An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/sg-milad/audit-reports

This is a repo containing the smart contract security reviews that I've completed.

auditing blockchain security smart-contract solidity

Last synced: 15 May 2026

https://github.com/XiaomingX/simple-springboot-app

这是一个基于SpringBoot的安全教育框架,提供了清晰的教程,帮助用户快速部署和运行平台。 项目目标:打造一个简便的一站式平台,用于全面评估和提升系统的安全能力。

benchmark security springboot vulnerability

Last synced: 03 May 2025

https://github.com/neverbehave/rc_hcaptcha

Adds Hcaptcha to the RoundCube login form

captcha hcaptcha login plugin roundcube security

Last synced: 11 Apr 2025

https://github.com/carhartl/talisman-secrets-scan-action

Scan incoming commits for secrets with Talisman

appsec devsecops security

Last synced: 21 Aug 2025

https://github.com/ziming/laravel-zxcvbn

@dropbox Zxcvbn Password validation rule for Laravel 10 & 11

dropbox laravel security validation

Last synced: 04 May 2025

https://github.com/defguard/yubikey-provision

YubiKey provisioning tool used by defguard security platform

grpc security yubico yubico-otp yubikey

Last synced: 11 Apr 2025

https://github.com/joho1968/fail2wp

WordPress plugin providing security functionality, plays nicely with Fail2ban and Cloudflare. Verified with WordPress 5.5+/6.6.x and PHP 7.4/PHP 8.1.x

cloudflare fail2ban fail2ban-filter php php74 php81 security security-hardening webbplatsen wordpress wordpress-development wordpress-plugin wordpress-security wordpress-security-plugin wordpress5 wordpress55 wordpress6 wordpress66 wordpress67 xmlrpc

Last synced: 09 Apr 2025

https://github.com/irfaardy/lockout-account

Laravel Lockout Account. Lock user account automaticaly if login fails with json.

block json kunci laravel laravel-5-package laravel-framework laravel-package lock-account lockouts penguncian security

Last synced: 15 Jun 2025

https://github.com/aeticusdev/youngersibling

YoungerSibling is an OSINT command-line tool designed for educational purposes, featuring web scraping, DNS lookups, EXIF data extraction, and username availability checks to help users learn and explore networking and cybersecurity concepts.

cyberinvestigation cybersecurity footprinting informationgathering opensource osint osinttools pip privacy pypi pypi-package pypi-source python python3 recon reconnaissance security threatintelligence youngersibling

Last synced: 28 May 2026

https://github.com/federicoceratto/debian-debsecan

UNOFFICIAL MIRROR. Please use:

debian security

Last synced: 12 Jul 2025

https://github.com/rappie/portfolio

Rappie's Portfolio

evm fuzzing portfolio security solidity

Last synced: 02 Mar 2025

https://github.com/bad-antics/Fuzz.jl

Security fuzzing toolkit for Julia — mutation, generation, and coverage-guided fuzzing

fuzzing julia mutation-fuzzing security testing

Last synced: 06 Apr 2026

https://github.com/gyumeijie/securecodingrules

secure coding in c/c++

c coding cpp security

Last synced: 01 May 2026

https://github.com/doctena-org/octorules

Manage WAF rules across providers as code

firewall iac octorules security waf yaml

Last synced: 01 Jul 2026

https://github.com/destan0098/makehash4shodan

This Tools make favicon hash for shodan search

security security-tools shodan

Last synced: 03 Mar 2025

https://github.com/rsrdesarrollo/auto-ysoserial

Generate all ysoserial payloads with burp collaborator (or similar)

burp burpsuite exploit java python security security-tools ysoserial

Last synced: 15 May 2026

https://github.com/pavlakis/csp-middleware

Add Content-Security-Policy headers for PSR-7 requests. Uses the csp-builder library paragonie/csp-builder

content-security-policy csp middleware php php7 security

Last synced: 11 Jan 2026

https://github.com/arhcoder/denunciags

🚨 Aplicación que permite hacer denuncias federales de manera rápida y segura (Descripción pendiente).

application artificial-intelligence denuncias django flutter hackathon mysql python security web

Last synced: 29 Oct 2025

https://github.com/pregress/tflint-ruleset-azurerm-security

TFLint ruleset to enforce security best practices on the AzureRM provider

azure azure-resource-manager azurerm azurerm-terraform-provider security terraform tflint tflint-ruleset

