Find public projects in our local index, with related guides and tools from MetaCyberGuru. Your search is not sent to GitHub.
Explore topic collections for selection checklists and useful search examples.
1,112 matching repositories.
5,477 indexed in total. Latest successful discovery check: 2026-11-08 09:40:22 UTC.
Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Owned by my cybersecurity company 👇
aicertificationcloud-engineeringcybercybersecuritycybersecurity-analystcybersecurity-certificationcybersecurity-certifications
Source: GitHub repository metadata.
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
code-analyzercode-stylecoding-standardsformatterlexerlinterparserphp
Source: GitHub repository metadata.
Cyber-investigation Analysis Standard Expression (CASE) Ontology
case-ontologycaseontologycriminal-justicedigital-forensicsincident-responseintelligenceinvestigationsjson-ld
Source: GitHub repository metadata.
CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.
ctidcyber-threat-intelligencecybersecurityincident-responsemalware-analysismitre-attackthreat-actorsthreat-informed-defense
Source: GitHub repository metadata.
A curated list of awesome libraries and resources about JSON Web Token (JWT), a standard JSON structure, compact, URL-safe means of representing properties (claims) to be transferred between two parties.
awesomeawesome-listbiscuitcybersecurityjsonwebtokenjwtjwt-authenticationpaseto
Source: GitHub repository metadata.
OpenID Connect, the authentication protocol and identity layer on top of OAuth 2.0 used in many SSO and adopted in many social logins (Apple, Facebook, Google, ...etc). Find this curated list of providers, services, libraries, and resources to adopt it and know more about existing specs.
authorizationawesomeawesome-listciamcybersecurityfapiiamidentity
Source: GitHub repository metadata.
A curated list of awesome providers, services and resources for Zanzibar, the global authorization system.
abacaccess-controlaclauthorizationawesomeawesome-listcybersecurityfga
Source: GitHub repository metadata.
FAME Automates Malware Evaluation
frameworkincident-responseinfosecmalwaremalware-analysismalware-research
Source: GitHub repository metadata.
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
alertsautomationcertcsirtcybersecurityfeedshandlingihap
Source: GitHub repository metadata.
A tool collection for filtering and visualizing logon events. Designed to help answering the "Cotton Eye Joe" question (Where did you come from where did you go) in Security Incidents and Threat Hunts
analysiscyber-crimedfirforensicsgraphincident-responseinvestigationsecurity
Source: GitHub repository metadata.
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
api-gatewayapplication-securityappsecblueteambruteforcecaptchacvecybersecurity
Source: GitHub repository metadata.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
appseccloudnativedevsecopsgolanghacktoberfestiacinfrastructure-as-codeopen-policy-agent
Source: GitHub repository metadata.
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
code-qualitycommand-line-toolhacktoberfestjavastatic-analysisstatic-code-analysis
Source: GitHub repository metadata.
FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
command-linefclfile-lessincident-responsemalwaremalware-analysismalware-detectionthreat-hunting
Source: GitHub repository metadata.
A repo full of secrets. This is designed to test SAST secret scanning tools.
application-securitydevsecopssastsecret-scanning
Source: GitHub repository metadata.
Learn cloud security by building it! An open-source homelab teaching Zero Trust, DevSecOps, IaC, and cloud architecture from the ground up.
awsazurecloud-computingcloud-securitycybersecuritydevsecopsdigitaloceandoppler
Source: GitHub repository metadata.
Platform Security Assessment Framework
firmwarefirmware-securityfirmware-toolssecuritysecurity-tools
Source: GitHub repository metadata.
AI-Powered Wordlist Generator & Target Recon Tool - Replaces CeWL + CUPP + trufflehog in a single Go binary
aicewlcrawlercybersecurityftpgollmpentest
Source: GitHub repository metadata.
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
appseccicdctfdevopsdevsecopsgitlabinfosecjenkins
Source: GitHub repository metadata.
List of API's for gathering information about phone numbers, addresses, domains etc
apiapi-restawesomeawesome-listcybersecurityinformation-gatheringosint
Source: GitHub repository metadata.
We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.