Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/lifepillar/CSVKeychain

Import/export between Apple Keychain.app and plain CSV file.

apple csv export import keepass keychain password security

Last synced: 15 Mar 2025

https://github.com/lifepillar/csvkeychain

Import/export between Apple Keychain.app and plain CSV file.

apple csv export import keepass keychain password security

Last synced: 28 Jan 2026

https://github.com/GrapheneOS/platform_manifest

Repo manifest for the GrapheneOS mobile privacy and security hardening project.

android grapheneos privacy security

Last synced: 11 Jul 2025

https://github.com/SAP/credential-digger

A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models :lock:

credentials machine-learning python regex scanner secret security security-tools

Last synced: 11 Jul 2025

https://github.com/Consensys/UniversalToken

Implementation of Universal Token for Assets and Payments

asset codefi erc1400 erc20 ethereum finance security sto token universal

Last synced: 09 May 2025

https://github.com/LyleMi/papers

Academic papers and articles that I read related to web hacking, fuzzing, etc. / 阅读过的Web安全方向、模糊测试方向的一些论文与阅读笔记

awesome fuzzing papers read-papers reading-notes security

Last synced: 11 Jul 2025

https://github.com/Skiller9090/Lucifer

A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build Automation Modules To Speed Up Your Cyber Security Life

automation automation-framework cyber-security cybersec cybersecurity enumeration exfiltration framework hacking hacking-framework hacking-tool modular modules pentest-tool pentesting privilege-escalation python security security-tools

Last synced: 12 Jul 2025

https://github.com/ParetoSecurity/pareto-mac

Automatically audit your Mac for basic security hygiene.

endpoint-security macos security swift swiftui

Last synced: 12 Mar 2025

https://github.com/tellsea/springboot-learn

🌹springboot常用框架整合示例，涉及多种网站监控，数据缓存，网络通信，持久层，权限管理，常用工具等

actuator aop druid easypoi ehcache elasticsearch jpa jwt mybatis qiniu quartz rabbitmq redis security shiro sms swagger2 task thymeleaf websocket

Last synced: 05 Apr 2025

https://github.com/jpcertcc/toolanalysisresultsheet

Tool Analysis Result Sheet

security

Last synced: 09 Apr 2025

https://github.com/grapheneos/platform_manifest

Repo manifest for the GrapheneOS mobile privacy and security hardening project.

android grapheneos privacy security

Last synced: 09 Jan 2026

https://github.com/knownsec/LSpider

LSpider 一个为被动扫描器定制的前端爬虫

python3 security spider

Last synced: 12 Jul 2025

https://jpcertcc.github.io/ToolAnalysisResultSheet/

Tool Analysis Result Sheet

security

Last synced: 24 Mar 2025

https://github.com/ahussam/url-tracker

Change monitoring app that checks the content of web pages in different periods.

bugbounty change-monitoring recon reconnaissance security

Last synced: 10 Mar 2025

https://github.com/wecooperate/iMonitorSDK

The world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能， 而不用关心底层驱动的开发、维护和兼容性问题，让其可以专注于业务开发

access-control defender edr endpoint-security etw kernel monitoring-tool procmon security sysmon zero-trust

Last synced: 11 Jul 2025

https://github.com/feross/safe-buffer

Safer Node.js Buffer API

buffer javascript nodejs safe security

Last synced: 13 Apr 2025

https://github.com/knownsec/lspider

LSpider 一个为被动扫描器定制的前端爬虫

python3 security spider

Last synced: 19 Jun 2025

https://github.com/xyfir/ptorx

📩🛡 Email privacy. Anonymously send and receive with alias forwarding. (Abandoned)

alias aliases email email-forwarding forward forwarding mail mail-server msa mta pgp privacy proxy security smtp spam-filtering

Last synced: 15 Apr 2025

https://github.com/paloaltonetworks/rbac-police

Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego

kubernetes kubernetes-rbac kubernetes-security prisma-cloud rbac security

Last synced: 16 May 2025

https://github.com/robthree/twofactorauth.net

.Net library for Two Factor Authentication (TFA / 2FA)

csharp dotnet multi-factor qrcode security totp two-factor twofactorauth

Last synced: 16 May 2025

https://github.com/RobThree/TwoFactorAuth.Net

.Net library for Two Factor Authentication (TFA / 2FA)

csharp dotnet multi-factor qrcode security totp two-factor twofactorauth

Last synced: 04 May 2025

https://github.com/sap/credential-digger

A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models :lock:

credentials machine-learning python regex scanner secret security security-tools

Last synced: 15 May 2025

https://github.com/cea-sec/usbsas

Tool and framework for securely reading untrusted USB mass storage devices.

