Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/deadbits/InsecureProgramming

mirror of gera's insecure programming examples | http://community.coresecurity.com/~gera/InsecureProgramming/

c exploitation learning-exercise security security-vulnerability vulnerabilities

Last synced: 20 Mar 2025

https://github.com/autistic-symposium/blockchains-security-toolkit

👾 notes and resources on decentralized protocols (e.g. oracles, bridges, honeypots, cryptography, decompilers, static analysis, bug bounties)

aurora blockchain blockchain-security cypherpunk defi ethereum evm near rust security smart-contracts solidity

Last synced: 28 Feb 2025

https://github.com/0x4d31/salt-scanner

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

devops devops-tools python salt saltstack security security-audit security-scanner security-tools vulnerability-scanners vulnerability-scanning

Last synced: 01 Oct 2025

https://github.com/aboutcode-org/aboutcode

AboutCode project: tools and data to uncover things about code: the provenance, origin, license, and more (packages, security, quality, etc.) of FOSS code. Get started at https://aboutcode.readthedocs.io/

aboutcode dejacode license purl sbom sca scancode security

Last synced: 28 Jan 2026

https://github.com/SPuerBRead/shovel

Docker容器逃逸工具（Docker Escape Tools）

capability container docker escape security security-tools

Last synced: 04 Apr 2025

https://github.com/mrwiora/NAMEinator

NAMEinator DNS Benchmark tool (namebench successor)

dns go security

Last synced: 21 Mar 2025

https://github.com/panagiks/rspet

RSPET (Reverse Shell and Post Exploitation Tool) is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.

backdoor hacking pentesting plug-ins post-exploitation reverse-shell security security-audit udp-flood udp-spoof

Last synced: 06 Apr 2025

https://github.com/PeterMosmans/security-scripts

A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner), nikto (webscanner) and testssl.sh (SSL/TLS scanner)

nikto nmap python security security-scanner security-tools ssl testssl

Last synced: 08 Apr 2025

https://github.com/wolfssl/wolfssl-examples

Example applications using the wolfSSL lightweight SSL/TLS library

cms cryptography dtls embedded examples freertos iot pkcs7 psa psk security signature-verification ssl tls tpm2 x509

Last synced: 15 May 2025

https://github.com/panagiks/RSPET

RSPET (Reverse Shell and Post Exploitation Tool) is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.

backdoor hacking pentesting plug-ins post-exploitation reverse-shell security security-audit udp-flood udp-spoof

Last synced: 15 May 2025

https://github.com/cisagov/scubagoggles

SCuBA Secure Configuration Baselines and assessment tool for Google Workspace

cisa cybersecurity google google-workspace gws opa open-policy-agent open-source python scuba scubaconnect security security-automation

Last synced: 14 Oct 2025

https://github.com/Idov31/MrKaplan

MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution.

attack cyber cybersecurity evasion infosec infosectools powershell red-team red-teaming security security-tools windows

Last synced: 21 Jul 2025

https://github.com/DegateCommunity/Degate

A modern and open-source cross-platform software for chips reverse engineering.

chips cpp cross-platform cybersecurity gui multi-platform reverse-engineering security security-tools verilog vhdl vlsi

Last synced: 12 May 2025

https://github.com/sigstore/sigstore-python

A Sigstore client written in Python

codesigning python security supply-chain

Last synced: 26 Jan 2026

https://github.com/idov31/mrkaplan

MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution.

attack cyber cybersecurity evasion infosec infosectools powershell red-team red-teaming security security-tools windows

