An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/greycloudss/greave

Greave is a fast, multi-mode scanner for locating sensitive information in both local filesystems and Confluence pages.

armourer confluence crawler python reconnaissance security

Last synced: 07 Oct 2025

https://github.com/ctx42/convert

Go 32bit and 64bit safe conversions between types.

go golang golang-library security

Last synced: 14 Jan 2026

https://github.com/lupaxa-security-toolbox/certtool

A clean, modern, fully-typed Python CLI and library for generating self-signed X.509 certificates, certificate signing requests (CSRs), and private keys.

certificates lupaxa lupaxa-security-toolbox security the-lupaxa-project

Last synced: 02 Mar 2026

https://github.com/skywardai/paper_gallery

Papers gallery for using LLMs ability over dataset

ai data data-science llm medicine neural-network research security

Last synced: 19 Mar 2026

https://github.com/ctrly4sh/secure-rolebased-auth-api

Secure API with JWT authentication, AES encryption, and OAuth 2.0 with access control.

authentication backend for-resume nodejs security

Last synced: 08 Apr 2025

https://github.com/nisanth2004/springboot-3-jwt-authentication-authorization-part1

In the context of user authentication, JWTs are commonly used to authenticate users and provide them access to protected resources.

amingoscode api intellij-idea java jpa jparepository json jwt mysql oops rest role security securityfilterchain spring springboot3 token token-based-authentication

Last synced: 16 Apr 2026

https://github.com/mablanco/docker-jaeles

Docker image for Jaeles, a powerful, flexible and easily extensible framework written in Go for building your own Web Application Scanner

docker pentesting security

Last synced: 02 Jun 2026

https://github.com/bcoles/rootkit-signal-hunter

Detect Linux rootkits which use signals to elevate process privileges.

privilege-escalation-linux rootkit-detection rootkit-hunter security

Last synced: 18 Jan 2026

https://github.com/xxmrk888ytxx/portal-android

Portal is a secure, open-source smart key that turns your Android smartphone into a wireless authentication tool for your computer. It enables instant PC unlocking via Bluetooth (RFCOMM) or WiFi (WebSockets), featuring biometric protection, Wake-on-LAN support, and a privacy-focused, local-only communication model.

android bluetooth kotlin mtls security windows

Last synced: 31 May 2026

https://github.com/crowdsecurity/nodejs-cs-bouncer

The official Crowdsec Node.js Bouncer/Remediation Component

nodejs security

Last synced: 08 Oct 2025

https://github.com/belgif/rest-security

The Belgif REST Security Guide is ought to be regarded as an addendum to the Belgif REST Guidelines.

belgif belgium guide rest rest-api restful-api security

Last synced: 20 Apr 2026

https://github.com/aayushadhikari7/aegis

A local-first WebAssembly sandbox runtime with capability-based security

capability-based-security runtime rust sandbox security wasm wasmtime webassembly

Last synced: 18 Jan 2026

https://github.com/victoralfred/devsec

MLSecOps security pipeline tool - automated scanning, policy enforcement, compliance mapping, and ML validation for CI/CD

cli compliance devsec golang iso27001 mlsecops opa policy-as-code sast sbom secrets-detection security slsa soc2 supply-chain-security vulnerability-scanner

Last synced: 12 Mar 2026

https://github.com/ababyprogrammer/security-foundry

Security a short word but full of meaning, practical, sensitive etc, but full of trouble. Talking and explaining about the security of projects has always been important to programmers...

security

Last synced: 28 Feb 2026

https://github.com/bloomkd46/xhome

Unofficial Xfinity Home node.js library (SDK) to control your home security

home security xfinity

Last synced: 16 Feb 2026

https://github.com/rashimrbrd/security

A comprehensive security management platform designed to protect users, applications, and infrastructure through advanced threat detection, access control, and real-time monitoring capabilities.

docker javascript-library maintenance security tools-and-automation tools-engineering wrangler

Last synced: 01 May 2026

https://github.com/amir13872/usb-control-application

The USB Control Application is designed to monitor and manage USB device connections, ensuring unauthorized access is prevented through password protection and a whitelist of trusted devices. This application enhances security by controlling USB access based on user-defined settings.

