An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/pbloem/cleartxt

A simple website (cleartxt.info) designed to quickly inform website owners about the problem of cleartext passwords.

best-practices security website

Last synced: 12 Apr 2026

https://github.com/gomatic/exposure

Secret store

aws encryption kms s3 security

Last synced: 09 Apr 2025

https://github.com/lycshub/malfuse

malFuse is a local HTTP proxy firewall that prevents software supply chain poisoning by intercepting package install requests and blocking malicious packages before they reach your disk. Built in Go with zero runtime dependencies.

dependency-security malicious-package-blocker ossf package-manager poisoning poisoning-attack security supply-chain-attack-detection

Last synced: 29 May 2026

https://github.com/humzaakhtarr/vulnerabilitymanagement-using-nessus-essentials-

A guide for accessing vulnerabilities. You will access vulnerabilities using a Windows 10 VM, set up Nessus Essentials on your system, run multiple scans carrying out various tasks including (installing old software versions, tweaking system settings and setting up credentials), compare the scans, remediate them by performing the tasks mentioned.

cybersecurity nessus-scanner security vulnerability-management vulnerability-scanners

Last synced: 21 Jan 2026

https://github.com/fastuptime/csrf-shield

🚀 csrf-shield is a middleware for protecting web applications from Cross-Site Request Forgery (CSRF) attacks. It integrates easily with Express.js and ensures that your forms and requests are secure.

csrf express expressjs security

Last synced: 09 Apr 2025

https://github.com/jantytgat/go-transcrypt

go-transcrypt provides functionality to encrypt arbitrary data into a hex encoded string for safe on-disk storage

encryption-decryption encryption-library golang golang-library golang-package security

Last synced: 02 Mar 2026

https://github.com/geeknik/cereal-reaction

A sophisticated security tool designed to find critical deserialization vulnerabilities in React applications. It specializes in detecting P0/P1/P2 level security bugs that could break the Internet.

bug-bounty deserialization fuzzing react research security vulnerability-scanner

Last synced: 14 Jul 2026

https://github.com/clay-good/qiuth

Transform API keys from bearer tokens into proof-of-possession tokens, requiring multiple authentication factors to prevent unauthorized access even if your API key is leaked.

api proof-of-possession security

Last synced: 18 Jan 2026

https://github.com/mrwanashraf/chativate-peer-to-peer

a free software project that aims to offer a secure chat app that cares about user's privacy using Peer-To-Peer model

chat-application privacy-protection security

Last synced: 09 Apr 2025

https://github.com/sami-bre/danielgraham_ethicalhacking

a github repository to my codes working through the book

detectors hacking-tools network-scanner python reverse-shell security

Last synced: 14 Jul 2026

https://github.com/humzaakhtarr/VulnerabilityManagement-using-Nessus-Essentials-

A guide for accessing vulnerabilities. You will access vulnerabilities using a Windows 10 VM, set up Nessus Essentials on your system, run multiple scans carrying out various tasks including (installing old software versions, tweaking system settings and setting up credentials), compare the scans, remediate them by performing the tasks mentioned.

cybersecurity nessus-scanner security vulnerability-management vulnerability-scanners

Last synced: 29 Oct 2025

https://github.com/ashutosh0x/aardvark-security-scanner

An AI-powered security scanning system with automated triage, sandbox validation, and patch suggestions. Integrates Semgrep, Bandit, Trivy with LLM analysis for comprehensive vulnerability detection and remediation.

ai automated-patching bandit cybersecurity devsecops docker github-actions go javascript llm openai python sandbox security security-automation security-research security-tools semgrep trivy vulnerability-scanning

Last synced: 13 Apr 2026

https://github.com/euandrelucas/adg-crypto

API simples e rápida para criptografar textos e arquivos com Node.js + Fastify.

crypto decryption encryption file-encryption secure-api security text-encryption

Last synced: 25 Apr 2025

https://github.com/vsingh55/devsecops-pipeline

DevSecOps Pipeline ensures secure, automated, and continuously monitored CI/CD processes on GCloud. It integrates security by design, leverages automation through Jenkins and Docker, and employs continuous monitoring with Prometheus and Grafana to maintain application and infrastructure health.

