Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/infobyte/faraday_zap

Zap Extension for collaboration in Faraday

appsec collaboration faradaysec pentesting security zap zap-extension

Last synced: 18 Jun 2026

https://github.com/structured-world/xml-sec

Pure Rust XML Security: XMLDSig, XMLEnc, C14N. Drop-in replacement for libxmlsec1.

c14n pure-rust rust saml security xml xml-signature xmldsig xmlenc

Last synced: 02 Apr 2026

https://github.com/anubissbe/github-runnerhub

Enterprise-grade GitHub Actions self-hosted runner management system with proxy architecture, auto-scaling, security scanning, and comprehensive monitoring

auto-scaling docker enterprise github-actions security self-hosted-runners typescript

Last synced: 05 May 2026

https://github.com/volksrat71/react2shellexploitvisualized

Interactive visualization of the React2Shell (CVE-2025-55182) RCE vulnerability with narrated animations for three audiences: Expert, Practitioner, and Stakeholder. Audio synced via ElevenLabs + Whisper.

cve cybersecurity educational elevenlabs flight-protocol rce react security server-components svelte visulization vunerability whisper

Last synced: 24 Apr 2026

https://github.com/dubniczky/prototype-pollution

JavaScript Prototype Pollution Attack demo against a NodeJS Express server using Lodash

demo exploit javascript lodash prototype-pollution security yarn-berry

Last synced: 30 Apr 2026

https://github.com/andy-maier/easy-server

Secure server access that is easy to use

access ansible python security server service vault

Last synced: 19 Jun 2026

https://github.com/signum-network/signum-account-activator-v2

Signum Account Activation/Protection Service

blockchain security web3

Last synced: 19 Jun 2026

https://github.com/hashgraph-online/codex-plugin-scanner

Security and best-practices scanner for Codex CLI plugins. Scores plugins 0-100.

cli codex codex-plugins mcp plugin-scanner python scanner security

Last synced: 06 Apr 2026

https://github.com/somoore/powerpipe-turbopuffer-security-benchmark

Powerpipe mod: 16 security controls (tenant isolation, data residency, CMEK, schema hygiene, ops) and branded dashboards for turbopuffer namespaces. Runs over the somoore/turbopuffer Steampipe plugin.

compliance powerpipe powerpipe-mod security sql steampipe turbopuffer vector-search

Last synced: 23 Jul 2026

https://github.com/brainstone/ansible_roles_user_management

Powerful Ansible role to manage user accounts on your systems including sshd config. Configures your sshd config, adds and removes users easily, sets their passwords, groups and authorized_keys.

ansible ansible-galaxy ansible-role security sshd sshd-config sudo

Last synced: 05 May 2026

https://github.com/jaketarnow/seceng

Repo for Security class - Hacks and defenses against common threats and vulnerabilities

hacking networking privacy security vulnerabilities

Last synced: 19 Jun 2026

https://github.com/mgnfy-view/sc-audit-portfolio

A compilation of all my audit reports and findings

audit audit-reports ethereum security security-audit smart-contracts solditiy

Last synced: 19 Jun 2026

https://github.com/xjectro/spring-boot-graphql-api

A modern, scalable API project built with Spring Boot and GraphQL, designed to demonstrate best practices for secure, maintainable, and extensible backend development.

api authentication ayered-architecture backend best-practices example gradle graphql graphql-api java jwt microservice open-source production-ready rest scalable security spring-boot starter template

Last synced: 30 Apr 2026

https://github.com/erlang-punch/berty

A clean, safe and flexible BERT implementation

audit bert elixir erlang etf externaltermformat security serialization serializer

Last synced: 28 Apr 2026

https://github.com/skywardai/paper_gallery

Papers gallery for using LLMs ability over dataset

ai data data-science llm medicine neural-network research security

Last synced: 19 Mar 2026

https://github.com/elastic/example-mcp-app-security

Reference MCP App for Elastic Security — interactive SOC dashboards inside Claude, Cursor, and other MCP hosts.

ai claude cursor elastic mcp model-context-protocol security soc

Last synced: 24 Apr 2026

https://github.com/nomadsdev/cipher-cli

CipherCLI is a command-line tool for AES-256-CBC encryption and decryption. Easily encrypt and decrypt text securely via your terminal.

