An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/mkalioby/django-passkeys

Django Authentication Backend For Passkeys

biometrics django passkeys python security security-key webauthn

Last synced: 16 May 2025

https://github.com/dalibo/ldap2pg

:elephant: :busts_in_silhouette: Manage PostgreSQL roles and privileges from YAML or LDAP

acl directory golang ldap postgresql privileges roles security users yaml

Last synced: 15 May 2025

https://github.com/ArturSS7/TukTuk

Tool for catching and logging different types of requests.

bugbounty go golang pentest security summer-of-hack

Last synced: 10 May 2025

https://github.com/v-p-b/avpwn

List of real-world threats against endpoint protection software

antivirus endpoint-protection exploits incidents security vulnerability

Last synced: 02 Feb 2026

https://github.com/boringtools/git-alerts

Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files

devsecops github-secrets github-security security security-tools threat-hunting

Last synced: 16 Dec 2025

https://github.com/buskill/buskill-app

BusKill's main CLI/GUI app for arming/disarming/configuring the BusKill laptop kill cord

anti-forensics cli deadmanswitch gui infosec kivy libusb linux macos opsec python security tripwire usb windows

Last synced: 13 Apr 2025

https://github.com/DivineOmega/password_exposed

🔒 Password Exposed Helper Function - Check if a password has been exposed in a data breach.

data-breach helper-functions passwords php security

Last synced: 09 Jul 2025

https://github.com/divineomega/password_exposed

🔒 Password Exposed Helper Function - Check if a password has been exposed in a data breach.

data-breach helper-functions passwords php security

Last synced: 06 Oct 2025

https://github.com/FutureSharks/rpi-security

A security system written in python to run on a Raspberry Pi with motion detection and mobile notifications

mobile-notifications mobile-phones raspberry-pi security telegram-bot wifi

Last synced: 18 Jul 2025

https://github.com/m9sweeper/m9sweeper

m9sweeper is a free and easy kubernetes security platform.

containers docker falco kube-bench kube-hunter kubernetes kubesec security trivy

Last synced: 11 May 2025

https://github.com/wizardforcel/mst-sec-lecture-notes

:book:【停】米斯特白帽培训讲义

lecture-notes mst security

Last synced: 08 May 2025

https://github.com/futuresharks/rpi-security

A security system written in python to run on a Raspberry Pi with motion detection and mobile notifications

mobile-notifications mobile-phones raspberry-pi security telegram-bot wifi

Last synced: 07 Apr 2025

https://github.com/johnlatwc/pypowershellxray

Python script to decode common encoded PowerShell scripts

dfir forensic-analysis forensics incident-response powershell security security-tools shellcode

Last synced: 21 Aug 2025

https://github.com/brxken128/dexios

A secure file encryption utility, written in Rust.

aes-256-gcm crypto cryptography deoxys encryption rust security xchacha20-poly1305

Last synced: 04 Apr 2025

https://github.com/privacera/paig

PAIG (Pronounced similar to paige or payj) is an open-source project designed to protect Generative AI (GenAI) applications by ensuring security, safety, and observability.

compliance genai guardrails security

Last synced: 30 Dec 2025

https://github.com/ryasnoy/applocker

AppLocker - simple lock screen for iOS Application ( Swift 4+, iOS 9.0+) Touch ID / Face ID

applocker face-id faceid ios keychain keychain-wrapper locker lockscreen passcode password pincode secure security swift swift-3 swift-4 swift-language swift4 touch-id touchid

Last synced: 13 Apr 2025

https://github.com/youki992/VscanPlus

[VscanPlus内外网漏洞扫描工具]已更新HW热门漏洞检测POC。基于veo师傅的漏扫工具vscan二次开发的版本,端口扫描、指纹检测、目录fuzz、漏洞扫描功能工具,批量快速检测网站安全隐患。An open-source, cross-platform website vulnerability scanning tool that helps you quickly detect website security vulnerabilities.

fingerprint fuzzing nuclei portscan security sql-injection xray

Last synced: 07 Sep 2025

https://github.com/fademind/hosts.extras

Extra rules for StevenBlack's hosts project [ https://git.io/Je0XR ] See also hosts.whitelists [ https://git.io/J3bdI ]

adblock adblocker hosts hostsfile linux privacy security steven-black-hosts windows

Last synced: 09 Apr 2025

https://github.com/nccgroup/tpmgenie

TPM Genie is an I2C bus interposer for discrete Trusted Platform Modules

arduino hardware interposer raspberry-pi security teensy tpm trusted-platform-module

