DuarteSantos8 / openGym
Self-hosted gym & body-weight tracker — plan routines, log workouts (supersets, warm-ups, cardio), see which muscles are trained, fatigued or detrained, import from FitNotes/Strong/Hevy, passkey login. Your data, your server.
opentrap / opentrap
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
TryGhost / Ghost
Independent technology for modern publishing, memberships, subscriptions and newsletters.
nwjs / nw.js
Call all Node.js modules directly from DOM/WebWorker and enable a new way of writing applications with all Web technologies.
remix-run / remix
The fully-stacked web framework
chaitin / SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
bunkerity / bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
bottlepy / bottle
bottle.py is a fast and simple micro-framework for python web-applications.
hanami / hanami
A flexible framework for maintainable Ruby apps
writefreely / writefreely
A clean, Markdown-based publishing platform made for writers. Write together and build a community.
hledgerorg / hledger
Robust, fast, intuitive plain text accounting tool with CLI, TUI and web interfaces.
corazawaf / coraza
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
Piwigo / Piwigo
Manage your photos with Piwigo, a full featured open source photo gallery application for the web. Star us on Github! More than 200 plugins and themes available. Join us and contribute!
pwa-builder / PWABuilder
The simplest way to create progressive web apps across platforms and devices. Start here. This repo is home to several projects in the PWABuilder family of tools.
Athou / commafeed
Google Reader inspired self-hosted personal RSS reader.
codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
projectsend / projectsend
Share files with your clients, from your own server. Free, open source (GPLv2), self-hosted — or use ProjectSend Cloud, the official hosted version run by the same team.
owtf / owtf
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
wallarm / gotestwaf
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
vaadin / framework
Vaadin 6, 7, 8 is a Java framework for modern Java web applications.
Safe3 / uusec-waf
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
ADD-SP / ngx_waf
Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块
fulcrologic / fulcro
A library for development of single-page full-stack web applications in clj/cljs
sassanix / Warracker
🛡️ Warracker is an open source, self-hostable warranty tracker to monitor expirations, store receipts, files. You own the data, your rules!
planety / prologue
Powerful and flexible web framework written in Nim
eikek / sharry
Sharry is a self-hosted file sharing web application.
givanz / Vvveb
Powerful and easy to use cms to build websites, blogs or ecommerce stores.
error311 / FileRise
🗂️ FileRise – lightweight, self-hosted file manager & storage hub with granular ACLs, resumable uploads, encrypted folders, WebDAV & SSO. Fully Docker / Unraid compatible.
oroinc / crm-application
OroCRM - an open-source Customer Relationship Management application.
Check-Risk-WAF / Check-Risk-WAF
Check Risk WAF is an all-in-one Web Application Firewall with Anti-Bot and Anti-DDoS protection at L3, L4, and L7. Available on-premises or as SaaS, it protects web apps against OWASP Top 10 attacks, CWE vulnerabilities, botnets, and DoS/DDoS. Free and unlimited for everyone, forever for personal, non-commercial use.
qcadoo / mes
qcadoo MES - friendly web manufacturing software
OWASP / OWASP-VWAD
:warning: This repo is no longer in use. Please refer to https://vwad.owasp.org
fabriziosalmi / caddy-waf
Caddy WAF (Regex Rules, IP and DNS filtering, Rate Limiting, GeoIP, Tor, Anomaly Detection)
structr / structr
ATTENTION: This repository is a clone of https://gitlab.structr.com/structr/structr. All development/issue tracking has moved there. | Structr is an integrated open-source low-code development and runtime environment that uses a graph database (Neo4j).
vaadin / flow
Vaadin Flow is a Java framework binding Vaadin web components to Java. This is part of Vaadin 10+.
ZishanAdThandar / pentest
Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.
tempesta-tech / tempesta
Web application acceleration, advanced DDoS protection and web security
consulo / consulo
Platform repository of Consulo. Plugins implementation hold in their repositories
agents-universe / agents-universe
不是问答机器人，而是能真正干活的数字分身。共享智能体，共享项目上下文，让项目所有成员一起协同工作。同时智能体会像人一样通过资料或者工作抽象和总结经验到项目上下文中
DoS0x99 / cyber-security-books
A collection of FREE cyber security books
leomoon-studios / wiki-go
A modern, feature-rich, databaseless flat-file wiki platform built with Go.
edelstone / tints-and-shades
🌈 Deterministic tints and shades from a given hex color.
fgeek / pyfiscan
Free web-application vulnerability and version scanner
TotallyInformation / node-red-contrib-uibuilder
Easily create data-driven web UI's for Node-RED. Single- & Multi-page. Multiple UI's. Work with existing web development workflows or mix and match with no-code/low-code features.
aws-amplify / amplify-hosting
AWS Amplify Hosting provides a Git-based workflow for deploying and hosting fullstack serverless web applications.
LunarXuan / Pindo
Local-first fuse bead pattern generator｜将图片与像素画转换为带编号、色号和用量统计的拼豆图纸
DeathShotXD / Comment2Shell
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
15H4NT / Grade-Prophet
AI Study Coach 2026: Smart Exam Grade Predictor and Learning Planner
sngubeni287 / grade-oracle-forecast
ML Grade Predictor 2026: AI Exam Score Forecaster & Student Success Analyzer
divinelabio / Aegis
Next-Gen Selfhosted Web Application Firewall (WAF) & Edge Reverse Proxy built in Go. Real-time threat defense, L7 traffic control, and unified admin console.
AhmadJeddi / SafeIP
A lightweight network security tool that verifies IP location, validates network safety, and prevents access to protected links when unexpected location changes are detected.
CodeByPinar / riskops
BT ve siber güvenlik risk yönetimi platformu — risk envanteri, 5×5 değerlendirme, aksiyon takibi ve kurumsal raporlama. PHP 8.3 + MariaDB, framework ve CDN kullanmadan.
armourinfosec / Offensive-Web-Application-Security
A lab-driven course on breaking web applications and explaining how to fix them — 491 notes, 36 reproducible labs, mapped to OWASP WSTG and the PortSwigger Top 10 Web Hacking Techniques.
cunzhangcrypto / fanwan
🍚 没得饭吃啷个办？先把饭碗儿摆出来嘛。一个有点土、有点好耍的开源在线饭碗儿，摆个碗、混口饭，顺便看看哪个兄弟伙最耿直。
vincenzo-afk / Developer-OS
Interactive Windows 11-inspired developer portfolio for Bharani Kumar S, built as a desktop-style web experience with verified projects, live data, and a grounded assistant.
vincenzo-afk / MAYA
A private AI companion web app for emotionally aware chat, voice notes, memories, shared activities, and gentle continuity.
tooladda-online / tic-tac-toe
Tic Tac Toe — Use Tic Tac Toe free on ToolAdda — quick, accurate, and browser-based. Free on ToolAdda.online.