aes-256-cbc cipher cli crypto decryption encryption nodejs security

Last synced: 02 May 2026

https://github.com/adrelanos/remote-support

Remote Support with NAT Traversal. Using OpenVPN for connection security. Xpra as VNC alternative. Using nat-traverse for NAT Hole Punching. UDP required. Over clearnet.

nat-hole-punching nat-traversal openvpn security vnc vnc-client vnc-server vnc-viewer xpra

Last synced: 17 Apr 2026

https://github.com/yeet-src/claudefeed

Live audit log of every command, file, and network connection a Claude Code (or any matched) session makes, from the kernel.

ai-agents audit bpf ebpf kernel kprobe linux llm observability provenance security tracepoint tracing yeet

Last synced: 20 Jun 2026

https://github.com/advancedhacker101/fpa-extension

Browser extension for FPA password management

authentication chrome-extension fpa password-manager security

Last synced: 02 May 2026

https://github.com/marcelroozekrans/ai.sentinel

Security monitoring middleware for IChatClient (Microsoft.Extensions.AI). 55 detectors for prompt injection, hallucination, PII leakage, and operational anomalies. Intervention engine, embedded dashboard, audit forwarders to Azure Sentinel + OpenTelemetry. Drop-in middleware for any LLM client.

ai-security aot claude-code copilot csharp detection dotnet ichatclient llm-security mcp microsoft-extensions-ai middleware owasp-llm-top10 prompt-injection security

Last synced: 20 Jun 2026

https://github.com/shravzzv/passforge

PassForge is a sleek, secure, and lightning-fast password generator built for everyday use. Customize length, choose character sets, and copy to clipboard in one click—privacy-first, and open source.

nextjs password password-generator react security tailwind

Last synced: 28 Apr 2026

https://github.com/gonicolas12/my_os

Linux distribution with a built-in, local-first AI assistant. A global hotkey opens an assistant that manages files, installs packages, tweaks system settings and controls your PC in natural language — with confirmation for every risky action. Local model (Ollama) by default, optional cloud (Claude). Secure by design.

agentic-ai ai-assistant ai-os arch-linux computer-use desktop-assistant linux llm-agent local-first local-llm mcp ollama open-source operating-system privacy pyside6 python security systemd

Last synced: 21 Jun 2026

https://github.com/sv443/node.js-bcrypt-password-hashing

This is an interactive example of how to hash passwords in Node.js very securely using bcrypt

bcrypt hash hashing javascript js node-js nodejs password password-hash security

Last synced: 29 Apr 2026

https://github.com/rasterandstate/commit-coach

An intelligent commit analysis tool that provides insights and coaching for code changes.

automation ci-cd code-quality code-review commit-analysis git github-action insights nodejs security testing typescript

Last synced: 05 May 2026

https://github.com/lupaxa-security-toolbox/certtool

A clean, modern, fully-typed Python CLI and library for generating self-signed X.509 certificates, certificate signing requests (CSRs), and private keys.

certificates lupaxa lupaxa-security-toolbox security the-lupaxa-project

Last synced: 02 Mar 2026

https://github.com/neospl0it/regexscan

A Tool for scanning and detecting patterns using regular expressions (regex). Find potential leaks, credentials, and sensitive data efficiently

automation-testing credentials cybersecurity go regex regex-match regex-pattern scanner security web-scraping web-security

Last synced: 21 Apr 2026

https://github.com/iietmoon/simple-captcha-js

A lightweight pure javascript simple captcha for guarding your forms.

captcha javascript security website

Last synced: 01 May 2026

https://github.com/the-17/pr-reviewer

Autonomous Python PR reviewer agent serving as the live security-hardening showcase for AgentSecrets—evolving from unsecured baseline to credentials protection (AgentSecrets), cryptographic capabilities (SEC), and behavioral abuse containment (CAD).

ai-agent autonomous-agents pr-reviewer python security

Last synced: 21 Jun 2026

https://github.com/ababyprogrammer/security-foundry

Security a short word but full of meaning, practical, sensitive etc, but full of trouble. Talking and explaining about the security of projects has always been important to programmers...

