx-editor

Open-source WYSIWYG .docx editor library for React and Vue with canonical OOXML, tracked changes, and real-time collaboration. Agent-ready.

★ 503 TypeScript today

Load more →