An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/tsautier/RoXX

RoXX (Radius Open eXtensible eXchange). Modern Python-based RADIUS Authentication Proxy for Linux (Docker/Systemd). Supports TOTP, Azure AD, LDAP & inWebo.

authentication azure-ad docker freeradius linux mfa python radius security totp

Last synced: 30 Jan 2026

https://github.com/nesquikm/the_storage

A fast and secure storage library for Flutter.

flutter package security storage

Last synced: 19 Jul 2026

https://github.com/kadirsenturk/integrityvault

Protects file integrity with a custom hash generator. Perfect for security enthusiasts.

hash hashing integrity python python3 security

Last synced: 30 Jan 2026

https://github.com/jabedude/fail2ban-plot

Takes Fail2Ban log files and generates a Google Maps scatter plot of banned IP addresses.

fail2ban python python3 security

Last synced: 09 Oct 2025

https://github.com/ajityadav2621/djangoasssignals

Demonstrated the Django signals, and basic functionality. code won't work as it's only logic which I have written. it's not production level code.

asynchronous django documentation python security signals synchronous

Last synced: 22 Apr 2026

https://github.com/a1573595/securitysharedpreferences

A small SharedPreferences wrapper and cryptographic android library power by Kotlin.

aes android base64 keystore kotlin rsa security sharedpreferences

Last synced: 22 Apr 2026

https://github.com/moolen/neuwerk

🛡️ cloud-native eBPF network egress firewall

cloud-native ebpf firewall kubernetes security

Last synced: 27 Jan 2026

https://github.com/nunenuh/defense-kit

Defensive security toolkit — scan, harden, and monitor your OS, code, repos, and infrastructure. Claude Code skill.

claude-code defense docker gitleaks hardening lynis sast sca security semgrep trivy

Last synced: 04 Apr 2026

https://github.com/orazioedoardo/vpn-installer

One minute OpenVPN server installation

bash-script debian encryption openvpn security ubuntu

Last synced: 06 May 2026

https://github.com/gusdcoder/leitor_contactless

Leitor Contactless is a high-performance system designed for handling large volumes of data with robust, contactless technology. Optimized for scalability and real-time processing, this project is ideal for applications requiring rapid data throughput and seamless user interactions in environments such as access control, ticketing,

authentication contactless iot mobile-payments nfc relay-attack replay-attack security vulnerability

Last synced: 28 Jan 2026

https://github.com/guibranco/github-infisical-secrets-check-action

🚨 :octocat: A GitHub action to check and report secrets leaks in the repository using Infisical CLI

gh-actions github-actions hacktoberfest hacktoberfest2024 infisical secrets security security-analysis validation

Last synced: 11 May 2026

https://github.com/php-workx/fuse

A local firewall for AI agent commands

ai-safety claude-code cli codex developer-tools golang guardrails mcp security

Last synced: 23 Apr 2026

https://github.com/labyrinthinesecurity/magma

A network security groups compiler

automation azure cloud devsecops network scalability security

Last synced: 24 Jan 2026

https://github.com/definitelyme/secureme

Secureme Cross-platform application

mobile-app secureme security

Last synced: 31 Jan 2026

https://github.com/ignis-sec/hostname-polluter

Minimalistic extension to quickly check hostname pollution

browser-extension cybersecurity http infosec security security-tools

Last synced: 05 Jun 2026

https://github.com/circle-rd/upki-ca

A small PKI dedicated to be used in internal infrastructures and Docker deployment using Traefik

certificate certificates docker mcp mcp-server openssl pki python security traefik

Last synced: 23 Apr 2026

https://github.com/alessiomaffeis/scanx

ScanX (Scanner for OS X) is a Cocoa framework for automating static analysis and evaluation workflows

analysis assessment automated-analysis evaluation framework macos scanning security

Last synced: 03 May 2026

https://github.com/crocs-muni/scrutiny-fabric

Decentralized security metadata protocol built on Nostr for binding certifications, test results, and vulnerability data to products.

decentralized metadata nostr protocol security svelte verification

Last synced: 31 Jan 2026

https://github.com/daikon-cqrs/security-interop

Authentication, authorization, & ACL components for Daikon-CQRS projects.

acl authentication authorization interop security user

Last synced: 24 Feb 2026

https://github.com/wzrdtales/secure-passwords

An authtentication strategy that finally stops exposing user passwords on the wire.