automation bash devsecops docker dockerhub gcp gmail graphana kubernetes prometheus security sonarqube terraform terraform-module trivy

Last synced: 13 Apr 2026

https://github.com/didrod205/cookie-doctor

Lint Set-Cookie headers for security locally — missing HttpOnly/Secure/SameSite, SameSite=None without Secure, over-broad Domain, and __Host-/__Secure- prefix violations that make browsers silently drop your cookie. Deterministic CLI, JSON/MD reports.

appsec cli cookie csrf devsecops httponly linter samesite secure security security-headers session set-cookie typescript web-security

Last synced: 16 Jun 2026

https://github.com/didrod205/unspook

Reveal & remove invisible, dangerous & confusable characters in your text — zero-width spaces, BOMs, bidi (Trojan Source), homoglyphs, smart quotes. 100% local. Web app + library + CLI.

homoglyph invisible-characters prompt-injection security smart-quotes text-cleaner trojan-source unicode zero-dependency zero-width-space

Last synced: 16 Jun 2026

https://github.com/d-beloved/gitsentry

AI-powered GitHub App that reviews every PR and push for security vulnerabilities introduced by AI coding tools (Copilot, Cursor, Claude Code, etc.).

ai code-review copilot cursor devsecops github-app nodejs security

Last synced: 14 Jul 2026

https://github.com/pronzzz/awesome-android-foss

A curated "Awesome" list of Free and Open Source Software (FOSS) Android applications, categorized by utility and privacy features. The collection includes tools like NetGuard, KISS Launcher, and other privacy-focused apps, complete with direct links to F-Droid and source code.

android android-apps apps awesome awesome-list curated-list f-droid foss open-source privacy security

Last synced: 22 Feb 2026

https://github.com/simoneonofri/inclusion-2024-simone

Slide Deck for Inclusion 2024 Conference

identity security threat-modeling w3c

Last synced: 18 Jan 2026

https://github.com/deadlysurgeon/plainsight

An example of something terrible in plain sight

golang proof-of-concept security supply-chain-security

Last synced: 15 Jul 2026

https://github.com/figuren-theater/ft-security

Security related components for a WordPress Multisite plattform like figuren.theater

anti-spam brute-force-protection haveibeenpwned security wordpress wordpress-muplugin

Last synced: 04 Feb 2026

https://github.com/hk-transfield/java-password-authenticator-app

A simple password-based authentication system that follows NIST guidelines.

authentication login login-system password password-hashing-algorithms security

Last synced: 15 Jul 2026

https://github.com/didrod205/csp-doctor

Lint a Content-Security-Policy for XSS holes locally — 'unsafe-inline', wildcards, missing directives, and allowlisted hosts that bypass CSP (JSONP/AngularJS). Nonce/strict-dynamic aware. Deterministic CLI, JSON/MD reports, no website.

appsec cli content-security-policy csp csp-evaluator devsecops linter security security-headers strict-dynamic typescript web-security xss zero-dependency

Last synced: 16 Jun 2026

https://github.com/yogeshnile/aws-iam-policies

Here I and contributors update all condition-wise iam policy of aws.

aws aws-iam iam-policy security

Last synced: 16 Jul 2025

https://github.com/barikad/gitlabmonitor

Un script shell robuste pour surveiller automatiquement l'apparition de nouveaux dépôts publics sur une instance GitLab et envoyer des notifications par email lors de leur première détection.

gitlab monitor public security

Last synced: 13 Apr 2026

https://github.com/nabilmouzouna/exp-v0

This website demonstrates SQL injection vulnerabilities by simulating weak database security and minimal input validation. It shows how attackers can exploit these flaws, underscoring the need for secure coding practices.

pentesting security sqlinjection vunerability websecurity

Last synced: 05 Feb 2026

https://github.com/indece-official/clair-client

Command line client for quay/clair v4.x.x

clair clair-scanner docker docker-security security security-tools

Last synced: 05 Feb 2026

https://github.com/ntdls/securechat

Secure chat instant messaging server and client, offering multi-layered peer-to-peer encryption.

aes-encryption chat encryption messenger peer-to-peer-chatting public-key-cryptography quantum-resistant-cryptosystems rsa-cryptography security