Last synced: 09 Apr 2025

https://github.com/Esser50K/EvilTwinFramework

A framework for pentesters that facilitates evil twin attacks as well as exploiting other wifi vulnerabilities

evil-twin framework hacking pentesters security toolkit

Last synced: 02 Apr 2025

https://github.com/esser50k/eviltwinframework

A framework for pentesters that facilitates evil twin attacks as well as exploiting other wifi vulnerabilities

evil-twin framework hacking pentesters security toolkit

Last synced: 06 Apr 2025

https://github.com/cuprate/cuprate

Cuprate, an upcoming experimental, modern & secure Monero node. Written in Rust

cryptocurrency monero monero-integrations monerod network network-programming peer-to-peer rust rust-lang security

Last synced: 23 Oct 2025

https://github.com/r3li4nt/wifi-hack

Herramienta automatizada para crackear redes WiFi con protección WPA2 y WPS.

aircrack hacking-tool linux python3 security wifi-hack wifi-hacking wifihack wpa2 wps

Last synced: 26 Mar 2025

https://github.com/passbolt/passbolt_browser_extension

Browser extensions (Firefox, Edge & Chrome) for Passbolt the open source password manager for teams

browser-extension manager passbolt password password-manager productivity security

Last synced: 21 Jan 2026

https://github.com/automorphic-ai/aegis

Self-hardening firewall for large language models

adversarial-attacks large-language-models llmops prompt-injection security

Last synced: 28 Mar 2025

https://github.com/rfc-st/humble

A humble, and 𝗳𝗮𝘀𝘁, security-oriented HTTP headers analyzer.

analysis checklist cybersecurity header-parser headers http infosec kali-linux owasp python3 security security-audit security-scanner security-tools

Last synced: 12 Jul 2025

https://github.com/adgaultier/tamanoir

An eBPF🐝 Keylogger with C2-based RCE payload delivery

aya ebpf hacking keylogger linux ratatui rust security tonic

Last synced: 04 Apr 2025

https://github.com/common-fate/iamzero

Identity & Access Management simplified and secure.

aws cloud cloud-security iam security security-tools

Last synced: 12 Jan 2026

https://github.com/custom-cards/surveillance-card

A custom component for displaying camera feeds in the style of a surveillance system.

camera home-assistant motion security

Last synced: 07 Apr 2025

https://github.com/phellipeandrade/rbac

Hierarchical Role-Based Access Control for Node.js

acl authorization hierarchical javascript nodejs permissions rbac role security

Last synced: 30 Mar 2025

https://github.com/the-osint-toolbox/website-osint

You will find a wealth of resources to help with your Website investigations.

analytics archive archives dns domain favicon hosting ip osint security url website whois

Last synced: 08 Oct 2025

https://github.com/en0th/ElectricRat

电气鼠靶场系统是一种带有漏洞的Web应用程序，旨在为Web安全渗透测试学习者提供学习和实践的机会。The Electrical Mouse Target Range System is a web application with vulnerabilities designed to provide learning and practice opportunities for web security penetration testing learners.

security targeted-learning

Last synced: 07 Sep 2025

https://github.com/remind101/ssm-env

Expand env variables from AWS Parameter Store

security sms

Last synced: 04 Feb 2026

https://github.com/brittonhayes/pillager

Pillage filesystems for sensitive information with Go 🔍

cli gitleaks go golang hacking scanner security security-tools tool tui

Last synced: 12 Apr 2025

https://github.com/joinmarket-webui/joinmarket-webui

Your sats. Your privacy. Your profit.

bitcoin privacy security

Last synced: 25 Mar 2025

https://github.com/werf/trdl

The universal solution for delivering your software updates securely from a trusted The Update Framework (TUF) repository.

continuous-delivery security tuf update werf

Last synced: 08 Apr 2025

https://github.com/psecio/versionscan

A PHP version scanner for reporting possible vulnerabilities

cve php risk scans security

Last synced: 06 Apr 2025

https://github.com/pirate/webrtcchat

:lock_with_ink_pen: Pure Browser To Browser Chat (STUN & ICE Servers optional)

chat-application ice-servers javascript security stun webrtc webrtc-demos

Last synced: 24 Mar 2025

https://github.com/rsmusllp/termineter

Smart Meter Security Testing Framework

python security smart-meters

Last synced: 07 Apr 2025

https://github.com/Pkcs11Interop/Pkcs11Interop

Managed .NET wrapper for unmanaged PKCS#11 libraries

crypto cryptography hsm pkcs pkcs11 security smartcard

Last synced: 14 Mar 2025

https://github.com/cado-security/varc

Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.