Last synced: 21 Aug 2025

https://github.com/mebjas/csrf-protector-php

CSRF Protector library: standalone library for CSRF mitigation

csrf csrf-protector owasp php security standalone-library

Last synced: 16 May 2025

https://github.com/feross/cs253.stanford.edu

CS 253 Web Security course at Stanford University

javascript security stanford web web-security

Last synced: 13 Sep 2025

https://github.com/zelon88/HRCloud2

A full-featured home hosted Cloud Drive, Personal Assistant, App Launcher, File Converter, Streamer, Share Tool & More!

antivirus applauncher cloud-drive cloud-platform cloud-storage cms editor enterprise file-converter nextcloud ocr owncloud paas personal-assistants security self-hosted server share-tool streamer wordpress

Last synced: 22 Mar 2025

https://github.com/aquasecurity/postee

Notice: Postee is no longer under active development or maintenance.

aqua automation cloud-native devsecops docker golang jira kubernetes messaging opa rego security slack soar

Last synced: 12 Jan 2026

https://github.com/kintoandar/fwd

🚂 The little forwarder that could

cli fwd golang network ngrok security utility

Last synced: 08 Jan 2026

https://github.com/alex-ilgayev/mcpspy

MCP Monitoring with eBPF

ai ai-security llm mcp monitoring security

Last synced: 28 Jul 2025

https://github.com/zelon88/hrcloud2

A full-featured home hosted Cloud Drive, Personal Assistant, App Launcher, File Converter, Streamer, Share Tool & More!

antivirus applauncher cloud-drive cloud-platform cloud-storage cms editor enterprise file-converter nextcloud ocr owncloud paas personal-assistants security self-hosted server share-tool streamer wordpress

Last synced: 10 Apr 2025

https://github.com/codingo/crithit

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

bugbounty enumeration hacking hacking-tool infosec offensive-security penetration-testing pentest-tools pentesting security security-audit security-tools security-vulnerability web-application-security

Last synced: 19 Jun 2025

https://github.com/athena-os/athena-nix

Athena OS Nix configuration files focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!

cybersecurity hacking learning linux nix nixos os payload pentesting security security-tools

Last synced: 09 Oct 2025

https://github.com/escape-technologies/graphinder

🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️

bugbounty finder graphql osint reconnaissance security spider subdomain-enumeration subdomain-scanner

Last synced: 06 Apr 2025

https://github.com/build-on-aws/cloud-clubs-learner-library

A library for learners! Whether or not you're a part of AWS Cloud Clubs, take a look in this library for free, open, leveled content for students 18+ worldwide

ai aws containers data-analytics data-science databases iot kubernetes ml mobile-development security serverless web web-development

Last synced: 09 Apr 2025

https://github.com/netflix/nfwebcrypto

Web Cryptography API Polyfill

security

Last synced: 01 Jul 2025

https://github.com/berstend/node-safe

🤠 Make using Node.js safe again with Deno-like permissions

developer-tools macos nodejs npm sandbox security yarn

Last synced: 09 Apr 2025

https://github.com/InfoSecWarrior/Offensive-Payloads

List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications.

bugbounty payloads pentest pentesting security vulnerability-assessment wordlists

Last synced: 27 Sep 2025

https://github.com/ashwin-patil/blue-teaming-with-kql

Repository with Sample KQL Query examples for Threat Hunting

azure azure-data-explorer azure-sentinel blueteaming kql loganalytics security siem threat-hunting

Last synced: 26 Mar 2025

https://github.com/xepor/xepor

Xepor, a web routing framework for reverse engineers and security researchers, brings the best of mitmproxy & Flask

hacktoberfest http mitm mitmproxy mitmproxy-addons python reverse-engineering security

Last synced: 04 Apr 2025

https://github.com/reverseclabs/drozer-agent

The Android Agent for the Drozer Security Assessment Framework.

android drozer java mobile mobsec mwr pentesting reversec security withsecure

Last synced: 10 Sep 2025

https://github.com/target/halogen

Automatically create YARA rules from malicious documents.

cfc detection security target-cfc

Last synced: 05 May 2025

https://github.com/Sachin-v3rma/Astra

Astra is a tool to find URLs and secrets inside a webpage/files

bugbounty hacking infosec pentesting security

Last synced: 12 Jul 2025

https://github.com/Netflix/NfWebCrypto

Web Cryptography API Polyfill

security

Last synced: 15 Mar 2025

https://github.com/rennf93/fastapi-guard

A security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. It integrates seamlessly with FastAPI to offer robust protection against various security threats.

api fastapi ip middleware python rest security

Last synced: 16 May 2025

https://github.com/elghazal-a/autowire

Automatically configure Wireguard interfaces in distributed system. It supports Consul as backend.