Last synced: 11 Apr 2025

https://github.com/radyakaze/nuxt-dompurify

A Nuxt 3 module for sanitizing HTML content using DOMPurify to protect against XSS attacks.

dompurify html-sanitization html-sanitizer nuxt nuxt3 sanitizer security xss

Last synced: 18 Mar 2025

https://github.com/alichtman/veripypi

WIP: Verify the package installed from PyPi is the same as the code on Github

pip pypi python-security security

Last synced: 19 Mar 2025

https://github.com/clarkio/pdfjs-vuln-demo

This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js (pdfjs-dist) library reported in CVE-2024-4367

application-security appsec astro astrojs pdf pdfjs pdfjs-dist react security svelte vue vuejs web

Last synced: 09 Sep 2025

https://github.com/tubenhirn/rasic

create issues for cve's found by trivy.

cve issues security

Last synced: 13 May 2026

https://github.com/jwilk/vcsnoop

Linux virtual console snooping via TIOCLINUX

security

Last synced: 20 Mar 2025

https://github.com/artivain/reseau-discord-node

Node.js module for interacting with the Réseau Discord Artivain API.

api axios blacklist discord discord-api discord-bot free security sus

Last synced: 11 Apr 2025

https://github.com/sahilm/hived

hived is a honeypot

go golang honeypot security

Last synced: 11 Apr 2025

https://github.com/hernanmd/applicationsecurity

A Smalltalk domain-independent security model which you can easily instantiate in your applications

nacl pbkdf2 pharo pharo-smalltalk security security-tools smalltalk

Last synced: 11 Apr 2025

https://github.com/graphtylove/python_with_tor

Repo to demonstrate how to use TOR with python.

python python3 sec security tor

Last synced: 11 Jun 2026

https://github.com/sixarm/sixarm_shell_random_scripts

SixArm.com → Shell → Random scripts to generate text

encryption random script security shell unix

Last synced: 09 Sep 2025

https://github.com/artemrys/detect-gh-actions-unused-secrets

Detects secrets that are defined in the repository and are not used in GitHub Actions

github github-actions secrets security

Last synced: 10 Jul 2025

https://github.com/husseinfo/securitools

Useful security related tools

bash encryption security shell

Last synced: 04 Apr 2025

https://github.com/nathanhi/avrlarm

AVRlarm is an open source alarm system for 8-Bit Atmel CPUs (ATmega2560).

alarm avr burglar gsm gsm-based monitoring security sensor sms sms-notifications

Last synced: 10 Jul 2025

https://github.com/ichhabrecht/devtools

Adds nice developer tools to your TYPO3 installation

changes developement extension integrity manager security typo3 typo3-cms typo3-extension

Last synced: 12 Apr 2025

https://github.com/ssh-mitm/ssh-mitm-plugins

example plugins for SSH-MITM

features plugins security ssh-mitm tools

Last synced: 11 Aug 2025

https://github.com/grantbirki/auditor-action

The Auditor - A GitHub Action that audits changes made in a pull request, using a customizable configuration

actions auditor automation ci compliance-as-code git-diff review security

Last synced: 07 May 2025

https://github.com/tigera-solutions/cc-aks-strengthen-security-workshop

In this AKS-focused workshop, you will work with Calico Cloud to learn how to strengthen your Microsoft AKS cluster security posture.

aks azure cc regismartins security workshop

Last synced: 13 Apr 2025

https://github.com/manelli/ex_bcrypt

Elixir wrapper for the OpenBSD bcrypt password hashing algorithm

bcrypt cryptography elixir password security

Last synced: 20 Jun 2025

https://github.com/sefinek/known-bots-ip-whitelist

A whitelist of trusted IP addresses used by legitimate crawlers and services such as Googlebot, Bingbot, AhrefsBot, UptimeRobot, Pingdom, Cloudflare, Bunny CDN, Stripe, Shodan, FacebookBot, TelegramBot, etc.

bot bots crawler firewall goodbot goodbots googlebot ip-address ip-addresses ipset safe safe-bots safety security whitelist whitelist-bot whitelists

Last synced: 21 Jun 2025

https://github.com/manuelberrueta/hashfinder

Go script that finds a matching hash or a diff of a target hash in a directory.

blueteam blueteam-tools dfir dfir-automation hashing security security-tools

Last synced: 06 Jul 2025

https://github.com/0xirison/PrintNightmare-Patcher

A patch for PrintNightmare vulnerability that occurs to print spooler service for Windows machines [CVE-2021-34527]

cve-2021-34527 printnightmare python3 security security-tools vulnerability windows