security

Last synced: 28 Feb 2026

https://github.com/koeonyack/des

🔑Implement DES using C language.

c des security

Last synced: 22 Jun 2026

https://github.com/gbasran/fsoc-portfolio

Sanitized case study of Operation fsoc: a defense-first, multi-phase security engineering project. Threat model, hardening methodology, script design principles, and integration lessons, all redacted to protect live infrastructure.

case-study cybersecurity defensive-security homelab infrastructure security security-engineering threat-modeling

Last synced: 22 Jun 2026

https://github.com/harikrishnareddyl/cato

Universal AI agent safety layer — protect files and commands with configurable rules

ai claude-code cli developer-tools rust safety security

Last synced: 29 Apr 2026

https://github.com/azu/trace-database-response

Assert: Express response raw data from MongoDB

expresss library middleware mongodb plugin security

Last synced: 29 Apr 2026

https://github.com/tunahanaliozturk/secure-dotnet-skills

Aegis — 12 judgment-style agent skills for secure, production-grade .NET on Azure (security, design, performance, concurrency, observability). Works with Claude Code, Codex, Cursor, Gemini.

agent-skills ai-agents appsec aspnetcore azure claude-code csharp dotnet security skills

Last synced: 22 Jun 2026

https://github.com/3tternp/xamppsec

this is an automated script to secure xampp server in one level linux based specially debian and ubuntu based

bash-script linux security security-hardening xampp

Last synced: 04 May 2026

https://github.com/wolfeidau/secure-cloudformation-resources

A group of cloudformation resources which implement a security baseline

aws cloudformation go security

Last synced: 29 Apr 2026

https://github.com/phpmv/ubiquity-security

Security module for Ubiquity framework

php security ubiquity ubiquity-framework

Last synced: 09 Jun 2026

https://github.com/vizzdoom/massgitleaks

Massgitleaks automates bulk secret scanning across multiple git repositories as a gitleaks wrapper with advanced reporting and pentester-friendly features.

automation ci-cd cli cybersecurity devops devsecops git gitleaks hacking pentesting python scanner secops secret secrets secrets-detection security security-tools tools

Last synced: 23 Jun 2026

https://github.com/flavienbwk/docker-iptables

Secure your Docker install with additional and understandable IPTables.

docker iptables linux security ufw

Last synced: 04 May 2026

https://github.com/mecha-cms/x.captcha

Form protection using captcha.

captcha extension security

Last synced: 23 Jun 2026

https://github.com/rodrigokamada/nodejs-encryption

There are two classes in the crypto module called Cipher and Decipher that we are going to use in the example.

aes cipther decipher decryption encryption hacktoberfest nodejs security

Last synced: 21 Apr 2026

https://github.com/hatmahat/go-rbac

Lightweight, framework-agnostic RBAC package for Go with context injection, in-memory caching, and GORM support.

authorization chi echo fiber gin golang middleware rbac security

Last synced: 21 Apr 2026

https://github.com/jawaracloud/bash-collections

This repository contains a collection of Bash scripts for various purposes. Feel free to explore and use these scripts as needed.

bash bash-script linux security shell terminal

Last synced: 20 Apr 2026

https://github.com/lennolium/1guard-ai

Semester's Project - System and Software Engineering 1 - AI

ai macos safari safari-extension security shopping

Last synced: 26 Mar 2026

https://github.com/wdrdres3qew5ts21/redhat-advance-cluster-security-guide

วิธีการใช้งาน Advance Cluster Security กับ Openshift และ Kubernetes และแนะนำ eBPF เบื้องต้น

kubernetes openshift security

Last synced: 24 Jun 2026

https://github.com/holzhaus/ghastly

A security-focused linter for Github Actions Workflows, written in Rust 🦀.

ci command-line-interface github-actions linter rust security workflow yaml

Last synced: 04 May 2026

https://github.com/pungrumpy/blackhead

😈 A vulnerability detection and penetration testing system with automatic report generation

security turborepo typescript website

Last synced: 23 Jul 2026

https://github.com/itallstartedwithaidea/last-mile

Last Mile 360 — The production-readiness platform for vibe-coded apps. Norton-grade trust. Cloudflare-native. Zero origin servers.