Last synced: 11 Mar 2025

https://github.com/oaslananka/boardreadyops

Board-ready operations toolkit for governance evidence, release discipline, issue triage, security controls, and executive reporting across software delivery workflows.

automation ci-cd compliance evidence github-actions governance issue-triage operations project-management release-management reporting security typescript

Last synced: 30 May 2026

https://github.com/p10ns11y/arch-machine

**The only Arch Linux setup that audits itself harder than your ex audits your text messages 👀💔**. Meet arch-machine 🛡️🤖 — your AI-forged, profile-based Arch Linux fortress 🏰 that turns a fresh install into a paranoid, self-healing, ML/AI-ready workstation ⚡ faster than you can say “yay/paru/pacman … oh god why is it still compiling” 😩�

agents ai archlinux devex installers ml security sentinels shell system-audit tools virusscan vulenrability

Last synced: 30 May 2026

https://github.com/mssm199996/mssecurity

Maven dependancy which i always use for copyright purposes for my java desktop applications

computer-identification copyright-scan decryption java java-8 maven security uncryption windows

Last synced: 13 Apr 2026

https://github.com/thecomputeguy/jedi

A web malware analysis framework for PHP-based backends

cms malware-detection python security

Last synced: 26 Apr 2025

https://github.com/gregl83/comandare

TCP Command Line Execution

backdoor rust security tcp

Last synced: 09 Apr 2025

https://github.com/gregl83/pseudo-root

Sudo make me root

root rust security sudo

Last synced: 09 Apr 2025

https://github.com/miccy/dont-be-shy-hulud

🪱 NPM Worm Defense Guide: Detection, remediation & prevention for Shai-Hulud 2.0 and beyond!

article bun defense detection devops malware malware-detection ncident-response nodejs npm security security-audit security-tools shai-hulud shai-hulud-detector supply-chain worm

Last synced: 13 Jan 2026

https://github.com/didrod205/jwtlens

Decode, audit & verify JWTs entirely offline — stop pasting live tokens into jwt.io. Local signature verification (HS/RS/PS/ES/EdDSA) with your own secret/PEM/JWK, plus a security lint (alg:none, exp, aud/iss). Deterministic CLI, JSON/MD reports.

appsec auth authentication cli json-web-token jws jwt jwt-cli jwt-decode node offline security token typescript verify

Last synced: 16 Jun 2026

https://github.com/didrod205/entropass

Generate strong, bias-free passwords (random/pronounceable/PIN) and measure strength — entropy & crack time — 100% locally. Zero deps. Web app + library.

crypto csprng entropy passphrase password password-generator password-strength secure-random security zero-dependency

Last synced: 16 Jun 2026

https://github.com/asankasovis/password-manager-csharplibrary

🔐 Muragala is a password manager designed to make managing passwords easy and secure. My goal is to make it a secure and reliable password manager available in the public domain for everyone to use. Privacy and security is for everyone, this is the core value behind this project.

csharp password password-generator password-manager security

Last synced: 28 Mar 2025

https://github.com/kotyara12/realarm

Охранно-пожарная сигнализация

alarm esp-idf esp32 esp32-idf secure security

Last synced: 13 Apr 2026

https://github.com/owlscan/owlscan

OwlScan is a community-powered, open-source OSINT intelligence framework built for security researchers, penetration testers, investigators, and enthusiasts. It combines web scraping, network reconnaissance, people intelligence aggregation, and threat analysis into a single cohesive platform.

automation bug-bounty cybersecurity dns-recon ethical-hacking flask footprinting hacking information-gathering infosec network-scanner osint penetration-testing python recon reconnaissance security security-research security-tools threat-intelligence

Last synced: 30 May 2026

https://github.com/lucasgdb/password-generator

Gerador de Senhas gratuito para Desktop (Windows 7 e posterior)

generator password security

Last synced: 13 Apr 2026

https://github.com/iboudhaine/rsa-encryption-and-in-practice

Implementation and exploration of RSA encryption, including its security properties, practical applications, and real-world use cases. A class project to learn and experiment with cryptographic principles

cryptographic-algorithms cryptography cryptography-project encryption python rsa secure-communication security

