📈 GH Trending Explorer 🎲 Surprise me
MobSF / Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

★ 22k JavaScript 2d ago
epicweb-dev / epic-stack

This is a Full Stack app starter with the foundational things setup and configured for you to hit the ground running on your next EPIC idea.

★ 5.5k TypeScript 4d ago
find-sec-bugs / find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

★ 2.5k Java 1d ago
cweijan / vscode-office

Let VSCode support previewing PDF, Excel, Word and other formats, and add markdown WYSIWYG editor.

★ 1.7k TypeScript 4d ago
Altimis / Scweet

Scrape tweets, profiles, followers and following from Twitter/X, no API key needed. Python library with smart multi-account pooling, proxy support and async.

★ 1.7k Python 21d ago
Check-Risk-WAF / Check-Risk-WAF

Check Risk WAF is an all-in-one Web Application Firewall with Anti-Bot and Anti-DDoS protection at L3, L4, and L7. Available on-premises or as SaaS, it protects web apps against OWASP Top 10 attacks, CWE vulnerabilities, botnets, and DoS/DDoS. Free and unlimited for everyone, forever for personal, non-commercial use.

★ 996 5d ago
kac89 / vulnrepo

VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX, attachments, automatic changelog, stats, vulnerability management, bugbounty, local ai/llm, super fast pentest reporting!

★ 584 TypeScript 13d ago
ericwei97-cloud / gesture-synth

A camera-based musical instrument that transforms hand gestures into chords, melodies, and expressive synth controls using MediaPipe and Web Audio API.

★ 142 JavaScript 2mo ago
cwe88108 / free-new-desk-public

向 Windows 11 x64 的 TVBox / FongMi 风格桌面影音播放器。 软件本身不内置任何第三方影视源,影视内容由用户自行导入;本地音乐、NAS、SMB、WebDAV 也可以直接加入音乐库。

★ 112 TypeScript 28d ago
SyntaxMethod / CVE-2026-42978-PoC-Research

CVE-2026-42978 Windows Push Notifications (WpnService) Use-After-Free & Race Condition PoC research, diagnostic scanner, and security audit module for AI Security Tool.

★ 67 1mo ago
angusdevgo / Seep-Tool

CWE-602 客户端鉴权脆弱性白盒审计方法论与纵深防御加固研究框架

★ 45 18d ago
cwe88108 / BLBL-ZD

一个使用ai开发的B站安卓客户端,支持TV遥控器操作、平板触摸操作。

★ 38 1d ago
cnmoseman / htb-study-trackers

Study trackers, Obsidian prep vaults, practice boxes and resources for Hack The Box certs: CJCA, CPTS, CWES, CDSA, CWEE, CAPE, CWPE, COAE and CDEP. Each cert gets a day-by-day plan, a ready-made notes vault, a list of HTB Labs boxes to practice on, and every study resource in one place. Trackers work offline. Not affiliated with HTB.

★ 34 HTML today
dinosn / log4j-4255

End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfiltered deserialization → RCE) on Log4j 2.26.1 / JDK 17.