Data / Repositories / Web security
Web security repositories on GitHub: 9 ranked by stars
9 public repositories tagged Web security are on GitHub, with 46,900 stars between them; 4 had a push in the last 30 days. Most are written in Go (1), TypeScript (1), Python (1). The most starred: chaitin/SafeLine (22,720), infoslack/awesome-web-hacking (7,289), vavkamil/awesome-bugbounty-tools (6,300).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Language | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|---|
| chaitin/SafeLine | SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits. | Go | 22,720 | 1,547 | GPL-3.0 | Sep 28 | Oct 8 |
| infoslack/awesome-web-hacking | A list of web application security | 7,289 | 1,363 | MIT | Sep 18 | Oct 11 | |
| vavkamil/awesome-bugbounty-tools | A curated list of various bug bounty tools | 6,300 | 1,009 | CC0-1.0 | Oct 6 | Oct 11 | |
| lirantal/awesome-nodejs-security | Awesome Node.js Security resources | 3,047 | 317 | Aug 14 | Oct 14 | ||
| vmoranv/jshookmcp | A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server. | TypeScript | 2,045 | 459 | AGPL-3.0 | Oct 10 | Oct 14 |
| Ge0rg3/requests-ip-rotator | A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing. | Python | 1,679 | 173 | GPL-3.0 | Jul 13 | Sep 21 |
| six2dez/burp-ai-agent | Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more | Kotlin | 1,542 | 228 | MIT | Oct 13 | Oct 14 |
| Zeyad-Azima/Offensive-Resources | A Huge Learning Resources with Labs For Offensive Security Players | 1,174 | 246 | Dec 9, 2025 | Oct 11 | ||
| bountyyfi/lonkero | Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust. | Rust | 1,104 | 92 | Aug 16 | Oct 14 |
Related topics
- Security 7
- Cybersecurity 4
- Hacking 3
- Owasp 3
- Pentesting 3
- Bugbounty 3
- Security tools 3
- Awesome list 2
- LLM 2
- MCP 2
- API gateway 1
- Self hosted 1
Read from GitHub by SpecStream between September 21, 2026 and October 14, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.