Repos
GitHub projects worth knowing, with what each one is for and how to try it. Credited to their owners.
Level
- Beginner 0
- Intermediate 0
- Advanced 0
What kind of help
- Guided project 0
- Explains an idea 0
- Step by step 0
- Cheat sheet 0
- Fixes an error 0
What do these mean?
- Beginner
- You are new to this topic.
- Intermediate
- You use it, and want to get better.
- Advanced
- You know it well and need the details.
- Guided project
- Build something small from start to finish, step by step.
- Explains an idea
- Plain words on how something works and why.
- Step by step
- Numbered steps to get one task done.
- Cheat sheet
- Commands and options in a table, to look up fast.
- Fixes an error
- An error message, what it means, and how to solve it.
Area
Clear filters
69 entries match these filters
- 0453 step-ca: run your own certificate authority for internal TLS and SSH step-ca from Smallstep is an open source certificate authority that issues TLS and SSH certificates for your own infrastructure, with ACME support… Linux, macOS, Windows Repo Linux administration · TLS & certificates 15 Oct 2026
- 0434 Wazuh: an open source security platform with agents, SIEM and XDR Wazuh installs a small agent on each server and sends its logs, file changes and package lists to a central manager that… Linux, macOS, Windows Repo Detection & threat hunting · Logs 15 Oct 2026
- 0437 Zeek: network security monitoring that turns traffic into logs Zeek, formerly Bro, watches network traffic and writes structured logs of every connection, DNS query, HTTP request and certificate it sees. Analysts… Linux, macOS Repo Detection & threat hunting · Logs 15 Oct 2026
- 0439 osquery: query your endpoints like a SQL database osquery exposes the state of a Linux, macOS or Windows machine as SQL tables, so you can ask which processes are listening,… Linux, macOS, Windows Repo Detection & threat hunting · Prometheus & Grafana 15 Oct 2026
- 0440 pySigma: the Python library that converts Sigma rules into queries pySigma parses Sigma detection rules and, with backend plugins, converts them into native queries for Splunk, Elastic, Loki, Sentinel and other log… Any system Repo Detection & threat hunting · Logs 15 Oct 2026
- 0441 Atomic Red Team: small tests that check whether your detections fire Atomic Red Team is a library of tiny, documented tests, each reproducing one attacker technique from MITRE ATT&CK, that defenders run in… Linux, macOS, Windows Repo Detection & threat hunting · Server hardening 15 Oct 2026
- 0444 Trivy: scan container images, file systems and infrastructure code for known problems Trivy is an open source scanner from Aqua Security that finds known vulnerabilities, misconfigurations and exposed secrets in container images, project directories,… Linux, macOS, Windows Repo Images & registries · Security testing & CTF 15 Oct 2026
- 0445 Gitleaks: find secrets that were committed to a Git repository Gitleaks scans Git history, working trees and arbitrary files for passwords, API keys, tokens and private keys using a library of patterns,… Linux, macOS, Windows Repo Pipelines, runners & hooks · Secrets & access 15 Oct 2026
- 0446 Semgrep: static analysis with rules you can read Semgrep is a fast static analysis tool whose rules look like the code they match, with a community registry of thousands of… Linux, macOS Repo Pipelines, runners & hooks · Security testing & CTF 15 Oct 2026
- 0447 Lynis: a security audit of a Linux or Unix host with hardening suggestions Lynis is a shell script that inspects a Linux, BSD or macOS system you administer, tests hundreds of settings and services, and… Linux, macOS Repo Linux administration · Server hardening 15 Oct 2026
- 0448 OWASP ZAP: a web application security scanner for testing your own applications Zed Attack Proxy (ZAP) is a free web application security scanner and intercepting proxy maintained under the OWASP umbrella, used to find… Linux, macOS, Windows Repo Security testing & CTF 15 Oct 2026
- 0449 Nmap: the network mapper for inventorying your own network Nmap is the long-standing open source tool for discovering hosts, open ports, services and operating systems on a network you administer, used… Linux, macOS, Windows Repo DNS, IP addresses & ports · Security testing & CTF 15 Oct 2026
- 0450 OWASP Cheat Sheet Series: concise guides to building applications securely The OWASP Cheat Sheet Series is a set of short, topic-focused guides on secure development, from authentication and session management to input… Any system Repo Security resources & detection 15 Oct 2026
- 0451 awesome-security-hardening: a curated list of hardening guides, benchmarks and tools A maintained awesome list of security hardening guides, checklists, benchmarks and tools for operating systems, services, containers and cloud platforms, kept current… Any system Repo Security resources & detection · Server hardening 15 Oct 2026
- 0452 age: a small, modern tool for encrypting files age is a simple file encryption tool and Go library with short public keys, SSH key support and no configuration options, designed… Linux, macOS, Windows Repo Secrets & access 15 Oct 2026
- 0429 PayloadsAllTheThings: a knowledge base organised by web vulnerability class A community-maintained reference that gives each class of web and application weakness its own section with background, detection notes and remediation references,… Any system Repo Security resources & detection · Security testing & CTF 15 Oct 2026
- 0430 HackTricks: a community wiki of security notes A large, continuously updated wiki of security study notes, organised like a textbook and published in GitBook style, used for learning, CTF… Any system Repo Security resources & detection · Security testing & CTF 15 Oct 2026