aws aws-fargate aws-forensics aws-lambda cloud-security dfir dfir-automation docker-forensics eks-forensics fargate-forensics forensics hacktoberfest memory-forensics security

Last synced: 08 May 2025

https://github.com/semmle/securityexploits

This repo has been migrated to https://github.com/github/security-lab/tree/master/SecurityExploits

exploits ql security vulnerabilities

Last synced: 02 Apr 2025

https://github.com/presidentbeef/inject-some-sql

Have fun injecting SQL into a Ruby on Rails application!

rails ruby ruby-on-rails security sql-injection sqli

Last synced: 07 Apr 2025

https://github.com/wolfSSL/wolfssl-examples

Example applications using the wolfSSL lightweight SSL/TLS library

cms cryptography dtls embedded examples freertos iot pkcs7 psa psk security signature-verification ssl tls tpm2 x509

Last synced: 20 Apr 2025

https://github.com/myvyang/chromium_for_spider

dynamic crawler for web vulnerability scanner

chromium crawler puppeteer security spider

Last synced: 11 Jul 2025

https://github.com/codecentric/gopass-ui

gopass CLI + UI = visual cross-platform password manager for teams

git gopass gpg pass password-manager password-store security ui

Last synced: 09 Apr 2025

https://github.com/monzo/egress-operator

A Kubernetes operator to produce egress gateway Envoy pods and control access to them with network policies

egress envoy kubernetes networking operator security

Last synced: 12 Apr 2025

https://github.com/cogolabs/beyond

BeyondCorp-inspired HTTPS/SSO Access Proxy. Secure internal services outside your VPN/perimeter network during a zero-trust transition.

beyondcorp federation golang http-proxy openid-connect perimeter-network proxy proxy-server relying-party security trust-transition vpn zero-trust

Last synced: 09 Apr 2025

https://github.com/cogolabs/transcend

BeyondCorp-inspired HTTPS/SSO Access Proxy. Secure internal services outside your VPN/perimeter network during a zero-trust transition.

beyondcorp federation golang http-proxy openid-connect perimeter-network proxy proxy-server relying-party security trust-transition vpn zero-trust

Last synced: 19 Mar 2025

https://github.com/botherder/androidqf

androidqf (Android Quick Forensics) helps quickly gathering forensic evidence from Android devices, in order to identify potential traces of compromise.

android forensics malware-research security

Last synced: 16 Jan 2026

https://github.com/bongochong/CombinedPrivacyBlockLists

Ad-blocking hosts files, IP block lists, PAC filters, ABP / uBO / ADG subscriptions, and a whole lot more. All merged from multiple reputable sources, combined with my own research. Also, script-based utilities to help you create such things yourself. Updated at least once every two weeks, usually more frequently. Since 2017.

ad-blocking ancient-truths bash bittorrent blocklists bromite cygwin dns file-sharing foss freedom gnu hosts linux mac p2p pihole privacy security shell-scripting

Last synced: 30 Apr 2025

https://github.com/omergunal/PoT

Phishing on Twitter

phishing security social-engineering

Last synced: 27 Jul 2025

https://github.com/intel/tsffs

A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS

fuzzing rust security simics

Last synced: 13 May 2025

https://github.com/ksg97031/frida-gadget

Automated tool for patching APKs to enable the use of Frida gadget by downloading the library and injecting code into the main activity.

android apk frida frida-gadget pentest reversing security

Last synced: 05 Oct 2025

https://github.com/dopplerhq/cli

The official CLI for interacting with your Doppler secrets and configuration.

