Repos
GitHub projects worth knowing, with what each one is for and how to try it. Credited to their owners.
Level
- Beginner 0
- Intermediate 0
- Advanced 0
What kind of help
- Guided project 0
- Explains an idea 0
- Step by step 0
- Cheat sheet 0
- Fixes an error 0
What do these mean?
- Beginner
- You are new to this topic.
- Intermediate
- You use it, and want to get better.
- Advanced
- You know it well and need the details.
- Guided project
- Build something small from start to finish, step by step.
- Explains an idea
- Plain words on how something works and why.
- Step by step
- Numbered steps to get one task done.
- Cheat sheet
- Commands and options in a table, to look up fast.
- Fixes an error
- An error message, what it means, and how to solve it.
Area
Clear filters
61 entries match these filters
- 0445 Gitleaks: find secrets that were committed to a Git repository Gitleaks scans Git history, working trees and arbitrary files for passwords, API keys, tokens and private keys using a library of patterns,… Linux, macOS, Windows Repo Pipelines, runners & hooks · Secrets & access 15 Oct 2026
- 0448 OWASP ZAP: a web application security scanner for testing your own applications Zed Attack Proxy (ZAP) is a free web application security scanner and intercepting proxy maintained under the OWASP umbrella, used to find… Linux, macOS, Windows Repo Security testing & CTF 15 Oct 2026
- 0449 Nmap: the network mapper for inventorying your own network Nmap is the long-standing open source tool for discovering hosts, open ports, services and operating systems on a network you administer, used… Linux, macOS, Windows Repo DNS, IP addresses & ports · Security testing & CTF 15 Oct 2026
- 0450 OWASP Cheat Sheet Series: concise guides to building applications securely The OWASP Cheat Sheet Series is a set of short, topic-focused guides on secure development, from authentication and session management to input… Any system Repo Security resources & detection 15 Oct 2026
- 0451 awesome-security-hardening: a curated list of hardening guides, benchmarks and tools A maintained awesome list of security hardening guides, checklists, benchmarks and tools for operating systems, services, containers and cloud platforms, kept current… Any system Repo Security resources & detection · Server hardening 15 Oct 2026
- 0452 age: a small, modern tool for encrypting files age is a simple file encryption tool and Go library with short public keys, SSH key support and no configuration options, designed… Linux, macOS, Windows Repo Secrets & access 15 Oct 2026
- 0453 step-ca: run your own certificate authority for internal TLS and SSH step-ca from Smallstep is an open source certificate authority that issues TLS and SSH certificates for your own infrastructure, with ACME support… Linux, macOS, Windows Repo Linux administration · TLS & certificates 15 Oct 2026
- 0434 Wazuh: an open source security platform with agents, SIEM and XDR Wazuh installs a small agent on each server and sends its logs, file changes and package lists to a central manager that… Linux, macOS, Windows Repo Detection & threat hunting · Logs 15 Oct 2026
- 0435 CrowdSec: collaborative intrusion prevention that shares blocklists CrowdSec reads your logs, detects attacks such as brute force and scanning, blocks the source, and shares anonymised reports so that every… Linux, Windows Repo Detection & threat hunting · Firewalls 15 Oct 2026
- 0439 osquery: query your endpoints like a SQL database osquery exposes the state of a Linux, macOS or Windows machine as SQL tables, so you can ask which processes are listening,… Linux, macOS, Windows Repo Detection & threat hunting · Prometheus & Grafana 15 Oct 2026
- 0440 pySigma: the Python library that converts Sigma rules into queries pySigma parses Sigma detection rules and, with backend plugins, converts them into native queries for Splunk, Elastic, Loki, Sentinel and other log… Any system Repo Detection & threat hunting · Logs 15 Oct 2026
- 0441 Atomic Red Team: small tests that check whether your detections fire Atomic Red Team is a library of tiny, documented tests, each reproducing one attacker technique from MITRE ATT&CK, that defenders run in… Linux, macOS, Windows Repo Detection & threat hunting · Server hardening 15 Oct 2026
- 0444 Trivy: scan container images, file systems and infrastructure code for known problems Trivy is an open source scanner from Aqua Security that finds known vulnerabilities, misconfigurations and exposed secrets in container images, project directories,… Linux, macOS, Windows Repo Images & registries · Security testing & CTF 15 Oct 2026
- 0426 Sigma: the open detection-rule format for log data The SigmaHQ repository holds the vendor-neutral Sigma rule specification and a community library of thousands of detection rules that converters translate into… Any system Repo Detection & threat hunting · Security resources & detection 15 Oct 2026
- 0427 awesome-security: a curated map of security tools and learning resources A long-running awesome list that groups security software, reading material, courses, conferences and communities by area, from network and endpoint defence to… Any system Repo Security resources & detection 15 Oct 2026
- 0429 PayloadsAllTheThings: a knowledge base organised by web vulnerability class A community-maintained reference that gives each class of web and application weakness its own section with background, detection notes and remediation references,… Any system Repo Security resources & detection · Security testing & CTF 15 Oct 2026
- 0430 HackTricks: a community wiki of security notes A large, continuously updated wiki of security study notes, organised like a textbook and published in GitBook style, used for learning, CTF… Any system Repo Security resources & detection · Security testing & CTF 15 Oct 2026