Last synced: 15 Jul 2026

https://github.com/itsmestefanjay/camunda-security-example

Example on how to whitelist classes in the spin api to prevent unwanted deserialization into java classes

camunda deserialization java security spin

Last synced: 06 Jul 2025

https://github.com/f33rni/homeland-sees

RaspberryPi / OrangePi based simple automated surveillance camera project with Telegram bot integration

bot camera ffmpeg home-security orange-pi orangepi python raspberry-pi security surveillance telegram telegram-bot

Last synced: 20 Apr 2026

https://github.com/gpappsoft/privacyidea-ansible

Ansbile role to deploy privacyidea container from privacyidea-docker project on Ubuntu

ansible ansible-role deployment docker mfa otp privacyidea security ubuntu

Last synced: 12 Mar 2026

https://github.com/doctena-org/octorules-bunny

Bunny.net Shield WAF provider for octorules

bunny firewall iac octorules security waf yaml

Last synced: 18 Apr 2026

https://github.com/infineon/mtb-example-psoc6-security

This is a minimal starter dual-CPU security application template for PSoC™ 62/63 MCU devices. This code example is meant to be a companion to the AN221111 – PSoC™ 6 MCU: Designing a secured system application note. It demonstrates the following features to create a secured system as explained in the application note.

cy8ckit-062-ble cy8ckit-062-wifi-bt cy8ckit-062s2-43012 cy8cproto-062-4343w cy8cproto-062s3-4343w cy8cproto-063-ble security

Last synced: 25 Jun 2025

https://github.com/sylphxai/typescript

Strict, AI-optimized TypeScript monorepo: ESLint Flat Configs, tsconfig, Prettier, and guidelines for modern TypeScript projects.

ai eslint eslint-config flat-config guidelines monorepo prettier react react-native security sonarjs strict styleguide sylph sylphlab tsconfig turborepo typescript unicorn vue

Last synced: 18 May 2026

https://github.com/djvirus9/awesome-devsecops-mastery-2026

🛡️ A curated, actionable checklist for securing CI/CD pipelines and Kubernetes clusters in 2026.

automation awesome checklist cybersecurity devsecops kubernetes security techniques

Last synced: 12 Mar 2026

https://github.com/zd87pl/slm-vault

Privacy-first AI personal data manager. A local trusted agent that external AIs command via MCP — they never see your documents. Encrypted storage, local RAG, activity logging, and per-agent permissions.

agentic-ai ai apple-silicon encryption llm local-first mcp mlx model-context-protocol personal-data privacy python rag security

Last synced: 13 Apr 2026

https://github.com/sziller/_sallet_visor

Online module of the Sallet universe. Low level, advanced Bitcoin wallet handling public data only. Coin selection, token management, gateway to an airgapped SKULL unit.

application bitcoin coin-selection desktop-app kivy low-level mobile-app nft python3 qr-code security tokens utxo-wallet wallet

Last synced: 17 Jan 2026

https://github.com/jpkcom/jpkcom

Administrator, Consultant, Designer & Developer

11ty administration css design developer development drupal html5 javascript php security seo typo3 wordpress

Last synced: 13 Apr 2026

https://github.com/jrgil20/security_in_operatingsystems

yo y mi afán de usar MarkDown para llevar mis apuntes. Repositorio con información de como funciona la seguridad en sistemas operativos

markdown-notes notes operating-system security

Last synced: 08 Jan 2026

https://github.com/valera-rozuvan/gen2fa

generate 2FA codes helper utility

2fa 2fa-security security

Last synced: 15 Jul 2026

https://github.com/0xtter/pentestingwebsiteauditchallenge

This project provides a comprehensive penetration testing audit, report, and fixed version of a website to improve site security. The report analyzes potential security risks and recommends actionable solutions. By identifying and addressing website vulnerabilities, this project helps ensure the safety and security of websites and their users.

audit pentesting security vulnerabilities

Last synced: 15 Jul 2026

https://github.com/pahaz/open-node-js-edr

Secure one file easy to understand and install zero-dependent cross-platform Endpoint Detection & Response security tool

cross-platform edr endpoint-protection endpoint-security open-source reverse-shell security