cli doppler doppler-cli environment-variables secret-management secrets secrets-management secrets-manager security

Last synced: 28 Jan 2026

https://github.com/activecm/passer

Passive service locator, a python sniffer that identifies servers, clients, names and much more

capturing-packets dns docker-command gplv3 hacktoberfest linux macosx network-monitoring packet-analyzer packet-sniffer packets passer pcap pcap-analyzer python python-2 scapy security sniffer

Last synced: 09 Apr 2025

https://github.com/reveng007/reveng_rtkit

Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypass infamous rkhunter antirootkit.

antirootkit-bypass backdoor c hacking-tool hacktoberfest kernel-mode-rootkit linux linux-device-driver linux-kernel linux-kernel-module malware post-exploitation-toolkit redteam redteam-tools ring0 rkhunter-antirootkit security security-tools

Last synced: 09 Apr 2025

https://github.com/alegrey91/systemd-service-hardening

Basic guide to harden systemd services

hardening linux security systemd

Last synced: 20 Aug 2025

https://github.com/GitHubSecurityLab/actions-permissions

GitHub token permissions Monitor and Advisor actions

actions permissions security

Last synced: 08 Apr 2025

https://github.com/xuanxuan0/TiEtwAgent

PoC memory injection detection agent based on ETW, for offensive and defensive research purposes

detection edr injection memory-scanning security

Last synced: 11 Jul 2025

https://github.com/Ziconius/FudgeC2

FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.

c2 command-and-control cybersecurity implant offensive-security post-exploitation powershell purpleteam python3 readteaming redteam security security-tools

Last synced: 24 Mar 2025

https://github.com/reconmap/pentest-reports-static

Collection of penetration test reports and pentest report templates. Published by the the best security companies in the world.

hacktoberfest infosec oscp-prep penetration-testing pentest-report pentest-reports pentesting security

Last synced: 26 Feb 2025

https://github.com/lucasfrag/kali-linux-tools-interface

Graphical Web interface developed to facilitate the use of security information tools.

analysis attack bootstrap cybersecurity education hacking hacking-tools kali-linux pentesting php7 security ssh whitehat

Last synced: 03 Apr 2025

https://github.com/geeksonsecurity/vuln-web-apps

A curated list of vulnerable web applications.

security security-scanner vulnerabilities vulnerability-scanners

Last synced: 13 May 2025

https://github.com/GoogleCloudPlatform/jit-groups

JIT Groups is an open source application that lets you implement secure, self-service access management for Google Cloud using groups.

gcp google-cloud iam privileged-access-management security

Last synced: 22 Mar 2025

https://github.com/joychou93/sks

Security Knowledge Structure(安全知识汇总)

deserialize java nginx-lua php python security waf webshell xxe

Last synced: 10 May 2025

https://github.com/NodeSecure/js-x-ray

JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.

ast ast-analysis javascript nodejs sast security security-audit security-tools supply-chain-security

Last synced: 09 May 2025

https://github.com/alechilczenko/spidex

Continuous reconnaissance network scanner designed for large-scale scans, collecting information on all Internet assets.

banner-grabbing censys command-line-tool internet-of-things iot pentesting port-scanner port-scanning python3 scraping search-engine security security-tools shodan zoomeye

Last synced: 12 Jul 2025

https://github.com/SimplyBuilt/SimonSays

💂 Simple, declarative, role-based access control system for Rails and Ruby

authorization authorizer declarative rails role-based-access-control ruby security

Last synced: 16 Jul 2025

https://github.com/simplybuilt/simonsays

💂 Simple, declarative, role-based access control system for Rails and Ruby

authorization authorizer declarative rails role-based-access-control ruby security

Last synced: 05 Apr 2025

https://github.com/nodesecure/js-x-ray

JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.

ast ast-analysis javascript nodejs sast security security-audit security-tools supply-chain-security