consul devops networking security vpn wireguard

Last synced: 05 Sep 2025

https://github.com/coder/httpjail

HTTP(s) request filter for processes

ai firewall security

Last synced: 22 Sep 2025

https://github.com/lockc-project/lockc

Making containers more secure with eBPF and Linux Security Modules (LSM)

containers ebpf kubernetes lsm lsm-hooks security

Last synced: 03 Apr 2025

https://github.com/nerrorsec/Google-Dorker

Automate dorking while doing bug bounty or other stuffs.

bug-bounty bugbounty github-dorking google-dorking infosec osint pentesting security shodan-dorks

Last synced: 30 Apr 2025

https://github.com/electroniccats/huntercatnfc

The Hunter Cat NFC is the latest security tool for contactless (Near Field Communication) used in access control, identification and bank cards. Specially created to identify NFC readers and sniffing tools, with this tool you can audit, read or emulate cards of different types.

arduino emulation huntercat nfc nfc-card-reader nfc-emulation nfc-reader nfc-writer security security-audit security-tools

Last synced: 31 Aug 2025

https://github.com/paloaltonetworks/iron-skillet

IronSkillet is a set of day-one configuration templates for PAN-OS to enable alignment with security best practices. See the Quick Start section below to get started using the template configurations.

ngfw ngfw-configuration pan-os panorama security skillets

Last synced: 07 Apr 2025

https://github.com/g-research/siembol

An open-source, real-time Security Information & Event Management tool based on big data technologies, providing a scalable, advanced security analytics framework.

big-data cloud gr-oss metron security siem

Last synced: 16 Jul 2025

https://github.com/profuzzbench/profuzzbench

ProFuzzBench - A Benchmark for Stateful Protocol Fuzzing

benchmarking fuzzing security

Last synced: 12 May 2025

https://github.com/joranhonig/vertigo

Mutation Testing for Ethereum Smart Contracts

ethereum mutation-testing mutations security solidity testing

Last synced: 05 Apr 2025

https://github.com/bitbrute/evillimiter-windows

Tool that limits bandwidth of devices on the same network without access.

hacking hacking-tools networking pentesting security security-tools

Last synced: 11 Sep 2025

https://github.com/k4yt3x/sysctl

K4YT3X's Hardened & Optimized Linux Kernel Parameters

hardening linux security sysctl

Last synced: 10 Apr 2025

https://github.com/G-Research/siembol

An open-source, real-time Security Information & Event Management tool based on big data technologies, providing a scalable, advanced security analytics framework.

big-data cloud gr-oss metron security siem

Last synced: 14 May 2025

https://github.com/mrexodia/phnt-single-header

Single header version of System Informer's phnt library.

debugger native processhacker sdk security systeminformer wdk windows windows-internals

Last synced: 04 Apr 2025

https://github.com/hugorcd/shelve

Open-source secret & environment management. Secure, simple, collaborative. CLI & Github Sync

cli collaboration developer-experience developer-tools env environment-variables github open-source secrets secrets-management security self-hosted workflow

Last synced: 16 May 2025

https://github.com/keshav-space/safenotes

Safe Notes is a security project aimed at providing an encrypted, private note manager that works locally and protects notes from various threat actors.

android anonymity dart encryption flutter hacktoberfest localization notes-app privacy security

Last synced: 07 Apr 2025

https://github.com/JoranHonig/vertigo

Mutation Testing for Ethereum Smart Contracts

ethereum mutation-testing mutations security solidity testing

Last synced: 18 Apr 2025

https://github.com/taviso/cefdebug

Minimal code to connect to a CEF debugger.

cef electron security windows

Last synced: 13 Jun 2025

https://github.com/cloudposse-archives/tfmask

Terraform utility to mask select output from `terraform plan` and `terraform apply`

mask masking regex security terraform terraform-plans terrahelp

Last synced: 09 Apr 2025

https://github.com/Cuerz/PoC-ExP

【漏洞Poc知识库】一个网络安全爱好者对网络上一些漏洞poc的收录。

exp poc security

Last synced: 28 Sep 2025

https://github.com/cuerz/poc-exp

【漏洞Poc知识库】一个网络安全爱好者对网络上一些漏洞poc的收录。

exp poc security

Last synced: 27 Mar 2025

https://github.com/martin-olivier/airgorah

A WiFi security auditing software mainly based on aircrack-ng tools suite

aircrack-ng gui kali linux-app security security-audit wifi wifi-security wireless

Last synced: 05 Apr 2025

https://github.com/FadeMind/hosts.extras

Extra rules for StevenBlack's hosts project [ https://git.io/Je0XR ] See also hosts.whitelists [ https://git.io/J3bdI ]

adblock adblocker hosts hostsfile linux privacy security steven-black-hosts windows

Last synced: 11 Jul 2025

https://github.com/enemy-submarine/pidrila

Python Interactive Deepweb-oriented Rapid Intelligent Link Analyzer

appsec bug-bounty dirbuster hacking netstalking penetration-testing pentest pentesting python scanner scanner-web security