ai-agents cloudflare-workers code-quality devops devsecops production-readiness security semgrep typescript vibe-coding

Last synced: 17 Apr 2026

https://github.com/sap-samples/security-research-dp-hierarchical-text

SAP Security Research sample code to reproduce the research done in our paper “On the privacy-utility trade-off in differentially private hierarchical text classification".

research sample sample-code security

Last synced: 20 Apr 2026

https://github.com/skyplabs/kubernetes-security-slideshow

Kubernetes Security, Survival Guide - Presentation

kubernetes presentation presentation-slides revealjs security slideshow

Last synced: 04 May 2026

https://github.com/Perufitlife/firebase-security-skill

Open-source Firebase Firestore Rules auditor: detects 'match /{document=**} if true', expired test-mode rules, auth-without-ownership. Active probe sends anonymous GET to confirm leaks.

audit auditor cli devsecops firebase firestore google leak mit-license nodejs open-source penetration-testing scanner security security-audit typescript vulnerability

Last synced: 25 Jun 2026

https://github.com/magenx/tuzik

Go daemon for Linux that reads audit events from the audisp-af_unix Unix domain socket and automatically deletes or quarantines (moves) files that match a set of configurable rules as soon as they appear

auditd golang monitoring security

Last synced: 22 Apr 2026

https://github.com/flucksite/otori

Invisible captcha spam protection for any Rack-based Ruby app, with a built-in Hanami adapter.

hanami honeypot rack ruby security signals

Last synced: 23 Jul 2026

https://github.com/taufik-nurrohman/markdown-filter

Safely replace text in a Markdown document.

commonmark extra filter markdown php security

Last synced: 29 Apr 2026

https://github.com/realorangeone/django-management-auth

Login to a Django application from a management command

authentication django security

Last synced: 17 Apr 2026

https://github.com/Perufitlife/convex-security

Anonymously audit a Convex backend for public queries/mutations reachable without auth — proves each leak live via the public HTTP API. Zero-dep Node CLI, MIT.

access-control ai-agents auditor baas convex data-exposure devsecops security security-audit serverless

Last synced: 25 Jun 2026

https://github.com/shiroonigami23-ui/aegisos

AegisOS_security_first_lightweight_customizable_open_source_operating_system

customization kernel lightweight open-source operating-system osdev privacy security systems-programming

Last synced: 29 Apr 2026

https://github.com/dafneb/ansible-role-ubuntu24-aide

Ansible Role - Installation of AIDE on Ubuntu 24

aide ansible ansible-role hardening hids security ubuntu ubuntu-server

Last synced: 01 May 2026

https://github.com/arcjet/example-nextjs-bot-protection

An example Next.js site protected by Arcjet bot detection middleware.

arcjet bot-detection developer-tools javascript nextjs nodejs security security-tools typescript

Last synced: 04 May 2026

https://github.com/jenkinsci/armorcode-release-gate-plugin

The ArmorCode Release Gate plugin for Jenkins enforces security policies by blocking or warning CI/CD builds based on validation results.

armorcode-release-gate build-validation devsecops release-gates security

Last synced: 25 Jun 2026

https://github.com/mahdikhoshdel/accesswatch

A tool that retrieves and displays file or directory access information In Linux and Windows

access gid linux python python3 security security-tools ssid uid windows

Last synced: 01 May 2026

https://github.com/cyberanchor/emailcompare

Yet Another comparing email services, focusing on privacy, security, and infrastructure. An interactive web interface, JSON-based data.

anonymity comparison disroot email mailfence onion privacy protonmail providers security service tutanota

Last synced: 29 Apr 2026

https://github.com/nekrassov01/ignoresync

Your shadow repository for ignored files

aws cli git gitignore go security

Last synced: 20 Apr 2026

https://github.com/pforret/digestif

Digestif helps you create unique unguessable URLs (PHP)

laravel php security

Last synced: 16 Apr 2026

https://github.com/simplito/privmx-endpoint-kotlin

Kotlin wrappers for the native C++ library used by PrivMX to handle end-to-end (e2e) encryption.

communication encryption end-to-end-encryption kotlin kotlin-android kotlin-ios kotlin-jvm kotlin-multiplatform-library mobile privmx security

