An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/lnvaldez/vote-crud

A voting-based CRUD application built with Express.js and EJS where users can create, read, update, and delete themes.

ejs express express-ejs javascript security

Last synced: 04 Apr 2026

https://github.com/kubedoll-heavy-industries/agentcontainers

Immutable, reproducible, least-privilege runtime environments for AI agents

ai-agents containers devcontainers ebpf oci security slsa

Last synced: 18 Apr 2026

https://github.com/davidwhittington/linux-security

Production-ready hardening toolkit for Ubuntu/Debian VPS servers β€” firewall, SSH, fail2ban, Apache security headers, automated updates, and log monitoring.

bash debian fail2ban hardening linux security ubuntu ufw vps

Last synced: 04 Apr 2026

https://github.com/thedevelop3r/modern-todo-backend-nodejs

Modern Todo Application backend developed in nodejs - express - mongodb - jan-6th-2024

ecmascript2016 es6 express headless javascript mongodb nodejs object-oriented-programming security sever todoapp

Last synced: 18 Apr 2026

https://github.com/sjinks/roundcube_log_failed_logins

Logs failed login attempts to syslog in the format suitable for blocklist.de

brute-force bruteforce login security

Last synced: 18 Apr 2026

https://github.com/doctena-org/octorules-aws

AWS WAF v2 provider for octorules

aws firewall iac octorules security waf yaml

Last synced: 18 Apr 2026

https://github.com/sjimenez44/azureroleassignmentauditor

Visualizes role assignments in an interactive network graph, helping security teams analyze access control structures.

azure dockerfile entraid security

Last synced: 18 Apr 2026

https://github.com/mikasjp/hasmypasswordleaked

A simple Python/Ruby script to check if your password is in the Have I Been Pwned database

haveibeenpwned hibp hibpwned k-anonimity password python ruby security

Last synced: 18 Apr 2026

https://github.com/pkparthk/secure-cloud

A secure cloud access backend system built with Python, featuring JWT authentication, MongoDB integration, AWS IAM role management, SSH gateway configuration, and multi-factor authentication (MFA) support.

aws cloud-access configuration fastapi iam jwt mfa mongodb python security ssh

Last synced: 18 Apr 2026

https://github.com/kirskov/shapin

Pin floating tags in CI workflow files to immutable SHAs, making your pipelines reproducible and immune to tag mutation attacks.

cicd compliance security

Last synced: 19 Apr 2026

https://github.com/jawaracloud/bash-collections

This repository contains a collection of Bash scripts for various purposes. Feel free to explore and use these scripts as needed.

bash bash-script linux security shell terminal

Last synced: 20 Apr 2026

https://github.com/mdeous/plasmid

SAML IdP for SP security testing.

identity-provider saml saml-idp security sso

Last synced: 20 Apr 2026

https://github.com/kurtpayne/skillscan-security

Security scanner for AI agent skills and MCP tool bundles β€” prompt injection, IOC matching, malware detection, ML classifier

ai-agent ai-security llm-security mcp prompt-injection security skill-scanner static-analysis

Last synced: 20 Apr 2026

https://github.com/johnwmail/totp-gate

Lightweight TOTP reverse proxy β€” add 2FA authentication in front of any web service.

2fa auth-proxy authentication gateway golang middleware otp reverse-proxy security totp two-factor-auth

Last synced: 20 Apr 2026

https://github.com/branover/hexgraph

Self-hosted, agentic vulnerability research for binaries & firmware: an AI agent decompiles, fuzzes, and verifies exploits inside a sandbox, recording every finding to a typed graph. BYOK, fully local.

agentic-ai ai-agents binary-analysis claude claude-code cybersecurity exploit-development firmware-security fuzzing ghidra iot-security llm mcp pentesting reverse-engineering security security-tools vulnerability-research

Last synced: 04 Jun 2026

https://github.com/allianz/yukimi

Self-service Snowflake provisioning with built-in security and policy enforcement.

ai automation data security

Last synced: 05 Jun 2026

https://github.com/leeguooooo/swiftbar-warp-control

🚨 Fix Cloudflare WARP stuck on/force-enabled issue. Professional macOS menu bar tool for reliable WARP control when GUI fails. Password-free SwiftBar plugin.