Last synced: 28 Mar 2025

https://github.com/tprynn/web-methodology

Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki

application-security appsec documentation security security-testing web web-application web-application-security

Last synced: 11 Jul 2025

https://github.com/eddiejibson/limitrr

Light NodeJS rate limiting and response delaying using Redis - including Express middleware.

authorization brute-force discriminator expiry express-middleware expressjs force ip light limiting maximum nodejs promise protection rate rate-limiter redis security security-tools

Last synced: 09 Apr 2025

https://github.com/snyk/vulncost

Find security vulnerabilities in open source npm packages while you code

security vscode-extension vulnerabilities

Last synced: 01 Apr 2025

https://github.com/kataras/jwt

A fast and simple JWT implementation for Go

go golang json-web-token jsonwebtoken jwt security web

Last synced: 04 Apr 2025

https://github.com/osiam/osiam

MIT licensed Open Source Identity and Access Management implementing OAuth 2.0 and SCIMv2.

iam oauth2 osiam scim security

Last synced: 03 Apr 2025

https://github.com/pelock/pelock-software-protection-and-licensing-sdk

Software copy protection against cracking & reverse engineering with anti-cracking & anti-debugging techniques. Software license key system with time trial options.

anti-cracking anti-debugging antipiracy binder cracking exe exe-protector licensing licensing-sdk monetization pelock protection registration reverse-engineering reverseengineering security trial trial-settings

Last synced: 08 Apr 2025

https://github.com/zR00t1/WannaCry

基于C#编写的WannaCry模拟病毒,通常应用于网络安全应急演练

cybersecurity ransomware security virus-joke wannacry

Last synced: 11 Jul 2025

https://github.com/cackle-rs/cackle

A code ACL checker for Rust

rust-lang security supply-chain

Last synced: 08 Apr 2025

https://github.com/oooindefatigable/BadUSB-GPT

This repo houses Rubber Ducky scripts integrated with OpenAI's GPT. Designed for ethical hackers and researchers, it merges quick Ducky executions with GPT's intelligence. Always use responsibly and with proper permissions.

ai-powered-scripts ducky-ai-integration ducky-scripts openai pentesting-tools rubber-ducky security

Last synced: 05 Sep 2025

https://github.com/cisagov/ScubaGoggles

SCuBA Secure Configuration Baselines and assessment tool for Google Workspace

cisa cybersecurity google google-workspace gws opa open-policy-agent open-source python scuba security security-automation

Last synced: 10 Mar 2025

https://github.com/tristanlatr/burpa

Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used to setup Dynamic Application Security Testing (DAST).

burpsuite devsecops rest-api-client security security-automation security-tools

Last synced: 03 Jul 2025

https://github.com/r-lib/keyring

:closed_lock_with_key: Access the system credential store from R

keyring r security

Last synced: 15 May 2025

https://github.com/troennes/private-secure-windows

Privacy and security baseline for personal Windows 10 and Windows 11

group-policy hardening privacy security security-hardening windows windows10 windows11

Last synced: 13 Jul 2025

https://github.com/4km3/docker-dnsmasq

Alpine Linux-based dnsmasq Docker image.

dnsmasq docker networking security

Last synced: 06 Apr 2025

https://github.com/spatie/laravel-authorize

A middleware to check authorization

authorization laravel middleware php security

Last synced: 05 Apr 2025

https://github.com/voorhoede/lighthouse-security

Runs the default Google Lighthouse tests with additional security tests

audit cli developer-tools lighthouse reporting security web-security

Last synced: 06 Apr 2025

https://github.com/rpetrich/deciduous

App that simplifies building decision trees to model adverse scenarios

chaos-engineering resilience security

Last synced: 29 Jun 2025

https://github.com/duo-labs/secret-bridge

Monitors Github for leaked secrets

secrets secrets-detection security

Last synced: 12 Jul 2025

https://github.com/sls-mentor/sls-mentor

Analyze your AWS serverless app in one command! 30+ best practices to improve costs💰 security🛡 stability🧘‍♀️ speed🚀 and sustainability🌱

analysis audit aws best-practices compliance cost-optimization dynamodb lambda learn s3 security serverless sns sqs

Last synced: 13 Apr 2025

https://github.com/zalando-incubator/remora

Kafka consumer lag-checking application for monitoring, written in Scala and Akka HTTP; a wrap around the Kafka consumer group command. Integrations with Cloudwatch and Datadog. Authentication recently added

akka-http authentication cloudwatch consumer consumer-group consumer-lag-checking datadog datadog-agent kafka lag monitoring remora scala security zalando zalando-dublin

Last synced: 20 Aug 2025