filesystem rust security usb

Last synced: 16 May 2025

https://github.com/palkeo/pakala

Offensive vulnerability scanner for ethereum, and symbolic execution tool for the Ethereum Virtual Machine

ethereum ethereum-virtual-machine security security-scanner symbolic-execution

Last synced: 13 Dec 2025

https://github.com/ztosec/hunter

Hunter作为中通DevSecOps闭环方案中的一环，扮演着很重要的角色，开源之后希望能帮助到更多企业。

devsecops security

Last synced: 11 Jul 2025

https://github.com/dymmond/esmerald

Esmerald framework - Highly scalable, performant, easy to learn, easy to code and for every sizeable and complex application

api async asyncio framework json json-schema openapi openapi3 pydantic python python-types python3 redoc rest security starlette swagger swagger-ui uvicorn web

Last synced: 15 May 2025

https://github.com/kac89/vulnrepo

VULNRΞPO - Free vulnerability report generator and repository end-to-end encrypted. Complete templates of issues, CWE, CVE, MITRE ATT&CK, PCI DSS, issues import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/PDF report, attachments, automatic changelog, statistics, vulnerability management, methodologies and much more!

angular bugbounty burpsuite cve cwe end-to-end-encryption mitre-attack nessus nmap openvas pci-dss pentesting security security-team security-tool trivy vulnerability-assessment vulnerability-management vulnerability-report vulnerability-research

Last synced: 03 Apr 2025

https://github.com/tarraschk/richelieu

List of the most common French passwords

audit bruteforce-wordlist cybersecurity dictionary security

Last synced: 24 Dec 2025

https://github.com/jupiterone/starbase

Graph-based security analysis for everyone

analysis aws azure cypher gcp graph hack hacktoberfest neo4j security

Last synced: 24 Oct 2025

https://github.com/invariantlabs-ai/invariant

Guardrails for secure and robust agent development

agents ai security

Last synced: 12 Jan 2026

https://github.com/puliczek/cve-2022-0337-poc-google-chrome-microsoft-edge-opera

🎩 🤟🏻 [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337

bugbounty bugbounty-writeups bugbountytips cve cve-2022-0337 cybersecurity exploit hacking payload pentest pentesting red-team security security-writeups writeups

Last synced: 27 Jan 2026

https://github.com/inquest/omnibus

The OSINT Omnibus (beta release)

iocs osint python security security-automation threat-intelligence

Last synced: 17 Jan 2026

https://github.com/MarkoH17/Spray365

Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in execution plan features options that attempt to bypass Azure Smart Lockout and insecure conditional access policies.

enumeration password-spray pentest python3 security

Last synced: 12 Jul 2025

https://github.com/genuinetools/audit

For auditing what collaborators, hooks, and deploy keys you have added on all your GitHub repositories.

auditing cli git github repo repos security

Last synced: 08 Jul 2025

https://github.com/JupiterOne/starbase

Graph-based security analysis for everyone

analysis aws azure cypher gcp graph hack hacktoberfest neo4j security

Last synced: 19 Apr 2025

https://github.com/tonybaloney/pycharm-security

Finds security holes in your Python projects from PyCharm and GitHub

devsecops hacktoberfest-accepted security security-automation static-analysis vulnerability

Last synced: 04 Apr 2025

https://github.com/scottyab/safetynethelper

SafetyNet Helper wraps the Google Play Services SafetyNet.API and verifies Safety Net API response with the Android Device Verification API.

android rootchecker safetynet-api safetynet-helper security

Last synced: 05 Apr 2025

https://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera

🎩 🤟🏻 [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337

bugbounty bugbounty-writeups bugbountytips cve cve-2022-0337 cybersecurity exploit hacking payload pentest pentesting red-team security security-writeups writeups

Last synced: 02 Apr 2025

https://github.com/chemidy/smallest-secured-golang-docker-image

Create the smallest and secured golang docker image based on scratch

distroless docker go golang hacktoberfest security

Last synced: 09 Apr 2025

https://github.com/wmal/linux-kodachi

Linux Kodachi is a security-focused operating system designed for users who value privacy, anonymity, and a secure computing experience. Developed by Warith Al Maawali, Kodachi provides all the tools necessary for anonymous online activities while maintaining ease of use.

cyber-security cybersecurity cybersecurity-education cybersecurity-tools linux privacy security