hacking monitoring security security-tools usb

Last synced: 16 Feb 2026

https://github.com/edeckers/lib1password-unofficial

Educational TypeScript implementation of 1Password's security model with interactive explainer. Covers Secret Key generation, PBKDF2 key derivation, and AES-256-GCM vault encryption

1password aes-256 cryptography educational encryption interactive-demo password-manager pbkdf2 pet-project security srp typescript web-crypto

Last synced: 28 Feb 2026

https://github.com/kovart/forta-aztec-money

Forta bots that covers both funding and money laundering stages through Aztec Protocol

aztec-protocol bot forta security

Last synced: 19 Mar 2026

https://github.com/thayeeb9211/ortho-secure

Orthosecure: Secure Dentistry Appointment Booking and Management System. It is designed to be robust and secure application with enhanced security and compliance checks within containerized environments. It leverages cutting-edge technologies to monitor, analyze, and secure workloads in real-time.

cicd csrf-attacks ddos-attacks devsecops docker-compose docker-image gitlab security xss-attacks xss-vulnerability

Last synced: 28 Feb 2026

https://github.com/astropilot/bigeye

A web security challenges website, a school project for my software security course

challenge cryptography ctf-platform security web

Last synced: 19 Mar 2026

https://github.com/sorah/hocho-jwt

Pass JWT to servers on hocho apply

hocho itamae jwt provisioning security

Last synced: 09 Oct 2025

https://github.com/el-moudni-hicham/keycloak-access-management-getting-started

Getting Started with Keycloak for access management

keycloak security

Last synced: 19 Mar 2026

https://github.com/ayushdhimann/phishwarden

The Trailblazers team has implemented a browser extension that uses machine learning to prevent phishing attacks on browsers. This project is part of the KAVACH 2023 hackathon.

cyber detection hackathon machine-learning phishing security

Last synced: 03 Apr 2025

https://github.com/forwardemail/mcp-server

Model Context Protocol (MCP) server for Forward Email. Connect AI assistants to your inbox.

ai api assistants context email email-api forward imap inbox mcp model pop3 protocol security server smtp

Last synced: 31 May 2026

https://github.com/joelayo/kubectl-go-mcp-server

MCP server for secure Kubernetes Interaction via kubectl commands. Enables AI assistants like GitHub Copilot to safely interact with K8s clusters with robust validation and security.

copilot devops go golang k8s-tools kubectl kubernetes mcp-server model-context-protocol security

Last synced: 17 Apr 2026

https://github.com/cyscomvit/writeups

A set of CTF writeups and tutorials

ctf-writeups security writeups

Last synced: 19 Mar 2026

https://github.com/sixt/hardcoded-slack-webhook-alerter

This tool can be used to scan for hardcoded Slack webhooks and send an alert to each one about the dangers of hardcoded credentials.

credentials devsecops pentesting secrets security security-tools

Last synced: 14 Jan 2026

https://github.com/limitedeternity/ost2

OpenSecurityTraining2 – Lectures

architecture infosec security

Last synced: 10 Oct 2025

https://github.com/filipnet/nodered-securitycam

Retrieval of e-mail, extraction of image attachments, resizing and creation of slideshow for MQTT

attachments camera e-mail flow hikam image mqtt node-red security slide slideshow

Last synced: 10 Oct 2025

https://github.com/luandnh/a2billing.securityconsole

Tool to auto generate MD5 passworđ for extension asterisk and a2billing account.

asterisk netcore security

Last synced: 10 Oct 2025

https://github.com/turbot/flowpipe-mod-abuseipdb

AbuseIPDB pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect AbuseIPDB to the people, systems and data that matters.

abuseipdb abuseipdb-api automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 19 Mar 2026

https://github.com/turbot/flowpipe-mod-virustotal

VirusTotal pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect VirusTotal to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code orchestration pipelines security virustotal virustotal-api workflow workflow-automation workflow-engine

Last synced: 19 Mar 2026

https://github.com/turbot/flowpipe-mod-discord

Discord pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Discord to the people, systems and data that matters.