Last synced: 12 Jul 2025

https://github.com/nystudio107/craft-twig-sandbox

Allows you to easily create a sandboxed Twig environment where you can control what tags, filters, functions, and object methods/properties are allowed

craftcms sandbox security twig

Last synced: 14 Jul 2025

https://github.com/lirantal/goof-container-breaking-in

A Snyk-based goof application to demonstrate breaking into containers

container docker security security-vulnerability snyk

Last synced: 16 Jul 2025

https://github.com/kkernick/antimony

Sandbox Applications

bubblewrap linux sandbox seccomp security

Last synced: 02 Jul 2026

https://github.com/nozaq/terraform-aws-parked-domain-baseline

A terraform module to set up DNS records to harden the parked(unused) domain using AWS Route53.

aws devops dns domain email-security hardening security security-hardening terraform terraform-module

Last synced: 17 Jul 2025

https://github.com/geolffreym/jwtauth

Django JWT auth middleware

api django jwt jwt-authentication python python-3 security

Last synced: 17 May 2026

https://github.com/bnomei/kirby3-htmlpurifier

Static class method, Uniform-Guard and Field-Method to filter your "dirty" HTML inputs to "clean" HTML.

filter form headless html htmlawed input kirby3 kirby3-cms kirby3-plugin kql kses safe sanitize security striptags submit uniform xss

Last synced: 13 Mar 2025

https://github.com/merci-libre/genpass-rs

A password management tool written in Rust. Generates Extended ASCII, ASCII, and alphanumeric strings, and uses steganography to store passwords into images as pixels.

cli cryptographically-secure linux modular password-generator password-manager rust security security-tools steganography windows

Last synced: 03 Apr 2026

https://github.com/ladjs/store-ip-address

Stores a user's IP address in the background for Lad

address ip ipv4 ipv6 koa lad mongoose passport security store

Last synced: 15 Apr 2025

https://github.com/thefrosty/wp-login-locker

Disable direct access to your sites /wp-login.php script, plus user notifications based on actions.

login-auth packagist php php81 security wordpress wordpress-plugin wp-login

Last synced: 30 Oct 2025

https://github.com/jwilk/detsan

determinism sanitizer

fuzzing qa security

Last synced: 08 May 2025

https://github.com/raisiqueira/secure-nextjs-app

Demo of a secure Next.js application

frontend-security nextjs nextjs14 security

Last synced: 14 Feb 2026

https://github.com/masenf/tox-pin-deps

Run tox environments with strictly pinned dependencies (and no project or code changes).

python security testing tox

Last synced: 13 Mar 2025

https://github.com/artem-smotrakov/ql-fun

Examples of vulnerable code that can be detected by CodeQL queries.

codeql security semmle-ql

Last synced: 22 Apr 2025

https://github.com/ludo-technologies/codescan

Scan any GitHub repo for security issues — risky code, exposed keys, outdated packages

dependency-scanning devsecops gitleaks golang nextjs sast secrets-detection security security-tools semgrep static-analysis trivy

Last synced: 03 Jul 2026

https://github.com/logicalhacking/securebpmn

SecureBPMN is a domain-specific modeling language that allows to model security aspects (e.g., access control, separation of duty, confidentiality).

analysis bpmn compliance modelling modelling-framework project securebpmn security

Last synced: 10 May 2025

https://github.com/erwinkramer/running-a-container-securely-in-azure

Considerations for choosing an Azure container service for secure use cases.

azure container-apps container-instances security web-app-for-containers

Last synced: 09 Feb 2026

https://github.com/tpritc/verboten_keys

Verboten Keys is a last line of defense to help prevent you and your team from accidentally leaking private information via your APIs.

rack rails ruby security

Last synced: 08 Oct 2025

https://github.com/marthijn/sidio.web.security

Helper functions and middleware to secure ASP.NET Core applications

asp-net-core content-security-policy http security web-security

Last synced: 26 Oct 2025

https://github.com/lasseh/nginx-conf

Production-ready nginx configuration with HTTP/3, security hardening, and performance optimization. Enterprise-grade setup for modern web deployments.

api-gateway configuration devops docker http3 kubernetes nginx performance production reverse-proxy security server ssl sysadmin tls web-server

Last synced: 30 Jan 2026

https://github.com/idthings/idengine

Open sourced project for the core engine used in idThings.