automation cloudflare-vpn cloudflare-warp command-line force-disable macos macos-utility menu-bar plugin security swiftbar troubleshooting vpn warp-cli warp-control warp-stuck

Last synced: 20 Apr 2026

https://github.com/neospl0it/regexscan

A Tool for scanning and detecting patterns using regular expressions (regex). Find potential leaks, credentials, and sensitive data efficiently

automation-testing credentials cybersecurity go regex regex-match regex-pattern scanner security web-scraping web-security

Last synced: 21 Apr 2026

https://github.com/husinn-abd/vibeaudit

Local-first AI-aware repository security auditor for secrets, vulnerabilities, policy gates, and ISO evidence support.

devsecops iso27001 policy-as-code sbom secrets-scanning security vulnerability-scanner

Last synced: 05 Jun 2026

https://github.com/signaturebeef/leek

πŸ₯¬ Leek is a CLI and .NET toolset for detecting breached or weak secrets such as passwords

api asp-net-core dotnet hash hibp seclists security security-audit security-tools

Last synced: 21 Apr 2026

https://github.com/rodrigokamada/nodejs-encryption

There are two classes in the crypto module called Cipher and Decipher that we are going to use in the example.

aes cipther decipher decryption encryption hacktoberfest nodejs security

Last synced: 21 Apr 2026

https://github.com/elastic/example-mcp-app-security

Reference MCP App for Elastic Security β€” interactive SOC dashboards inside Claude, Cursor, and other MCP hosts.

ai claude cursor elastic mcp model-context-protocol security soc

Last synced: 24 Apr 2026

https://github.com/iam-py-test/unload-block-remover

Prevent websites from annoying you with 'Are you sure you want to leave'

annoyances browser-extension chrome-extension firefox-extension security unload

Last synced: 22 Apr 2026

https://github.com/bencoverts/webtools

Web Tools, Information Gathering, CMS Detection

domain gatering hack hacking information security security-tools tools web website webtools

Last synced: 05 Jun 2026

https://github.com/it-atelier-gn/desktop-secrets

Resolve secrets from KeePass, AWS, Azure Key Vault, GCP Secret Manager, HashiCorp Vault, 1Password, macOS Keychain, and Windows Credential Manager into .env templates and subprocess environments β€” no plaintext on disk.

1password azure-key-vault desktop dotenv hashicorp-vault keepass keychain linux macos secret-manager secrets security vault webauthn wincred windows windows-hello

Last synced: 21 May 2026

https://github.com/vidyasagarmsc/private-vpc-network

Provision an HA Bastion and VPN setup using Terraform + Session Recording on RHEL using Ansible

ansible automation bastion cloud security terraform vpc

Last synced: 22 Apr 2026

https://github.com/marcolugo/slae

Repository to hold all x86 Assembly code and shellcode created for the SecurityTube Linux Assembly Expert (SLAE) course

assembly-x86 security shellcode

Last synced: 24 Apr 2026

https://github.com/prithvi1236/redactor

Redacts sensitive data from clipboard before you paste into ChatGPT, Claude, or any external AI β€” 100% local, no secrets leaves your machine.

desktop-app local-ai ner privacy python security

Last synced: 06 Jun 2026

https://github.com/rayentr/ironward

Security scanning for the vibe coding era β€” MCP server + CLI + GitHub Action. 9 tools, 665 secret patterns, 27 static rules. Four tools run fully offline, no API key.

claude-code cursor cve-scanner mcp model-context-protocol osv sast secret-detection security static-analysis typescript vibe-coding vulnerability-scanner

Last synced: 29 Apr 2026

https://github.com/hpgrahsl/flightswebapi

Sample Project for my Java Magazin (04/2017) Article together with Manfred Steyer

keycloak oauth2 oidc security spring-boot webapi

Last synced: 24 Apr 2026

https://github.com/dishine-digital-agency/cookie-audit

Most cookie consent setups are broken in ways nobody notices until an audit. This Puppeteer-powered CLI fires up a headless browser to capture, classify, and grade every cookie your site sets. Scan and get a categorized cookie inventory with GDPR compliance flags (470+ known cookies, automatic classification, multi-format reports).

automation compliance cookies developer-tools gdpr open-source privacy puppeteer python scanner security security-tools tracker-blocking web-scraping