automation cloud devops discord discord-api flowpipe flowpipe-mod hacktoberfest integrations low-code orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 18 Jun 2026

https://github.com/sekgobela-kevin/webrute

Python bruteforce library for http requests

asyncio bruteforce bruteforcer http login python requests security

Last synced: 31 May 2026

https://github.com/malmichaels-gif/agent-instructions-kit

Keep your AGENTS.md and CLAUDE.md files consistent, safe, and lint-checked

agents automation claude cli devtools github-action prompt-injection security

Last synced: 18 Jan 2026

https://github.com/foxted/codemod-polyfill

‎ This codemod detects https://cdn.polyfill.io‎ and replaces it with https://cdnjs.cloudflare.com/polyfill/v3/polyfill.min.js?version=4.8.0'

polyfill security

Last synced: 11 Oct 2025

https://github.com/desmondsanctity/cve-2022-2274

OpenSSL-src Heap Memory Corruption with RSA Private Key Operation : CVE-2022-2274

advisory security vulnerabilities vulnerability-assessment

Last synced: 19 Mar 2026

https://github.com/luanqmata/iesgo-security-6sem

💂 6°Sem - Segurança Ofensiva 🔒🧠🔑

ctf linux pentest pentesting security security-tools

Last synced: 12 Feb 2026

https://github.com/johnnyshankman/npm-compromise-scanner

Scan a directory tree for npm packages compromised in a supply-chain incident, given a CSV of affected packages.

cli dependency-scanner malware-detection nodejs npm security security-tools shai-hulud supply-chain-attack supply-chain-security

Last synced: 02 Jun 2026

https://github.com/kentico-ericd/xperience-community-database-anonymizer

Anonymizes sensitive data in Kentico 13 and Xperience by Kentico databases

kentico kentico-xperience security xperience-by-kentico

Last synced: 11 Oct 2025

https://github.com/alexanderwolz/keycloak

Custom Docker image of Keycloak integrating Metrics SPI and Docker Registry Mapper

custom docker iam image keycloak metrics registry security spi

Last synced: 12 Feb 2026

https://github.com/akwaaba-xyz/urkel

A gRPC client and HTTP wrapping server for Open FGA, built in Rust.

access-control authorization fga governance openfga rust security wrapper zanzibar

Last synced: 26 Jan 2026

https://github.com/ldclakmal/ballerina-oauth1.0a

Ballerina OAuth1.0a is an RFC 5849 standards-compliant library for Ballerina.

authorization ballerina ballerina-lang oauth oauth1 oauth1a security swan-lake

Last synced: 12 Feb 2026

https://github.com/djinnalexio/motion-sensor-alarm

A simple alarm with a PIR motion sensor and with or without push buttons

alarm leds motion-sensor pir-motion-detector python-2 python-3 raspberry-pi-3 raspberry-pi-gpio security sound-effects

Last synced: 12 Feb 2026

https://github.com/elamirch/nae

NAE - Data security application for Windows devices

encryption security visual-basic-net

Last synced: 12 Feb 2026

https://github.com/kirakenjiro/guardian

[🔒] Your shield against intrusive trackers, annoying ads, and other online nuisances. Keep your browsing experience clean, private, and distraction-free.

adblock adblock-list adguard dns filter-list pihole privacy protection security tracking

Last synced: 19 Jan 2026

https://github.com/nicolascbv/amitrackable

This is a silly website build so study some legacy features.

babel javascript privacy react react-class-components security tracking typescript webpack

Last synced: 09 Apr 2026

https://github.com/labex-labs/comptia-security-plus-training-labs

Master cybersecurity fundamentals through hands-on labs, covering threat analysis, risk management, network security, identity management, cryptography, and incident response. Perfect for CompTIA Security+ certification prep.

certification certification-prep comptia course cryptography cybersecurity hands-on hands-on-labs identity-management incident-response labex labs network-security penetration-testing programming risk-management security security-fundamentals sysadmin threat-analysis

Last synced: 11 Feb 2026

https://github.com/nxgn-kd01/shai-hulud-scanner

Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.

cdn cve polyfill polyfill-io scanner security supply-chain vulnerability-scanner

Last synced: 21 Jan 2026

https://github.com/snatev/sechelp

A comprehensive collection of security services, tools, and information catering to a wide variety of uses

collections security security-tools

Last synced: 27 Feb 2026

https://github.com/thepredictivedev/biopaywebapp

Minimal biometric payment web app prototype with basic HTML front end.