- 0426 Sigma: the open detection-rule format for log data The SigmaHQ repository holds the vendor-neutral Sigma rule specification and a community library of thousands of detection rules that converters translate into… Any system Repo Detection & threat hunting · Security resources & detection 15 Oct 2026
- 0427 awesome-security: a curated map of security tools and learning resources A long-running awesome list that groups security software, reading material, courses, conferences and communities by area, from network and endpoint defence to… Any system Repo Security resources & detection 15 Oct 2026
- 0428 SecLists: wordlists for authorised security testing A large, maintained collection of wordlists (usernames, passwords, URLs, fuzzing strings, patterns) used in penetration tests with permission and in defensive checks… Linux, macOS Repo Security resources & detection · Security testing & CTF 15 Oct 2026
- 0406 PowerShell: the cross-platform shell and scripting language The open-source PowerShell 7 project from Microsoft: an object-based shell and automation language that runs on Windows, Linux and macOS and is… Linux, macOS, Windows Repo PowerShell 15 Oct 2026
- 0416 Caddy: the web server with automatic HTTPS Caddy is an open-source web server and reverse proxy written in Go that obtains and renews TLS certificates on its own, with… Linux, macOS, Windows Repo Deploying sites · Web servers & reverse proxies 15 Oct 2026
- 0417 Traefik: a reverse proxy that configures itself from Docker and Kubernetes Traefik is an open-source edge router that discovers services from Docker labels, Kubernetes resources and other providers and routes traffic to them,… Linux, macOS, Windows Repo Docker Compose · Web servers & reverse proxies 15 Oct 2026
- 0376 Loki: horizontally scalable log aggregation inspired by Prometheus The Grafana Loki repository: a log store that indexes labels instead of full text, queried with LogQL from Grafana or logcli, with… Linux, macOS Repo Logs 15 Oct 2026
- 0377 Netdata: real-time, per-second monitoring with zero configuration The Netdata repository: an agent that auto-discovers hundreds of metrics on Linux hosts, containers and common services, shows them per second in… Linux, macOS Repo Alerting & dashboards · Prometheus & Grafana 15 Oct 2026
- 0383 pre-commit: a framework for managing multi-language Git hooks The pre-commit repository: the tool that installs, isolates and runs Git hooks declared in a YAML file, with hooks written in Python,… Linux, macOS, Windows Repo Git tools · Pipelines, runners & hooks 15 Oct 2026
- 0385 act: run your GitHub Actions workflows locally with Docker The nektos/act repository: a command-line tool that reads .github/workflows, simulates GitHub events and runs the jobs in Docker containers on your machine,… Linux, macOS, Windows Repo Git tools · GitHub Actions 15 Oct 2026
- 0368 restic: fast, encrypted, deduplicated backups to local disk, SFTP or cloud storage The restic repository: a single Go binary that backs up to local disks, SFTP, S3, Backblaze B2, Azure, Google Cloud and anything… Linux, macOS, Windows Repo Backup tools 15 Oct 2026
- 0369 BorgBackup: deduplicating archiver with compression and authenticated encryption The BorgBackup repository: a Python and C backup tool that stores deduplicated, compressed, encrypted archives on local disks or over SSH, with… Linux, macOS Repo Backup tools 15 Oct 2026
- 0370 rclone: rsync for cloud storage, with 70+ providers The rclone repository: a Go command-line tool that copies, syncs, mounts and checks files across local disks and more than 70 cloud… Linux, macOS, Windows Repo Backup tools 15 Oct 2026
- 0337 docker/compose The source of Docker Compose, the tool that defines and runs multi-container applications from a compose.yaml file. Useful for release notes, the… Linux, macOS, Windows Repo Docker Compose 15 Oct 2026
- 0339 Uptime Kuma: self-hosted uptime monitoring Uptime Kuma is a self-hosted monitoring tool with a web UI that checks websites, TCP ports, DNS, Docker containers and more, draws… Linux, macOS, Windows Repo Alerting & dashboards · Docker basics 15 Oct 2026
- 0246 Valkey: open source key-value datastore (valkey-io/valkey) Valkey is a BSD-licensed key-value data structure server, forked from Redis just before its 2024 license change and backed by the Linux… Linux, macOS Repo Administration & persistence · Redis 15 Oct 2026
- 0244 MongoDB server source code (mongodb/mongo) The official repository of the MongoDB database server, including mongod, mongos and the core server tests. Linux, macOS, Windows Repo Administration · MongoDB 15 Oct 2026
- 0245 Redis server source code (redis/redis) The official repository of Redis Open Source: the in-memory data structure server, redis-cli, Sentinel and the example redis.conf. Linux, macOS Repo Administration & persistence · Redis 15 Oct 2026
- 0212 postgres/postgres: PostgreSQL source code mirror The official read-only GitHub mirror of the PostgreSQL source repository. Browse the code and history here; patches go through the project's mailing… Linux, macOS, Windows Repo Install & connect · PostgreSQL 15 Oct 2026
- 0228 MySQL Server source code Oracle's public GitHub repository with the source code of MySQL Server, including the server, client programs such as mysql and mysqldump, and… Linux, macOS, Windows Repo MySQL & MariaDB 15 Oct 2026
- 0229 MariaDB Server The source of MariaDB Server, the community-developed fork of MySQL started by original MySQL developers, licensed under GPLv2. Linux, macOS, Windows Repo MySQL & MariaDB 15 Oct 2026
- 0194 Ansible: agentless IT automation The source repository of ansible-core, the engine behind Ansible playbooks, ad-hoc commands and the ansible-galaxy and ansible-vault tools. Linux, macOS Repo Ansible 15 Oct 2026
- 0195 OpenTofu: open-source infrastructure as code OpenTofu is the community fork of Terraform under the MPL-2.0 license, run as a Linux Foundation project. It uses the same configuration… Any system Repo Terraform 15 Oct 2026