Last synced: 26 Jan 2026

https://github.com/berryalen02/PECracker

针对PE文件的分离的攻防对抗工具，红队、研究者的好帮手。目前支持文件头伪装、证书区段感染。A no-kill confrontation tool for the separation of PE files, a good helper for red teams and researchers. Currently, file header spoofing and certificate segment infection are supported.

opsec opsectoolkit security

Last synced: 07 Sep 2025

https://github.com/lukehinds/nono

A secure, kernel-enforced capability sandbox for AI agents

ai ai-agents isolation sandbox security

Last synced: 06 Feb 2026

https://github.com/pralab/secml_malware

Create adversarial attacks against machine learning Windows malware detectors

adversarial-machine-learning attack infosec machine-learning python security

Last synced: 14 Jan 2026

https://github.com/tink-crypto/tink-java

Java implementation of Tink

crypto cryptography java security

Last synced: 14 Jan 2026

https://github.com/JoyChou93/sks

Security Knowledge Structure(安全知识汇总)

deserialize java nginx-lua php python security waf webshell xxe

Last synced: 13 Mar 2025

https://github.com/onur-ozkan/nestjs-rate-limiter

Highly configurable and extensible rate limiter library

guard nestjs rate-limiter request-limiter security

Last synced: 01 Oct 2025

https://github.com/karimhabush/cyberowl

A daily updated summary of the most frequent types of security advisories currently being reported from different sources.

cisa cve security security-alerts vulnerability

Last synced: 16 Apr 2025

https://github.com/tasket/wyng-backup

Fast Time Machine-like backups for logical volumes & disk images

backup btrfs img incremental isolation kvm linux lvm pruning qcow2 qubes-os reflinks security vmdk xen xfs

Last synced: 03 Apr 2025

Security Awesome Lists
the-book-of-secret-knowledge 74 Awesome-Hacking 85 awesome-security 330 awesome-web-security 405 awesome-ctf 220 awesome-hacker-search-engines 547 android-security-awesome 227 awesome-incident-response 218 awesome-privacy 1,419 Awesome-WAF 173 DevSecOps 182 awesome-security-hardening 204 awesome-infosec 215 awesome-cybersecurity-blueteam 252 WebHackersWeapons 429 backend-cheats 961 awesome-sec-talks 264 awesome-vehicle-security 220 awesome-api-security 202 awesome-nodejs-security 206 awesome-game-security 92 awesome-iot-hacks 70 awesome-cloud-security 153 awesome-embedded-and-iot-security 131 alternative-frontends 119 awesome-iam 249 DevSecOps 48 awesome-golang-security 34 Awesome-FL 2,808 Awesome-Cybersecurity-Datasets 54 awesome-windows-domain-hardening 70 Crypto-OpSec-SelfGuard-RoadMap 473 awesome-azure-architecture 297 osx-and-ios-security-awesome 56 awesome-executable-packing 691 awesome-llm-security 101 awesome-aws-security 168 awesome-ethereum-security 81 awesome-vulnerable-apps 89 awesome-he 90 awesome-lists 737 Awesome-Jailbreak-on-LLMs 352 MobileHackersWeapons 73 security-apis 112 awesome-security-GRC 81 awesome-anti-forensic 143 awesome-python-security 35 graph-adversarial-learning-literature 314 awesome-opa 222 awesome-runners 36
Security Categories
Uncategorized 4,265 fl in top-tier journal 3,075 :books: Literature 2,265 Tools 1,415 fl in top ml conference and journal 1,241 Pentesting 1,111 Operating Systems 1,076 Attack 1,031 Other Lists 764 Papers 516 Weapons 506 Resources 492 Threat Hunting: 480 **Мероприятия** 466 fl in top ai conference and journal 460 Malware Analysis 428 Defense 414 fl in top cv conference and journal 406 Programming Language 406 Blue Team 405