Last synced: 26 Mar 2025

https://github.com/7ussainnabeel/web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

osint privacy security security-tools sysadmin

Last synced: 13 Jul 2025

https://github.com/szgabsz91/oauth2-authorization-proxy-client

Client libraries for OAuth2 Authorization Proxy

angularjs facebook google oauth2 security vanillajs

Last synced: 27 May 2026

https://github.com/Scetrov/void-eid

Void eID — EVE Frontier Tribe Management Portal based around open standards and technology, designed to unify products and services within the ecosystem.

access-management eve-frontier identity identity-management information-security joiner-mover-leaver security

Last synced: 30 May 2026

https://github.com/0n1con3/the-antiipgrabber-blocklist

The AntiIP-Grabber Blocklist: A comprehensive and continually updated collection of IP addresses identified due to proven activities related to IP grabbing. This list assists in protecting your networks and systems from unwanted intrusions and potentially harmful activities by blocking access from these specific addresses.

adblocker adblocker-lists adguard cybersecurity docker firewall firewall-rules ip linux networking pihole safeguard security security-audit security-tools

Last synced: 05 Feb 2026

https://github.com/zebbern/secops-cli-guides

A collection of essential penetration testing and Linux administration commands, compiled in easy-to-use PDFs. This repository includes detailed guides on tools like Metasploit, Nmap, Sqlmap, Hydra, and Linux system management. Ideal for ethical hackers, sysadmins, and security professionals. More resources coming soon!

api buffer-overflow bugbounty burp-suite cloud cloud-pentesting cross-site-scripting csrf ddos exploits guide linux networking pentesting privilege-escalation secops security toolset wireshark

Last synced: 24 Dec 2025

https://github.com/jeffmaley/awsssoreporting

Reports on Users/Group, Permission Sets, and Account Assignments

audit aws cloud-computing cloud-security cloud-security-audit iam secops security security-tools

Last synced: 14 Jan 2026

https://github.com/vladimyr/gh-sec

Github security alerts CLI

cli github nodejs security vulnerabilities

Last synced: 03 May 2026

https://github.com/ernanej/natalmaissegura

como modo de solucionar e auxiliar a segurança natalense, o projeto Natal + Segura consiste em implementar duas plataformas, uma mais simples e voltada para dispositivos móveis e outra mais trabalhada, sendo um site responsivo.

natal-rn project security

Last synced: 08 Jan 2026

https://github.com/mayacostantini/sigstore-roles

Ansible roles to deploy Sigstore components

ansible security sigstore

Last synced: 12 Sep 2025

https://github.com/colesmcintosh/vibe-security-ai

A professional command-line tool that leverages Claude 4 Sonnet to perform comprehensive security analysis on your code. Get detailed security reports with actionable recommendations to improve your code's security posture.

ai claude-4 security vibe-coding

Last synced: 12 Mar 2026

https://github.com/walterthesmart/nextofkin

The Next of Kin smart contract, built on the Stacks blockchain using the Clarity language, allows users to deposit their STX tokens and assign recipients who will receive the tokens after a year of user inactivity. Utilizing chainhooks to monitor activity, the contract ensures automated distribution of assets.

bitcoin blockchain-technology clarity escrow security stacks

Last synced: 25 Apr 2026

https://github.com/saugataroyarghya/openclaw-file-guard

Multi-user file ownership and access control for OpenClaw individual agents. Protects skills, core markdown files from edits by unauthorized chat users.

access-control acl authorization discord-bot file-permissions middleware multi-user openclaw openclaw-plugin security slack-bot

Last synced: 08 May 2026

https://github.com/dvkunion/customs

海关(Customs) - Github Action 镜像数据收集与分析,为云安全研究提供数据支持。

actions cloud-native docker images security

Last synced: 13 Apr 2026

https://github.com/shnatsel/libdiffuzz-c99

Custom memory allocator that helps discover reads from uninitialized memory (portable C99 implementation)

fuzz-testing fuzzing memory-allocator portable sanitizer security security-audit security-testing security-tools

Last synced: 16 Jul 2026

https://github.com/john-breton/WATER

A security focused Internet measurement framework to map the threat landscape for users that require accessibility tools to access the Internet

internet-measurements madweb23 python research-paper security selenium-python wcag21 web-accessibility