password secure-password security

Last synced: 31 Jan 2026

https://github.com/sum-catnip/foundry-rnghax

foundryvtt admin authentication bypass POC exploit

authentication-bypass exploit foundry-vtt poc security

Last synced: 03 Apr 2026

https://github.com/resulsilay/sentinel

Sentinel is a lightweight and modular Kotlin multiplatform security toolkit designed to analyze operating environments and detect potential security threats in real time.

android anti-tampering emulator-detection integrity-check ios ios-security kmp kmp-library kotlin mobile-security multiplatform root-detection security

Last synced: 14 Apr 2026

https://github.com/theroyalwhee0/safename

A crate for filename and path validation.

filename path sanitization security validation

Last synced: 01 Jun 2026

https://github.com/penguintechinc/elder

Elder is an enterprise-grade assest, entity and relationship tracking system for modern infrastructure teams. Built with Python 3.13, Flask, PyDAL, and React + TypeScript, Elder provides powerful visualization and management of complex organizational hierarchies, infrastructure dependencies, and project workflows.

asset-management identity-management project-management python reactjs relationships security security-tools services-platform software-inventory

Last synced: 07 Apr 2026

https://github.com/azu/express-mongo-sanitize-reporter

Dry-Run mode for express-mongo-sanitize.

express midddleware mongo plugin security

Last synced: 28 Oct 2025

https://github.com/vffuunnyy/teleapp_auth

🚀 A Rust-based Python package for validating Telegram WebApp authorization.

api auth authentication bot miniapp python security telegram web webapp

Last synced: 24 Apr 2026

https://github.com/yashoswalyo/edwa

A simple project that helps in encryption and decryption

decryption encryption jquery php security

Last synced: 24 Apr 2026

https://github.com/atensecurity/thoth

Thoth MCP governance proxy endpoint security sidecar

ai-agents governance headless mcp proxy security thoth

Last synced: 10 May 2026

https://github.com/peaktwilight/pwnkit

AI writes the code. pwnkit hacks it. Open-source agentic harness for autonomous security research.

agentic ai ai-agents cli code-review llm-security mcp npm-audit open-source owasp pentesting red-team sarif security typescript vulnerability-scanner

Last synced: 06 Apr 2026

https://github.com/azu/dockerfile-pin

A CLI tool that adds @sha256:<digest> to FROM lines in Dockerfiles and image fields in docker-compose.yml to prevent supply chain attacks.

docker docker-compose security tools

Last synced: 02 Apr 2026

https://github.com/stagas/safe-npm

safe npm time travel installs

npm security time-travel

Last synced: 25 Apr 2026

https://github.com/3qnrpdwd/juststone

[ JustStoneTransferProtocol&Backdoor ] This project stems from my interest in protocols and security, leading to the creation of a small backdoor and a proprietary protocol.

api backdoor eternalblue exploit protocol rust secure security socket socket-io

Last synced: 25 Apr 2026

https://github.com/tradmod/smard-contracts

Best Practices & Techniques to make Smart Contracts, "Smard Contracts" (Smart + Hard)

blockchain gas-optimization security smardcontracts smart-contracts solidity solidity-contracts web3security

Last synced: 06 Jun 2026

https://github.com/rajtilak-2020/stegoweb

StegoWeb is a web-based tool to hide secret messages inside images using client-side steganography. It uses the LSB (Least Significant Bit) technique to encode and decode text without uploading files to a server.

cybersecurity privacy security steganography webdevelopment

Last synced: 14 Oct 2025

https://github.com/rogervila/phashp

Combines different hash algos in order to create a strong hashed string.

hash library password php security

Last synced: 07 Feb 2026

https://github.com/adudley78/mcp-audit

Security scanner for MCP (Model Context Protocol) server configurations. Detects prompt injection, credential exposure, supply chain risks, and more.

ai-security claude cli cursor devsecops llm-security mcp model-context-protocol prompt-injection python security static-analysis supply-chain-security vulnerability-scanner

Last synced: 14 Jun 2026

https://github.com/jahlives/openssl_encrypt

Post-quantum hybrid encryption with chained KDF architecture. Supports ML-KEM, Kyber, Argon2, Balloon, RandomX. CLI + GUI included.

cryptography encryption hash-chaining kdf-chaining post-quantum python security steganography

Last synced: 01 Apr 2026

https://github.com/iuliandita/skills

Hand-crafted Agent Skills for DevOps, infrastructure, security, and software engineering. Production-tested, context-optimized, built on the Agent Skills standard.

ai-coding ansible claude-code claude-code-skills devops docker infrastructure kubernetes security terraform

