Skip to content
#

web-security

Star

Here are 4,087 public repositories matching this topic...

Language: All
Filter by language
All 4,087 Python 1,348 JavaScript 488 HTML 327 TypeScript 275 PHP 187 Go 137 Shell 102 Java 77 Rust 53 CSS 48
Sort: Most stars
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated
Mobile-Security-Framework-MobSF

MobSF / Mobile-Security-Framework-MobSF

Star 22.1k

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

rest static-analysis apk owasp dynamic-analysis web-security malware-analysis mobsf android-security mobile-security windows-mobile-security ios-security api-testing cwe devsecops runtime-security mstg masvs mastg
  • Updated Oct 29, 2026
  • Python
Claude-BugHunter

elementalsouls / Claude-BugHunter

Sponsor
Star 5.3k

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

bug-bounty application-security web-security pentesting bugbounty offensive-security ethical-hacking red-team bugcrowd hackerone security-tools claude ai-security anthropic claude-code claude-skills
  • Updated Oct 28, 2026
  • Python
DDoS-Ripper

palahsu / DDoS-Ripper

Star 3k

DDos Ripper a Distributable Denied-of-Service (DDOS) attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic

security protection ddos ddos-attacks sql-injection web-security denial-of-service hacking-tool linux-tools ddos-tool ddos-protection attack-defense ddos-attack-tools ddos-attack hacking-tools internet-traffic deface-website ddos-attack-tool ddos-ripper attack-server
  • Updated Jun 20, 2026
  • Python

colinlet / PHP-Interview-QA

Star 3k

系统性的 PHP 技术面试问答大全（面经）。涵盖 PHP8、MySQL、Redis、Nginx、系统设计、算法、Laravel 源码及高并发架构原理，助你斩获后端研发 Offer。PHP Interview Questions & Answers.

mysql nginx redis php laravel algorithm backend architecture data-structures swoole web-security interview-questions system-design php8 developer-roadmap php-interview
  • Updated Oct 27, 2026
  • TypeScript
Check-Risk-WAF

Check-Risk-WAF / Check-Risk-WAF

Star 1.6k

Check Risk WAF is an all-in-one Web Application Firewall with Anti-Bot and Anti-DDoS protection at L3, L4, and L7. Available on-premises or as SaaS, it protects web apps against OWASP Top 10 attacks, CWE vulnerabilities, botnets, and DoS/DDoS. Free and unlimited for everyone, forever for personal, non-commercial use.

security firewall rate-limiting http-proxy waf load-balancer owasp web-application reverse-proxy infosec web-security anti-bot web-application-firewall ip-blacklist anti-ddos security-tools websecurity application-gateway geo-blocking ip-filtering
  • Updated Oct 15, 2026

Add this topic to your repo

To associate your repository with the web-security topic, visit your repo's landing page and select "manage topics."

Learn more