Last synced: 07 Jun 2026

https://github.com/rohansx/vibeguard

Security Property Graph (SPG) oracle for AI coding agents.

ai-agents claude-code cursor devsecops golang mcp security static-analysis taint-analysis

Last synced: 03 Apr 2026

https://github.com/wyre-technology/threatlocker-mcp

MCP server for ThreatLocker — zero-trust application allowlisting, approval requests, audit logs

mcp mcp-server msp security threatlocker zero-trust

Last synced: 10 Jun 2026

https://github.com/alextanhongpin/node-security

Implementing a safer node-express server

express nodejs owasp security

Last synced: 09 May 2026

https://github.com/zeidmakic/quorixjwt

A secure and scalable ASP.NET Core API with JWT authentication, OAuth integration, and role-based authorization. This project demonstrates user management, external login providers, and claims-based access control.

authentication authorization claims-based-authorization dotnet entity-framework-core oauth rest-api role-based-authorization security sql-server user-management

Last synced: 16 Apr 2026

https://github.com/akshatamohanty/practical-blockchain

Website for practicalblockchain.org. Practical Blockchain is a meetup group in Singapore, started in 2021. We focus on talks and workshops by speakers building blockchain applications in production, learning from their research and insights.

blockchain cryptography dapps ethereum security smartcontracts solidity zkproof

Last synced: 09 May 2026

https://github.com/hitesh22rana/securawatch

SecuraWatch: Vigilance Redefined, Security Reinvented

ai deep-learning detection fastapi nextjs open-source python security yolov8

Last synced: 10 May 2026

https://github.com/mablanco/docker-jaeles

Docker image for Jaeles, a powerful, flexible and easily extensible framework written in Go for building your own Web Application Scanner

docker pentesting security

Last synced: 02 Jun 2026

https://github.com/davidyslu/bufferoverflowattack

Simulate a simple buffer overflow attack

assembly buffer-overflow-attack python security

Last synced: 29 Apr 2026

https://github.com/juliosuas/copyfail-guard

Fast, auditable Linux mitigation for CVE-2026-31431 Copy Fail: algif_aead block, verification, and AF_ALG seccomp hardening.

af-alg container-security copy-fail cve cve-2026-31431 devsecops docker-security incident-response kernel-hardening kubernetes-security linux linux-kernel seccomp security sysadmin

Last synced: 03 May 2026

https://github.com/oaslananka-lab/mcp-ssh-tool

Production-grade MCP SSH automation server for secure remote command, file, tunnel, service, metrics, and policy-controlled operations over stdio/HTTP, with npm distribution, MCP Registry metadata, and ChatGPT app readiness.

automation chatgpt claude codex cursor devops infrastructure mcp mcp-server model-context-protocol nodejs npm-package openai remote-automation security sre ssh ssh-client typescript vscode

Last synced: 13 May 2026

https://github.com/denizkarya1999/episecurity

Security app for Epitec to check every entry

asp-net-core blazor entry microsoft-sql-server security volunteering web-api

Last synced: 10 May 2026

https://github.com/ranfysvalle02/m-gate

MongoDB powered MCP Gateway. A multi-tenant MCP (Model Context Protocol) gateway with auth, RBAC, guardrails, a WASM code sandbox, queryable encryption, and observability.

agents api context context-api function-calling gateway llm mcp mcp-client mcp-gateway mcp-server model-context-protocol mongodb mongodb-atlas python security tokens tools

Last synced: 25 Jun 2026

https://github.com/neiman-marcus/psm

Security enabled simple REST service to manage application configuration in AWS SSM Parameter Store.

aws aws-ssm boto3 encrypts parameter-store python secrets secrets-management secrets-manager security serverless serverless-framework ssm

Last synced: 26 Apr 2026

https://github.com/ethanolivertroy/slack-audit

This is a push mirror ofhttps://gitlab.com/hackIDLE/fedramp/fedramp-testing-public/comms-n-collab/slack-audit

audit compliance fedramp nist security slack

Last synced: 17 Apr 2026

https://github.com/eset/eei-agent-linux-probes

eBPF probes used by ESET Linux products

ebpf linux security

Last synced: 09 May 2026

https://github.com/shadowblack77/nestjs-auth-project

Repository with full auth project for base to build projects with authorization & authentcation

authentication authorization hbs mailer nestjs nodejs oatuh2 passportjs security typeorm typescript