Last synced: 19 May 2026

https://github.com/uldyssian-sh/vmware-vsphere-8-stig-auditor

vSphere 8 STIG compliance auditing and validation suite with automated security assessments

audit auditing automation compliance devops infrastructure security stig tools validation vmware vsphere8

Last synced: 06 Oct 2025

https://github.com/metabronx/mais-access

Enforced HTTP/JWT authentication middleware for MAIS.

authentication gem jwt mais middleware rails ruby ruby-on-rails rubygems security

Last synced: 26 Oct 2025

https://github.com/jp1337/easywall

Easy-to-use web interface for nftables firewall management on Linux — written in Go

debian easy-to-use firewall go golang linux nftables security self-hosted webinterface

Last synced: 26 Apr 2026

https://github.com/muchiny/mcp-ssh-bridge

MCP server for secure SSH remote management — 337 tools across 74 groups for DevOps, Docker, Kubernetes, databases, systemd, Windows, cloud, compliance & more. Built in Rust.

ai-tools air-gapped automation claude claude-code compliance devops docker infrastructure kubernetes mcp mcp-server model-context-protocol monitoring multi-protocol remote-management rust security ssh windows

Last synced: 26 Apr 2026

https://github.com/schlunsen/donna

Autonomous AI pentesting platform — orchestrates Claude Code agents via Temporal to continuously find and exploit vulnerabilities

ai autonomous-agents claude pentesting security temporal

Last synced: 01 Apr 2026

https://github.com/mohamedelbachir/group-8-system-security-and-network

Group 8 for course System Security and Network

attack attack-defense network security

Last synced: 19 Mar 2026

https://github.com/robinvdvleuten/json-from-script

👮🏻 Tiny JSON parser for your CSP aware script tags.

csp javascript json script security

Last synced: 27 Apr 2026

https://github.com/noahbass/iwars-data-spring-2020

Raw time series data collected from the iWars Spring 2020 Contest

data-science jupyter-notebook pandas plotly-python security security-vulnerability

Last synced: 15 Apr 2026

https://github.com/blackieops/ansible-role-linux-hardening

🐧🔒 An Ansible role with some Linux system hardening tasks.

ansible ansible-role debian hardening linux rhel security ubuntu

Last synced: 04 May 2026

https://github.com/jonzeolla/lab-softwaredefinedradio

A security-focused SDR lab

lab sdr security

Last synced: 27 Apr 2026

https://github.com/conseilgouz/pkg_cgsecure_j4

CG Secure package for Joomla 4.x

joomla-4-x joomla-5-x package security security-tools

Last synced: 18 Apr 2026

https://github.com/asi-alliance/asi-chain-wallet-sdk

TypeScript SDK for wallet management and blockchain interaction on ASI Chain — part of the Artificial Superintelligence Alliance ecosystem (Fetch.ai, SingularityNET, CUDOS). Provides secure wallet creation, BIP-39/BIP-44 key derivation, encrypted storage, and direct chain interaction

asi-chain bip-39 bip-44 blockchain cryptocurrency key-derivation security typescript wallet-sdk

Last synced: 03 Jun 2026

https://github.com/embetrix/satobox

Satobox is an open-source Yocto-based, privacy-focused and secure bitcoin full node solution designed for embedded linux devices.

anonymity bitcoin bitcoin-node bitcoin-wallet cryptocurrency cryptography embedded hardware-wallet linux raspberry-pi security toronionproxy wallets yocto yocto-layer

Last synced: 18 Apr 2026

https://github.com/print3m/securitree

https://securitree.xyz - deep dive into cybersec with well-structured notes.

ad-security cheatsheet cybersecurity cybersecurity-education guidebook it-security notes pentesting red-team security tree-structure

Last synced: 23 Jan 2026

https://github.com/antosser/base94-rs

Base94 Encoding Library: Convert binary data to a compact text-based format using Base94 encoding. Effortlessly encode and decode data for a wide range of use cases. 🔐🔍

algorithm base94 binary-to-text cryptography development encoding rust rust-library security text-format utility

Last synced: 24 Oct 2025

https://github.com/gusenov/nist-sp-800-95-web-portals

Требования стандарта NIST 800-95 к обеспечению безопасности web-порталов.

identity-provider information-security nist saml security service-provider soa sso web-portal ws-security