Last synced: 16 May 2025

https://github.com/johackim/docker-hacklab

My personal hacklab, create your own.

docker hacklab security

Last synced: 06 Apr 2025

https://github.com/OpenCSPM/opencspm

Open Cloud Security Posture Management Engine

aws cloud cspm gcp kubernetes security security-audit

Last synced: 04 Apr 2025

https://github.com/casvisor/casvisor

An open-source security log auditing & RDP, VNC, SSH bastion platform, online demo: https://door.casvisor.com

audit auditing bastion casdoor casvisor database dbgate guacamole jumpbox jumpserver log logging rdp remote-control remote-desktop security ssh telnet vnc

Last synced: 05 Apr 2025

https://github.com/MindPointGroup/cloudfrunt

A tool for identifying misconfigured CloudFront domains

aws cloudfront security security-tools vulnerability-detection

Last synced: 23 Apr 2025

https://github.com/ilpianista/arch-audit

A utility like pkg-audit for Arch Linux. Based on Arch Security Team data.

archlinux security

Last synced: 06 Apr 2025

https://github.com/soxoj/counter-osint-guide-en

Comprehensive Counter OSINT and privacy guide (initially for CIS countries)

cis counter-osint guide osint privacy runet security

Last synced: 28 Jan 2026

https://github.com/fabston/little-snitch-blocklist

🛡 A malicious URL blocklist that protects you from advertisements, malwares, spams, statistics & trackers on both web browsing and applications.

adblocker ads blocklist littlesnitch mac malicious networking security spam

Last synced: 12 May 2025

https://github.com/InQuest/omnibus

The OSINT Omnibus (beta release)

iocs osint python security security-automation threat-intelligence

Last synced: 27 Mar 2025

https://github.com/ant4g0nist/susanoo

A REST API security testing framework.

pentest-tool pentesting python rest-api security security-tools

Last synced: 02 Apr 2025

https://github.com/enlightn/security-checker

A PHP dependency vulnerabilities scanner based on the Security Advisories Database.

php security security-scanner vulnerability-scanner vulnerability-scanning

Last synced: 15 May 2025

https://github.com/lc/secretz

secretz, minimizing the large attack surface of Travis CI

hacktoberfest osint secrets security travis-ci

Last synced: 07 Apr 2025

https://github.com/brexhq/substation

Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.

automation aws logging monitoring observability security

Last synced: 16 May 2025

https://github.com/paretoSecurity/pareto-mac

Automatically audit your Mac for basic security hygiene.

endpoint-security macos security swift swiftui

Last synced: 18 Apr 2025

https://github.com/fkie-cad/friTap

Simplifying SSL/TLS traffic analysis for researchers by making SSL decryption effortless.

android android-https-capture binary-analysis frida hooking https linux network-analysis network-capture network-forensics security security-audit ssl ssldump tcpdump tls

Last synced: 27 Mar 2025

https://github.com/jofpin/temcrypt

Evolutionary encryption framework based on scalable complexity over time

cryptography encryption javascript mechanism nodejs privacy security temcrypt

Last synced: 06 Apr 2025

https://github.com/zaproxy/action-baseline

A GitHub Action for running the ZAP Baseline scan

actions dast devsecops github-actions security

Last synced: 10 Apr 2025

https://github.com/ant4g0nist/Susanoo

A REST API security testing framework.

pentest-tool pentesting python rest-api security security-tools

Last synced: 13 Mar 2025

https://github.com/disclose/resources

Tools, data, and contact lists relevant to The disclose.io Project.

bug-bounty bugbounty certs infosec security vulnerability-disclosure

Last synced: 17 Jan 2026

https://github.com/jagaapple/next-secure-headers

Sets secure response headers for Next.js.

csp headers nextjs security

Last synced: 12 Apr 2025

https://github.com/padok-team/yatas

:owl::mag_right: A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration

account assessment audit aws best-practices cli cloud configuration devsecops gcp hardening security

Last synced: 12 Jan 2026

https://github.com/sirAndros/KeePassWinHello

Quick unlock KeePass 2 database using biometrics with Windows Hello

biometrics keepass password-manager plugin security unlock windows-hello winhello

Last synced: 07 May 2025

https://github.com/mkalioby/django-mfa2

A Django app that handles MFA, it supports TOTP, U2F, FIDO2 U2F (Webauthn), Email Token and Trusted Devices

conda django django-packages django-web fido2 mfa python security totp webauthn

Last synced: 16 May 2025

https://github.com/MayankPandey01/Jira-Lens

Fast and customizable vulnerability scanner For JIRA written in Python

bugbounty jira jira-rest-api python3 scanner security security-tools vulnerability-scanners