Last synced: 25 Apr 2026

https://github.com/solomonneas/proxguard

Proxmox security auditor with config parsers, CIS benchmarks, and remediation scripts

firewall hardening homelab infrastructure proxmox security virtualization

Last synced: 25 Apr 2026

https://github.com/bespredel/encryption-form

A Laravel package to securely encrypt form fields on the client-side using public key encryption and decrypt them on the server-side using the private key.

client-side-encryption data-privacy encryption form-encryption laravel open-source php privacy-protection rsa-encryption security

Last synced: 25 Apr 2026

https://github.com/kahoon/netmon

Linux network appliance monitor for DNS and Tailscale health, with change-driven notifications, tracing, and runtime stats.

dns linux network ntfy pihole security tailscale unbound

Last synced: 25 Apr 2026

https://github.com/mwmorale/folder_locker

After using my Mac(Apple), I began to notice how odd it was that Windows cannot "password lock" folders/documents. So, I accomplished this on my own and now have this capability on my Windows device(and, now, so do you). Store anything inside a folder that disappears when desired and can only be opened(and visible) using your password. Run "run_me.py" a single time - then, you will have this feature regardless of access to the file, GitHub or even the internet. This is a work in progress and is still being developed - it is intended to manipulate "Desktop" within C drive, was tested/developed using Windows 10 and assumes that your current "User" is your desired selection. Python is used. Libraries "subprocess" and "os" are imported/used.

file-manager filemanager hiding-information lock locking-strategies path-planning path-tracing pathfinding python security security-tools terminal

Last synced: 25 Apr 2026

https://github.com/hi120ki/openaikeyserver

A server application that generates temporary OpenAI API keys for authorized users through Google OAuth2 authentication

ai aisecurity openai security

Last synced: 25 Apr 2026

https://github.com/chl12172025-code/nullprt

A statically-compiled, system-level programming language for software protection, hardware-bound licensing, and anti-tampering. Cross-platform (Windows/macOS/Linux). Self-hosted toolchain.

anti-tamper arm64 c-abi code-obfuscation compiler cross-platform licensing linux macos native-code nprt nullprt programming-language security self-hosted software-protection static-typing system-programming windows x86-64

Last synced: 05 Jun 2026

https://github.com/koladilip/aws-checks

Reprots issues in your AWS account

aws best-practices rust-lang security

Last synced: 26 Apr 2026

https://github.com/simplito/privmx-endpoint-kotlin

Kotlin wrappers for the native C++ library used by PrivMX to handle end-to-end (e2e) encryption.

communication encryption end-to-end-encryption kotlin kotlin-android kotlin-ios kotlin-jvm kotlin-multiplatform-library mobile privmx security

Last synced: 07 Jun 2026

https://github.com/lennolium/1guard-server

Semester's Project - System and Software Engineering 1 - server backend

ai macos safari safari-extension security shopping

Last synced: 26 Apr 2026

https://github.com/neiman-marcus/psm

Security enabled simple REST service to manage application configuration in AWS SSM Parameter Store.

aws aws-ssm boto3 encrypts parameter-store python secrets secrets-management secrets-manager security serverless serverless-framework ssm

Last synced: 26 Apr 2026

https://github.com/tridentstack/wazuh-docker-secure

Secure Wazuh deployment automation for Docker with enhanced password management, certificate generation, and security hardening. Scripts for full setup and credential management that eliminate default passwords and implement security best practices.

docker mdr security siem soc tridentstack wazuh

Last synced: 26 Apr 2026

https://github.com/fritterhoff/vulnerability-bot

Small bot to automate vulnerability updates in GitLab

ci gitlab security

Last synced: 27 Apr 2026

https://github.com/goki602/clawguard

AI Agent Memory β€” Fewer prompts, smarter decisions. Remembers your trust decisions across Claude Code, Codex & MCP. Free & open source.

ai-agent ai-guardrails ai-memory ai-security claude-code codex confirmation-fatigue hooks mcp open-source pretooluse security typescript

Last synced: 25 May 2026

https://github.com/matouskozak/exe-scanner

A lightweight plugin that improves malware classifiers' robustness against adversarial attacks on Windows executables (EXEmples). Based on the research paper "Updating Windows Malware Detectors: Balancing Robustness and Regression against Adversarial EXEmples" (2025).