- 0406 PowerShell: the cross-platform shell and scripting language The open-source PowerShell 7 project from Microsoft: an object-based shell and automation language that runs on Windows, Linux and macOS and is… Linux, macOS, Windows Repo PowerShell 15 Oct 2026
- 0407 Windows Terminal: tabs, panes and profiles for every shell on Windows Microsoft's modern terminal for Windows, with tabs, split panes, GPU rendering, Unicode and emoji support and profiles for PowerShell, cmd, WSL distributions… Windows Repo Command-line tools · Windows administration 15 Oct 2026
- 0416 Caddy: the web server with automatic HTTPS Caddy is an open-source web server and reverse proxy written in Go that obtains and renews TLS certificates on its own, with… Linux, macOS, Windows Repo Deploying sites · Web servers & reverse proxies 15 Oct 2026
- 0417 Traefik: a reverse proxy that configures itself from Docker and Kubernetes Traefik is an open-source edge router that discovers services from Docker labels, Kubernetes resources and other providers and routes traffic to them,… Linux, macOS, Windows Repo Docker Compose · Web servers & reverse proxies 15 Oct 2026
- 0383 pre-commit: a framework for managing multi-language Git hooks The pre-commit repository: the tool that installs, isolates and runs Git hooks declared in a YAML file, with hooks written in Python,… Linux, macOS, Windows Repo Git tools · Pipelines, runners & hooks 15 Oct 2026
- 0385 act: run your GitHub Actions workflows locally with Docker The nektos/act repository: a command-line tool that reads .github/workflows, simulates GitHub events and runs the jobs in Docker containers on your machine,… Linux, macOS, Windows Repo Git tools · GitHub Actions 15 Oct 2026
- 0368 restic: fast, encrypted, deduplicated backups to local disk, SFTP or cloud storage The restic repository: a single Go binary that backs up to local disks, SFTP, S3, Backblaze B2, Azure, Google Cloud and anything… Linux, macOS, Windows Repo Backup tools 15 Oct 2026
- 0370 rclone: rsync for cloud storage, with 70+ providers The rclone repository: a Go command-line tool that copies, syncs, mounts and checks files across local disks and more than 70 cloud… Linux, macOS, Windows Repo Backup tools 15 Oct 2026
- 0337 docker/compose The source of Docker Compose, the tool that defines and runs multi-container applications from a compose.yaml file. Useful for release notes, the… Linux, macOS, Windows Repo Docker Compose 15 Oct 2026
- 0339 Uptime Kuma: self-hosted uptime monitoring Uptime Kuma is a self-hosted monitoring tool with a web UI that checks websites, TCP ports, DNS, Docker containers and more, draws… Linux, macOS, Windows Repo Alerting & dashboards · Docker basics 15 Oct 2026
- 0244 MongoDB server source code (mongodb/mongo) The official repository of the MongoDB database server, including mongod, mongos and the core server tests. Linux, macOS, Windows Repo Administration · MongoDB 15 Oct 2026
- 0212 postgres/postgres: PostgreSQL source code mirror The official read-only GitHub mirror of the PostgreSQL source repository. Browse the code and history here; patches go through the project's mailing… Linux, macOS, Windows Repo Install & connect · PostgreSQL 15 Oct 2026
- 0228 MySQL Server source code Oracle's public GitHub repository with the source code of MySQL Server, including the server, client programs such as mysql and mysqldump, and… Linux, macOS, Windows Repo MySQL & MariaDB 15 Oct 2026
- 0229 MariaDB Server The source of MariaDB Server, the community-developed fork of MySQL started by original MySQL developers, licensed under GPLv2. Linux, macOS, Windows Repo MySQL & MariaDB 15 Oct 2026
- 0195 OpenTofu: open-source infrastructure as code OpenTofu is the community fork of Terraform under the MPL-2.0 license, run as a Linux Foundation project. It uses the same configuration… Any system Repo Terraform 15 Oct 2026
- 0147 helm/helm The Helm package manager for Kubernetes: the helm CLI and Go SDK for installing, upgrading and rolling back charts. Any system Repo Helm 15 Oct 2026
- 0148 derailed/k9s K9s is a terminal UI for Kubernetes that lets you browse resources, read logs, open shells and follow cluster changes from the… Any system Repo Troubleshooting 15 Oct 2026
- 0163 openshift/oc: the OpenShift command line client Source code of oc, the OpenShift CLI. It is built on top of kubectl, so it can do everything kubectl does, and… Any system Repo Cluster administration · Deploying applications 15 Oct 2026
- 0130 OCI CLI: Oracle Cloud Infrastructure command-line interface Oracle's open-source command-line tool for Oracle Cloud Infrastructure. Private Cloud Appliance 3.x uses the same CLI for its OCI-compatible Compute Enclave. Any system Repo Compute, networking & storage 15 Oct 2026
- 0095 Tailwind CSS (tailwindlabs/tailwindcss) A utility-first CSS framework: you style elements with small single-purpose classes in your HTML, and the build step generates only the CSS… Any system Repo Layout · Web frameworks 15 Oct 2026
- 0096 Flask (pallets/flask) A lightweight Python web framework for building websites and JSON APIs, with routing, request handling, and templates, and extensions for everything else. Any system Repo Python · Web frameworks 15 Oct 2026
- 0097 Express (expressjs/express) A minimal and flexible web framework for Node.js, built around routes and middleware, and the foundation of countless APIs and other frameworks. Any system Repo Node.js · Web frameworks 15 Oct 2026
- 0078 pandas The most widely used Python library for working with tabular data: DataFrames, file readers and writers, grouping, joining and time series. Any system Repo Data analysis 15 Oct 2026