web-security

opentrap

+178

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

trhhubsd/ARTEX

+440

ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军

SafeLine

+176

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

Claude-BugHunter

+99

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

crowdsec

+95

Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.

Mobile-Security-Framework-MobSF

+53

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

bug-bounty-hunting-prompts

+70

Reusable prompts for a structured, evidence-first bug bounty hunting workflow

awesome-bugbounty-tools

+84

A curated list of various bug bounty tools

bunkerweb

+37

🛡️ Open-source and cloud-native Web Application Firewall (WAF)