The Security Toolkit: Seven Open-Source Projects for Finding, Fixing, and Blocking Threats
From vulnerability scanners that slot into CI to the intercepting proxy every pentester keeps open, these are the security projects on GitPalace that practitioners actually reach for. The list spans offensive testing, supply-chain scanning, and network-level privacy protection.
Living article: rankings and health notes are re-checked against GitHub and community data. Ratings are GitPalace community ratings; stars are GitHub stars.
Trivy is an all-in-one security scanner that inspects container images, filesystems, Git repositories, Kubernetes clusters, and cloud configurations for known vulnerabilities, misconfigurations, exposed secrets, and license issues, and can emit an SBOM along the way. It's aimed at platform and DevOps teams who want a single tool in their CI pipeline rather than a patchwork of scanners. A single static binary with no database to install makes it easy to adopt.
Nuclei is a template-driven vulnerability scanner where every check is a readable YAML file, and a large community-maintained template library covers CVEs, misconfigurations, exposed panels, and default credentials. It's built for bug bounty hunters, red teams, and appsec engineers who want fast, repeatable scanning across many hosts. Writing your own templates for organization-specific checks is straightforward.
mitmproxy is an interactive, TLS-capable intercepting proxy for HTTP/1, HTTP/2, and WebSockets, available as a console UI, a web interface, and a tcpdump-style command-line tool. Penetration testers use it to inspect and modify traffic between clients and servers, while developers use it to debug APIs and mobile apps. A Python scripting API lets you automate rewriting, replaying, and logging of requests.
sqlmap automates the detection and exploitation of SQL injection flaws, from fingerprinting the backend database to extracting data and, where possible, reaching the underlying filesystem or operating system. It's a long-standing staple for penetration testers and CTF players who need to confirm and demonstrate the impact of an injection point. Its detection engine supports a wide range of database engines and injection techniques.
PayloadsAllTheThings is a curated reference of payloads, bypass techniques, and methodology notes for web application security testing, organized by vulnerability class. It's the reference tab that pentesters, bug bounty hunters, and CTF players keep open while working through a target. Each section pairs practical payloads with links to deeper reading and tooling.
AdGuard Home is a self-hosted DNS server that blocks ads and trackers for every device on your network, with support for encrypted DNS upstreams and per-client rules. It's for home users and small teams who want network-wide privacy protection without installing software on each device. A clean web dashboard shows query logs and lets you tune blocklists.
The OWASP Cheat Sheet Series is a collection of concise, practical security guidance for developers, covering topics like authentication, session management, input validation, and cryptographic storage. It's written for builders who need actionable defaults rather than exhaustive theory. The sheets are maintained by the OWASP community and published as a browsable site.