추천 보안 오픈소스 프로젝트

A small, portable C library implementing X.509 certificates and the TLS and DTLS protocols, suited to embedded systems.

Rust-based web application security scanner for penetration testers, with 125+ scanner modules, an AI-driven testing mode, and a companion browser extension.

All-in-one open source intelligence tool that runs on-demand checks on any website, covering DNS, SSL, headers, server info and security configuration.

Windows Hello-style facial authentication for Linux, using IR cameras and PAM for login, sudo, and lock screens.

A Rust CLI and library that detects and decodes encoded or encrypted text without a key or cipher name, including multi-layer chains.

A Go CLI that queries multiple internet search engines (Shodan, Censys, FOFA, ZoomEye and more) to find exposed hosts for recon and automation.

Android and iOS app that scans for nearby Bluetooth LE signals from smart glasses (mainly Meta Ray-Ban) and sends a warning.

A end-to-end encrypted messaging app and network that uses no user identifiers, with iOS, Android, desktop and terminal clients.

Network traffic monitor that flags communication with known malicious domains, IPs, URLs and User-Agents using indicator lists called trails.

A web-based management platform for operating Fail2Ban across one or more Linux hosts, with centralized ban review, unban search, and alerts.

A zero-knowledge, end-to-end encrypted pastebin where notes are encrypted in the browser and self-destruct after one read or 24 hours.

A web toolkit for analyzing any domain, covering DNS records, IP geolocation, WHOIS, and SSL/TLS certificate history.

A CLI and TypeScript SDK from OpenAI for scanning code for security vulnerabilities, validating findings, and generating fixes.

A Go-based, extensible security framework for reconnaissance and MITM attacks across WiFi, BLE, HID, CAN-bus and IPv4/IPv6 networks.

Open-source password manager built with Flutter, compatible with KeePass 2.x (KDBX 3 and KDBX 4) databases across mobile, desktop and web.

An AI agent skill pack that routes reverse engineering, pentest, and CTF tasks to the right playbook and checks which tools are installed.

An AI-driven penetration testing tool that uses multiple LLM providers to generate payloads and scan web targets for 50+ vulnerability types.

Agent skill and Python service that strip AI provenance marks like C2PA metadata and invisible Unicode from your files.

A curated library of offensive security SKILL.md files that give Claude methodology for specific attack surfaces, from SQL injection to EDR evasion.

A coding-agent skill that runs multi-phase security audits with isolated agents, independent verification, and machine-readable findings.