Last synced: 19 Mar 2026

https://github.com/e107inc/twofactorauth

Two-Factor Authenthication (2FA) for e107

2fa e107 plugin security two-factor-auth twofactorauth

Last synced: 24 Oct 2025

https://github.com/sydseter/dungeons-and-daemons

This repository contains OWASP Dungeons & Daemons a collection of LRP games. It's purpose is to promote security awareness and OWASP Cornucopia

appsec gamification security

Last synced: 01 Feb 2026

https://github.com/authzed/multi-app-demo

A demo of a distributed centralized authorization system powered by SpiceDB across 3 apps: Email, Docs and Groups

authorization distributed-systems security spicedb zanzibar

Last synced: 23 Oct 2025

https://github.com/namecoin/certinject

Inject certificates into Windows CryptoAPI trust store, with EKU and name constraints.

certificates cryptoapi cryptography hacktoberfest name-constraints privacy security tls windows x509

Last synced: 27 Jan 2026

https://github.com/turbot/flowpipe-mod-gcp

GCP pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect GCP to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod gcloud gcloud-cli gcp hacktoberfest integrations low-code orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 25 Feb 2026

https://github.com/tokido-io/tokido-core

Production-grade MFA toolkit for Java. TOTP, recovery codes, extensible factors. GraalVM native-image ready.

authentication graalvm java mfa security totp two-factor

Last synced: 28 Apr 2026

https://github.com/turbot/steampipe-mod-ibm-compliance

Run individual controls or full compliance benchmarks for CIS across all of your IBM Cloud accounts using Powerpipe and Steampipe.

cis cis-benchmark compliance hacktoberfest ibm-cloud powerpipe powerpipe-mod security sql steampipe steampipe-mod

Last synced: 24 Jan 2026

https://github.com/jstreitb/baa

BAA: The cozy TUI that herds your package managers. Unified updates for apt, pacman, snap & flatpak... 🐑

apt automation bubbletea charmbracelet cli developer-tools flatpak go golang linux opensource package-manager pacman security snap system-update terminal-app terminal-ui tui

Last synced: 28 Apr 2026

https://github.com/arpahls/gatekeeper

Mission-critical access gatekeeper using face verification and emotion-risk policy checks.

access-control arpa biometrics deepface emotion-analysis face-verification mission-critical opencv python security tensorflow

Last synced: 08 Jun 2026

https://github.com/anthonyharrison/sbomdebt

Determine the technical debt for a Software Bill of Materials (SBOM)

cyclonedx devsecops sbom sbom-tool security spdx technical-debt

Last synced: 02 Feb 2026

https://github.com/turbot/flowpipe-mod-reallyfreegeoip

Really Free Geo IP pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Really Free Geo IP to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code orchestration pipelines reallyfreegeoip security workflow workflow-automation workflow-engine

Last synced: 02 Feb 2026

https://github.com/tijme/grand-theft-filezilla

A tiny cross-platform Python script that steals saved & cached FileZilla credentials.

credentials file-transfer filezilla login passwords security stealing

Last synced: 15 Oct 2025

https://github.com/tomsegura2/folder-firewall-blocker

Blocks all filetypes in folders from accessing the internet on Windows

desktop-app firewall network-control privacy pyqt python sandbox security windows

Last synced: 08 Jun 2026

https://github.com/electro-gamma/esp32-quad-nrf24l01-plus-jammer-multi-band-2-4ghz-rf-controller

ESP32-Quad-nRF24L01-Plus-Jammer is an open-source project for controlling four nRF24L01+ modules from an ESP32. It enables multi-band 2.4GHz RF jamming and channel sweeping for Bluetooth, WiFi, BLE, RC, USB, and video frequencies, ideal for RF research, testing, and security analysis.

bluetooth-jammer esp32 frequency-jammer jammer nrf24l01 penetration-testing radio-frequency rf-jammer security spectrum-sweeper wifi-jammer wireless-jammer wireless-testing

Last synced: 28 Apr 2026

https://github.com/superagent-ai/brin-github

A GitHub App that automatically scans pull requests for security threats and evaluates contributor trust profiles

agents contributor-security llm-security prompt-injection security

Last synced: 28 Apr 2026

https://github.com/euginfrancis/esp32_jwt_auth

A library for implementing JSON Web Token (JWT) authentication on the ESP32 microcontroller. This project enables secure user authentication for IoT applications, offering easy integration, robust JWT handling, and support for secure data transmission.

authentication-protocols cross-platform-compatibility esp-idf-framework esp32 iot jwt open-source-contribution real-world-use-cases security tutorial-and-learning-resource

Last synced: 29 Apr 2026

https://github.com/dalibo/selinux-powa

SELinux policy for PoWA

postgresql powa security selinux

Last synced: 01 Jun 2026

https://github.com/cjbarker/pyhack

A collection of white-hat custom security tools for education and ethical testing.