adversarial-machine-learning malware-detection security windows

Last synced: 27 Apr 2026

https://github.com/petercxy/wl-mitm

Mirror of https://gitea.angry.im/PeterCxy/wl-mitm

security wayland

Last synced: 27 Apr 2026

https://github.com/sap-samples/security-research-codegraphsmote

Data augmentation strategy that can be applied to code graphs for learning-based vulnerability discovery.

augmentation data detection learning machine research sample security vulnerability

Last synced: 07 Jun 2026

https://github.com/kstenschke/tiny-vault

Tiny Vault - Temporary local password store for Linux

linux password security tool

Last synced: 27 Apr 2026

https://github.com/ali-raheem/macpi

πŸ›‘οΈ Create macsec encrypted ethernet links automatically, transparently and securely with minimal interaction

bump-in-the-wire encryption ethernet macsec networking raspberry-pi security

Last synced: 27 Apr 2026

https://github.com/zdnk/guardian

A simple Β΅framework for working with TouchID, FaceID and passcode authentication

authentication faceid framework ios ios-swift security swift swift-framework touchid

Last synced: 07 Jun 2026

https://github.com/sanjoy-sust/scpproject

This is Secure Communication Protocol for smart cart Cryptography management

aes aes-encryption algorithm cryptography design-patterns factory-method-pattern factory-pattern j2se java java-smart-cards security

Last synced: 07 Jun 2026

https://github.com/lucasgoncsilva/swarden

Created in Django as an MVC Framework, sWarden works as a real prototype of an online password and credential manager. This project uses security concepts in a practical and descriptive way.

criptography django load-testing password password-manager python security testing

Last synced: 28 Apr 2026

https://github.com/ryoskzypu/hard_pihole

A Pi-hole hardening script

adblock bash cli pi-hole raspberry-pi security shell unix

Last synced: 28 Apr 2026

https://github.com/erlang-punch/berty

A clean, safe and flexible BERT implementation

audit bert elixir erlang etf externaltermformat security serialization serializer

Last synced: 28 Apr 2026

https://github.com/aayush-bhargav/library-management-system

Developed an Online Library Management System (OLMS) that not only provides basic functionalities of a library but also ensures data security and concurrency control..

c library-management-system login mutex-lock mutex-synchronisation operating-system security signup socket socket-io socketcommunication thread

Last synced: 28 Apr 2026

https://github.com/sv443/node.js-bcrypt-password-hashing

This is an interactive example of how to hash passwords in Node.js very securely using bcrypt

bcrypt hash hashing javascript js node-js nodejs password password-hash security

Last synced: 29 Apr 2026

https://github.com/harikrishnareddyl/cato

Universal AI agent safety layer β€” protect files and commands with configurable rules

ai claude-code cli developer-tools rust safety security

Last synced: 29 Apr 2026

https://github.com/azu/trace-database-response

Assert: Express response raw data from MongoDB

expresss library middleware mongodb plugin security

Last synced: 29 Apr 2026

https://github.com/xsscx/research

Security Research Tools for ICC Color Profiles

analysis color debugging icc icc-color-profile measurement profile research security

Last synced: 29 Apr 2026

https://github.com/sezaiagirtas428/windows-hardening-basics

PowerShell-based Windows hardening script with Defender ASR controls

asr blue-team defender hardening powershell security windows

Last synced: 29 Apr 2026

https://github.com/ghlps/guimox-auth

Java service used to provide authentication for my applications. The project uses OAuth2 (Google) and also e-mail/password login.

java oauth2 security springboot

Last synced: 29 Apr 2026

https://github.com/taufik-nurrohman/markdown-filter

Safely replace text in a Markdown document.

commonmark extra filter markdown php security

Last synced: 29 Apr 2026

https://github.com/shiroonigami23-ui/aegisos

AegisOS_security_first_lightweight_customizable_open_source_operating_system

customization kernel lightweight open-source operating-system osdev privacy security systems-programming

Last synced: 29 Apr 2026

https://github.com/seunakintola/whistle-blower

This platform is dedicated to reporting unethical practices daily in organization either in government sectors or private Parastatals at no cost.

anonymity api human-rights json php security transparency whistle whistleblowing

Last synced: 29 Apr 2026

https://github.com/davidyslu/bufferoverflowattack

Simulate a simple buffer overflow attack

assembly buffer-overflow-attack python security

Last synced: 29 Apr 2026

https://github.com/codewithashim/face-recognition-system

The Face Recognition System is a cutting-edge software application powered by state-of-the-art machine learning techniques. Experience accurate identification and verification of human faces in images and real-time video streams.