Last synced: 11 Mar 2025

https://github.com/zoracon/zoracon.github.io

My corner of the web. I also blog a bit.

security

Last synced: 10 Jan 2026

https://github.com/sushantnair/is

A collection of experiments I have performed for the course "Information Security" as part of the curriculum for Semester 6 of TY B. Tech. Computer Engineering at KJ Somaiya College of Engineering.

captcha cipher-algorithms recaptcha security

Last synced: 06 Jul 2025

https://github.com/bklockly/shadowmeld

🕶️ 隐蔽Shellcode嵌入与反检测加载器生成框架 / Stealthy Payload Delivery Framework with Anti-EDR Capabilities

bypass-antivirus bypass-av cipher cryptography hacking hide-files image-steganography lsb-steganography security shellcode shellcode-loader

Last synced: 16 Mar 2025

https://github.com/center-key/grails-security-plugin

Straightforward security you can understand

authentication grails grails-plugin groovy security

Last synced: 01 Apr 2025

https://github.com/csaba79-coder/amigoscodejsonwebtokenjwt

JSON Web Token, Security, Authentication, Authorization

authentication authorization jsonwebtoken security

Last synced: 26 Mar 2025

https://github.com/bval/hubot-security-posters

Return a random NSA security poster from the 1950s-60s

hubot-scripts security

Last synced: 07 Dec 2025

https://github.com/smaranjitghose/sightguardai

Capitalizing moondream's capabilities to build a CCTV frame-on-framer analyzer

computer-vision llm localllm moondream python security streamlit vlm

Last synced: 10 May 2026

https://github.com/komachi/ansible-decent-router

Ansible playbook to provide decent router experience

ansible ansible-playbook playbook router security

Last synced: 25 May 2026

https://github.com/sarthiai/drishti

Self-hostable content safety for LLM systems: prompt-injection detection, PII detection and redaction, and output-safety scoring. A Rust core that runs on your own hardware and returns calibrated scores, not verdicts. Ships as a Rust crate, Python and Node SDKs, an HTTP server, and a Docker image.

ai-safety content-moderation content-safety guardrails llm llm-guardrails llm-security machine-learning moderation nlp nodejs onnxruntime pii-detection pii-redaction prompt-injection prompt-injection-detection python rust security self-hosted

Last synced: 18 Jul 2026

https://github.com/jackchuka/git-customs

Client-side, cross-host pre-push gate that catches PII and secrets — using an engine you choose — before anything reaches a public remote.

ai-tools audit git security

Last synced: 16 Jul 2026

https://github.com/sudhanplayz/ecdsa-node

Secure, centralized transfers with Elliptic Curve Signatures.

crypto cryptography ecdsa elliptic-curve-cryptography elliptic-curves security

Last synced: 29 Oct 2025

https://github.com/kathleenwest/wcfauthenticationdemo

This project presents a Visual Studio solution including a simple demo WCF Authentication Service Application and a “Tester” Client (Windows Form Application) that allows the user to test the user registration, login, logout, and service operations. In addition to demonstrating standard authentication capabilities, the WCF service implements a custom username and password validator pattern. Passwords are stored securely using Password-Based Key Derivation Function PBKD cryptology of which the implementation is discussed. A custom error handler ensures that exceptions are properly wrapped into WCF Faults and communicated to the client caller. Certificates are discussed along with how to implement a server certificate on a client machine for development testing of “integrity” and application trust. The project includes a demo certificate and script for generating self-signed dev certificates, which must be installed into the client certificate store for the client tester application to trust and access the demo service. The client “tester” windows form application is not intended as a UX/UI demo but used to test and verify that the backend authentication service registration, login, logout, service operations, and callbacks are working as expected and sending proper WCF fault messages. Lastly, the project is shown in the demo section with a video and screen captures.

authentication certificate certificate-generation cryptology csharp custom-validation custom-validators error-handling password-hash password-safety password-store pbdk security service wcf wcf-bindings wcf-client wcf-service wcf-service-client-demo windows-communication-foundation

Last synced: 18 Jul 2026

https://github.com/cdot65/device-certificate-report

A Python-based CLI tool to generate device certificate reports from PAN-OS devices.

certificates network paloaltonetworks panos reporting security

Last synced: 14 Jan 2026