cybersecurity hack hacking infosec pyhack python security whitehat

Last synced: 18 Jan 2026

https://github.com/metraton/gaia-ops

GAIA-Ops — General Agentic Integration Architecture. Multi-agent DevOps system that classifies every operation by risk, routes work to specialist agents, and blocks irreversible commands automatically.

ai-agents claude-code devops gaia-ops orchestration security

Last synced: 14 Apr 2026

https://github.com/raunplaymore/sentinel

Sentinel watches what your AI agents actually do — file access, network calls, risky commands — and alerts you when something looks wrong.

ai-agents macos monitoring security

Last synced: 04 May 2026

https://github.com/copyleftdev/copyleftdev

Systems-level software engineer building security tools, developer infrastructure, and AI-native systems in Rust, Go, and Zig. 560+ open source repositories.

ai-tools cli developer-tools devtools distributed-systems golang mcp model-context-protocol nim offensive-security open-source osint python red-team rust security systems-programming typescript web-fuzzer zig

Last synced: 04 Mar 2026

https://github.com/kaiyou/acm

Agnostic/acentric cloud messaging - free alternative to GCM/FCM

broker notifications protocol security

Last synced: 12 Oct 2025

https://github.com/chocholl/xdp_furpf

Pretty fast XDP-based URPF implementation that leverages hierarchical data structures to perform high-speed packet filtering with rate limiting support.

arp-poisoning arp-spoofing cloud-networking ebpf kernel ndp-poisoning ndp-spoofing network-policy networking rate-limiting security spoofing-attack urpf virtual-machine xdp

Last synced: 01 Apr 2026

https://github.com/azure/aks-secure-tls-bootstrap

Holds the client implementation and proto definitions of the AKS Secure TLS Bootstrapping protocol.

aks azure k8s security tls

Last synced: 20 Oct 2025

https://github.com/r3li4nt/awsecure

Herramienta de seguridad para entornos AWS, diseñada para analizar la infraestructura.

aws cloud hacking scanner security vulnerabilities

Last synced: 29 Apr 2026

https://github.com/d4rklynk/pyfo

PYFO (Put Your Fedora On) is a post-install script for upstream version of fedora

fedora fedora-workstation hardened-malloc kernel-hardening linux-hardened post-install post-installation security setup

Last synced: 04 Mar 2026

https://github.com/harrystaley/tamusa_csci4349_week8_livepentest

This repository contains a college project for CSCI 4349, focusing on live penetration testing of the Globitek website in three versions: blue, green, and red. It involves identifying and exploiting six potential vulnerabilities, including SQL Injection and Cross-Site Scripting, using automated scripts and CLI tools to enhance cybersecurity skills.

cli command-line cybersecurity infosec network-security scripting security shell sql terminal

Last synced: 17 Mar 2026

https://github.com/spirizeon/nixos-maxxing

Config using dendritic patterns with security hardening, NVIDIA GPU support, and a customized desktop environment.

modularization nixos nvidia-gpu security

Last synced: 02 May 2026

https://github.com/darkwizard242/ansible-role-sslscan

Ansible role for Sslscan. Available on Ansible Galaxy.

ansible ansible-galaxy ansible-role security sslscan sslscanner system

Last synced: 27 Feb 2026

https://github.com/akotov-dev/vmess-ws

Personal Security Server for VPS (rpm/deb)

security vmess websocket xray-core

Last synced: 22 Jan 2026

https://github.com/jpiechowka/go-tcp-turbo-scanner

A very small, fast, concurrent TCP scanner written in Go

cli concurrency go golang linux macos port-scanner portscanner security tcp windows

Last synced: 14 Jan 2026

https://github.com/jwilk/unfaithful-less

less (without -U) is not a faithful pager

security

Last synced: 14 Feb 2026

https://github.com/turbot/flowpipe-mod-vault

Hashicorp Vault pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Hashicorp Vault to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest hashicorp hashicorp-vault integrations low-code orchestration pipelines security vault workflow workflow-automation workflow-engine

Last synced: 28 Feb 2026

https://github.com/tristan-f-r/redos.deno

check for ReDoS vulnerabilities in code.

cli redos redos-checker redos-detector security security-automation

Last synced: 21 Jul 2026

https://github.com/turbot/flowpipe-mod-openai

OpenAI pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect OpenAI to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code openai openai-api openai-chatgpt orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 14 Feb 2026