access-control biometrics codewithahsim deep-neural-networks face-recognition facial-detection facial-identification opencv opencv-python python python-3 real-time-face-recognition scalable-face-recognition security security-tools surveillance

Last synced: 29 Apr 2026

https://github.com/frnn4268/k8s_cloud-native-pg_trivy-operator

This repository contains auxiliary tooling for managing PostgreSQL clusters on Kubernetes, including CloudNativePG, Trivy Operator, and Cert Manager. It simplifies deployment, operation, and security scanning of containerized applications, providing examples and automation through Taskfiles.

automation backup cert-manager cloudnative devops helm kubernetes postgresql security trivy

Last synced: 29 Apr 2026

https://github.com/cuongtk8/play-with-deno

Discover 🏝️ Deno - the future for 🌏 Node

103cuong deno node rust security typescript

Last synced: 29 Apr 2026

https://github.com/b-sullender/linux-auth

A lightweight C program for Linux user authentication using the shadow file.

authentication linux security user-management

Last synced: 30 Apr 2026

https://github.com/xjectro/spring-boot-graphql-api

A modern, scalable API project built with Spring Boot and GraphQL, designed to demonstrate best practices for secure, maintainable, and extensible backend development.

api authentication ayered-architecture backend best-practices example gradle graphql graphql-api java jwt microservice open-source production-ready rest scalable security spring-boot starter template

Last synced: 30 Apr 2026

https://github.com/nextorigin/aescrypt

AES Salted Encryption helper for NodeJS

aes aes-256 aes-encryption decryption encryption nodejs oauth oauth2 security

Last synced: 30 Apr 2026

https://github.com/dafneb/ansible-role-ubuntu24-aide

Ansible Role - Installation of AIDE on Ubuntu 24

aide ansible ansible-role hardening hids security ubuntu ubuntu-server

Last synced: 01 May 2026

https://github.com/racksync/workshop-devops

Examples and Resources used in a DevOps workshop Materials.

ci-cd cloud-native cluster cncf devops devsecops docker gitops k8s kubernetes linux owasp security

Last synced: 01 May 2026

https://github.com/rivassec/secure-iam-lint

Python-based linter for AWS IAM policies to catch insecure configurations

automation aws devsecops iam linter python security

Last synced: 02 May 2026

https://github.com/m4kskool/serverless-dns

πŸ›‘οΈ Block unwanted content with serverless-dns, a self-hosted DNS resolver that supports DNS-over-HTTPS and DNS-over-TLS on various platforms.

adblock cloudflare cloudflare-workers ddns-client deno dns dns-over-https dns-over-tls fastly nodejs pihole securedns security self-hosted serverless-ddns-updater serverless-plugin windows workers

Last synced: 02 May 2026

https://github.com/advancedhacker101/fpa-extension

Browser extension for FPA password management

authentication chrome-extension fpa password-manager security

Last synced: 02 May 2026

https://github.com/nomadsdev/cipher-cli

CipherCLI is a command-line tool for AES-256-CBC encryption and decryption. Easily encrypt and decrypt text securely via your terminal.

aes-256-cbc cipher cli crypto decryption encryption nodejs security

Last synced: 02 May 2026

https://github.com/inkedcat/kallbid

πŸ’°πŸ”¨ Cryptographically secure auction Client/Seller/Admin apps (Imported From School GitLab)

auction cryptography java javafx security

Last synced: 02 May 2026

https://github.com/emanuele-em/apple-security

Bindings to the macOS Security Framework

apple bindings framework ios keychain macos macosx rust security

Last synced: 02 May 2026

https://github.com/nicatnesibli/pingoo

πŸš€ Optimize your traffic with Pingoo, a fast and secure load balancer and API gateway featuring built-in service discovery, bot protection, and more.

akamai anti-bot apache2 backdoor c cloudflare fastly haproxy icmp load-balancer persistence pingoo protocol proxy reverse-proxy rust security waf

Last synced: 02 May 2026

https://github.com/cryptix720/pimux

PIMUX: Manage and share your passwords, documents, private photos and other personal information with world-class security, right from your Windows desktop, Surface or phone.

document information password password-manager security windows windows-service

Last synced: 03 May 2026