Last synced: 18 Apr 2026

https://github.com/brainphreak/hacker-game-suite

A suite of four educational cybersecurity games: OSINT Investigation, Phishing Detection, Network Forensics, and a Command-Line Typing game.

games hacking html5 security

Last synced: 02 May 2026

https://github.com/serverfarmer/sf-secure-lynis

sf-secure-lynis extension installs Lynis audit tool and performs daily system audits.

linux lynis security security-audit security-automation security-hardening security-scanner

Last synced: 10 May 2026

https://github.com/scriptlinestudios/getoutmyroom

A security system to warn you when people enter your room 🎥

mediapipe opencv pushbullet pushbullet-api python security

Last synced: 10 May 2026

https://github.com/agenticpoa/apoa-a2a

APOA authorization for A2A agent-to-agent communication — scoped delegation tokens, capability attenuation, audit trails

a2a agent-to-agent ai-agents apoa authorization delegation jwt security

Last synced: 10 May 2026

https://github.com/kdm0324/lightkms

Lightweight AES-256-GCM + PBKDF2 key management library & CLI for encrypting application config secrets.

aes-gcm cli config encryption java kms kubernetes pbkdf2 security spring-boot

Last synced: 05 Mar 2026

https://github.com/naufalafif/agent-guard

Native macOS menu bar app that scans MCP servers and AI agent skills for security threats

ai-agents cisco macos mcp menu-bar security swift

Last synced: 02 Apr 2026

https://github.com/fletcherholt/frisk

Free, no-login security scanner for any public GitHub repo. Check for leaked secrets, malware, malicious packages, typosquats, vulnerable dependencies (OSV) and bad binaries (VirusTotal) before you clone. Swap github.com to friskit.dev.

appsec cloudflare-workers code-security dependency-scanning devsecops github malicious-packages malware-scanner osv sast secret-scanning secrets-detection security security-tools supply-chain-security typescript virustotal vulnerability-scanner

Last synced: 14 Jun 2026

Security Awesome Lists
the-book-of-secret-knowledge 74 Awesome-Hacking 83 awesome-security 330 awesome-web-security 425 awesome-ctf 220 awesome-hacker-search-engines 568 awesome-privacy 647 android-security-awesome 230 awesome-incident-response 221 Awesome-WAF 175 awesome-web-hacking 31 DevSecOps 188 awesome-security-hardening 207 awesome-infosec 215 awesome-cybersecurity-blueteam 252 WebHackersWeapons 431 backend-cheats 961 awesome-vehicle-security 227 awesome-sec-talks 265 awesome-game-security 92 awesome-nodejs-security 222 awesome-cloud-security 154 awesome-iot-hacks 70 awesome-embedded-and-iot-security 131 alternative-frontends 119 DevSecOps 48 Awesome-Cybersecurity-Datasets 54 Awesome-FL 4,069 awesome-golang-security 34 awesome-windows-domain-hardening 70 Crypto-OpSec-SelfGuard-RoadMap 473 awesome-azure-architecture 311 osx-and-ios-security-awesome 59 awesome-lists 737 awesome-llm-security 101 awesome-executable-packing 756 awesome-aws-security 173 awesome-ethereum-security 81 awesome-vulnerable-apps 100 Awesome-Jailbreak-on-LLMs 427 awesome-he 90 MobileHackersWeapons 73 npm-security-best-practices 33 awesome-security-GRC 81 awesome-anti-forensic 143 security-apis 116 awesome-python-security 35 awesome-opa 228 awesome-runners 38 graph-adversarial-learning-literature 314
Security Categories
Uncategorized 3,612 fl in top-tier journal 3,256 :books: Literature 2,624 fl in top ml conference and journal 1,564 Tools 1,424 Pentesting 1,176 Operating Systems 1,137 Attack 1,071 Other Lists 793 fl in top ai conference and journal 789 カテゴリ 731 fl in top cv conference and journal 673 Papers 605 Weapons 516 Resources 490 Threat Hunting: 480 **Мероприятия** 457 Defense 449 Official 436 fl on graph data and graph neural networks 431