arduino arduino-nano containers iot iot-device microservices security things

Last synced: 25 Apr 2026

https://github.com/junzhengca/gitscanner

Automatically clone and scan all public GitHub repositories for a given organization.

github hacking pentesting recon scanner security

Last synced: 21 Jan 2026

https://github.com/wultra/powerauth-cmd-tool

Command-line utility for PowerAuth Reference Client

authentication authorization mobile-security security testing-tools

Last synced: 21 Jan 2026

https://github.com/turbot/flowpipe-mod-opsgenie

Opsgenie pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Opsgenie to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code opsgenie opsgenie-api orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 30 Jan 2026

https://github.com/wgtechlabs/container-build-flow-action

Intelligent docker container build automation for modern development workflows.

docker ghcr security workflow-automation

Last synced: 28 Feb 2026

https://github.com/netanelc305/heimdall

Virtual Machine introspection tool

introspeciton kvm linux macos security vm windows xen

Last synced: 05 Sep 2025

https://github.com/viadee/secdevops

Security DevOps: Vollautomatisches Securitytesting in der Build Pipeline

ci do docker gradle java jenkins pipeline security security-devops security-tools

Last synced: 19 Apr 2026

https://github.com/camjac251/tool-gates

Intelligent tool permission gate for AI coding assistants. Bash AST parsing, file guards, configurable tool blocking

ai-tools claude-code cli gemini-cli hooks permissions rust security tree-sitter

Last synced: 30 Apr 2026

https://github.com/brandonfl/discord-virustotal-bot

Discord bot using VirusTotal API to check if the content of messages sent by discord users is safe

discord discord-bot security virustotal

Last synced: 17 Apr 2026

https://github.com/jacksingleton/dast-pipeline

Notes on the current state of DAST tooling in automated delivery pipelines

automated-delivery-pipelines burp security zap

Last synced: 25 Mar 2025

https://github.com/craftzman7/pentest-mcp

Automated discovery and exploitation of security vulnerabilities using natural language and LLMs.

llm mcp pentesting security

Last synced: 14 Jul 2025

https://github.com/gdatasoftwareag/nextcloud-gdata-antivirus

This nextcloud app aims to provide an additional layer of security to your Nextcloud instance by enabling automatic and manual scanning of files for malicious content powered by G DATA Verdict-as-a-Service.

cloud it-security malware malware-detection nextcloud nextcloud-apps security

Last synced: 05 Mar 2026

https://github.com/luckman212/dstat

CLI tool to query the screen sleep or lock status

displays macos screen security shell-scripting utility

Last synced: 16 Oct 2025

https://github.com/atani/mysh

MySQL connection manager with SSH tunnel support. Auto-masks sensitive data for AI/non-TTY environments. Supports MySQL 4.x+.

ai-safety cli connection-manager data-masking database golang mysql mysql-client security ssh-tunnel

Last synced: 03 Jun 2026

https://github.com/okikio/broadcast-channel-security-vulnerablility

Vulnerability in Broadcast Channel allowing for Arbitrary Code Execution when using Eval (In-direct and with "use strict")

security

Last synced: 18 Jan 2026

https://github.com/alexmacarthur/wp-sniff

A Python script that searches a site's source code for signs that it runs on WordPress.

python security wordpress

Last synced: 13 Feb 2026

https://github.com/geeknik/mempool-partyline

Anarcho-ephemeral Mempool Messaging System with TUI

bitcoin chat encryption infosec mempool messaging privacy security

Last synced: 30 Apr 2026

https://github.com/binorassocies/bro-scripts

Bro IDS useful scripts

bro-ids security smtp x509

Last synced: 04 Feb 2026

https://github.com/geeklearningio/gl-ionic-secure-file-storage

A service using two encryption plugins to encrypt data on iOS and Android

cordova cryptography ionic security storage

Last synced: 28 Apr 2025

https://github.com/lucadibello/virtualsafe

🔒 Crypt your directories and make your files completely unreadable!

cryptography fernet privacy-tools python security security-tool

Last synced: 06 Jun 2026

https://github.com/ree-verse/rexor

Cross-platform Rust library with CLI app implementing XOR encryption/decryption

cli decryption encryption security xor

Last synced: 04 Apr 2026

https://github.com/ddspringle/pwnedpasswords_cfml

I implement the Have I Been Pwned Passwords API in CFML (ColdFusion)

cfml coldfusion coldfusion-library security security-hardening security-vulnerability

Last synced: 13 Feb 2026