Last synced: 12 Jul 2025

https://github.com/spacesiren/spacesiren

A honey token manager and alert system for AWS.

aws honeypot lambda security terraform

Last synced: 11 May 2025

https://github.com/cleanunicorn/karl

Monitor smart contracts deployed on blockchain and test against vulnerabilities with Mythril. It was presented at DEFCON 2019.

blockchain defcon defcon27 ethereum security smt symbolic-execution

Last synced: 12 Jan 2026

https://github.com/x011/secretpixel

SecretPixel is a cutting-edge steganography tool designed to securely conceal sensitive information within images. It stands out in the realm of digital steganography by combining advanced encryption, compression, and a seeded Least Significant Bit (LSB) technique to provide a robust solution for embedding data undetectably.

aes-256 aes-encryption cipher compression cryptography data-exfiltration encryption hacking hacking-tool hide-files hide-files-in-image image-steganography lsb-steganography privacy rsa-cryptography security security-tools steganography steganography-algorithms stego

Last synced: 16 May 2025

https://github.com/adamyordan/cve-2019-1003000-jenkins-rce-poc

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)

cve cve-2019-1003000 exploit groovy information-security jenkins poc rce security security-1266

Last synced: 13 Oct 2025

https://github.com/lydiahallie/advanced-web-dev-quiz

🔥 Repo related to my FrontendMasters course. An Advanced Web Dev Quiz that covers a wide range of the things web devs get to deal with on a daily basis.

csrf css html javascript performance rendering security web xss

Last synced: 06 Apr 2025

https://github.com/cruise-automation/daytona

A Vault client, but for containers and servers.

aws gcp go kubernetes secrets secrets-management security vault

Last synced: 16 May 2025

https://github.com/vixentael/my-talks

List of my talks and workshops: security engineering, applied cryptography, secure software development

cryptography data-protection encryption infosec ios ios-swift mobile-development security security-engineering usability-engineering

Last synced: 28 Jul 2025

https://github.com/tijme/angularjs-csti-scanner

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.

angularjs angularjs-csti-scanner angularjs-sandbox-escape exploit sandbox-escape security tool vulnerability-scanners xss xss-scanners

Last synced: 06 Apr 2025

Security Awesome Lists
the-book-of-secret-knowledge 74 Awesome-Hacking 85 awesome-security 330 awesome-web-security 405 awesome-ctf 220 awesome-hacker-search-engines 547 android-security-awesome 227 awesome-incident-response 218 awesome-privacy 1,419 Awesome-WAF 173 DevSecOps 182 awesome-security-hardening 204 awesome-infosec 215 awesome-cybersecurity-blueteam 252 WebHackersWeapons 429 backend-cheats 961 awesome-sec-talks 264 awesome-vehicle-security 220 awesome-api-security 202 awesome-nodejs-security 206 awesome-game-security 92 awesome-iot-hacks 70 awesome-cloud-security 153 awesome-embedded-and-iot-security 131 alternative-frontends 119 awesome-iam 249 DevSecOps 48 awesome-golang-security 34 Awesome-FL 2,808 Awesome-Cybersecurity-Datasets 54 awesome-windows-domain-hardening 70 Crypto-OpSec-SelfGuard-RoadMap 473 awesome-azure-architecture 297 osx-and-ios-security-awesome 56 awesome-executable-packing 691 awesome-llm-security 101 awesome-aws-security 168 awesome-ethereum-security 81 awesome-vulnerable-apps 89 awesome-he 90 awesome-lists 737 Awesome-Jailbreak-on-LLMs 352 MobileHackersWeapons 73 security-apis 112 awesome-security-GRC 81 awesome-anti-forensic 143 awesome-python-security 35 graph-adversarial-learning-literature 314 awesome-opa 222 awesome-runners 36
Security Categories
Uncategorized 4,272 fl in top-tier journal 3,075 :books: Literature 2,308 Tools 1,395 fl in top ml conference and journal 1,241 Pentesting 1,169 Operating Systems 1,065 Attack 1,022 Other Lists 765 Papers 516 Weapons 506 Resources 481 Threat Hunting: 480 fl in top ai conference and journal 460 **Мероприятия** 458 Official 449 Programming Language 407 fl in top cv conference and journal 406 Defense 403 Blue Team 401