authentication biometrics html payments security webapp

Last synced: 10 Feb 2026

https://github.com/mediamonks/self-xss-console-banner

This module will log a self-xss banner to warn users about the self-xss security risk. This banner should be used for projects that have data behind a login.

security security-tools self-xss self-xss-warning

Last synced: 25 Mar 2025

https://github.com/ansleysze/demosymfony

"Demo Symfony Project - A sample Symfony web application demonstrating user authentication, CRUD operations, custom login styling, and basic routing."

crud-application security symfony

Last synced: 22 Jan 2026

https://github.com/remram44/rhp-secret

A proposal for reportable secrets

proposal rfc secret secrets security

Last synced: 18 Mar 2026

https://github.com/cert-edf/iron

Unified cases, seamless integrations

dfir-automation dfir-tools framework security

Last synced: 09 Feb 2026

https://github.com/alexander-naumov/openiked-opensuse

RPM package of OpenIKED for openSUSE and SUSE Linux Enterprise

ikev2 opensuse security vpn

Last synced: 22 Jan 2026

https://github.com/anqorithm/headscale-k0s-vpn

A local demo that runs a Kubernetes cluster behind a self-hosted VPN. Your apps are only accessible through the encrypted VPN mesh invisible to the outside world.

headscale k0s k8s security vpn wireguard

Last synced: 02 Jun 2026

https://github.com/stevenjcumming/rails-security-guide

Ruby on Rails guide, checklist, and tips for security audits and best practices

checklist rails rails-security ruby security

Last synced: 15 Apr 2026

https://github.com/paulveillard/cybersecurity-talks

An ongoing curated collection of awesome software, libraries, frameworks, talks, best practices, learning tutorials and important practical resources in Security.

cyber-threat-intelligence cybertalents presentation-slides security security-tools speaking-resources speech-recognition talk-preparation talks talks-and-papers

Last synced: 19 Mar 2026

https://github.com/trekhleb/claude-pod

Docker sandbox for Anthropic's Claude Code CLI. Use --dangerously-skip-permissions safely — Claude only sees the project folder you launched from

ai-agent anthropic claude claude-code cli coding-agent developer-tools docker sandbox security

Last synced: 02 Jun 2026

https://github.com/girorme/binoculo-mcp

Banner grabbing with LLM (MCP Server)

bugbounty claude-ai llm mcp-server python redteam-tools security

Last synced: 26 Feb 2026

https://github.com/cameronkerrnz/sriracha

For fast email searching of large MBOX archives, especially Google Takeout

archive email forensics reporting security

Last synced: 22 Jan 2026

https://github.com/rebaze/scat

AI-native SBOM reporter

sbom security vulnerability

Last synced: 13 May 2026

https://github.com/xamiron/owasp-top-10-vulnerabilities-note

A vulnerability is a hole or a weakness in the application, which can be a design flaw or an implementation bug, that allows an attacker to cause harm to the stakeholders of an application.

hacking-notes owasp-top-10 security vulnerability-assessment

Last synced: 19 Feb 2026

https://github.com/containerssh/charts

The ContainerSSH Helm charts

devsecops docker kubernetes security ssh

Last synced: 20 Jul 2025

https://github.com/jackivanov/spiv

Set up SOCKS proxy in the cloud at the push of a button

security socks5 socks5-proxy socks5-server vpn

Last synced: 22 Jan 2026

https://github.com/4xyy/cli-password-manager

A command-line tool for securely managing passwords. It allows users to store, retrieve, and generate strong passwords, all encrypted with a master key.

automation cli-tool credential-management cross-platform cybersecurity data-privacy encryption fernet-encryption key-management open-source password-generator password-manager python secure-storage security

Last synced: 30 Jun 2026

https://github.com/ajtatum/babou.aspnetcore.securityextensions

Babou is concerned about security, so I created a .NET Standard 2.0 Security Extensions package for him. Babou is from the TV show Archer and is not affiliated with this package.

asp-net-core babou dotnet dotnetcore dotnetcore3 http-headers security

Last synced: 11 Apr 2026

https://github.com/jaro-c/lynx

⚡ A blazingly fast, modern, and secure process manager for Linux. The zero-overhead, systemd-native alternative to PM2 powered by Go.

community daemon deployment devops golang isolation linux non-commercial open-source-like pm2 pm2-alternative process-manager sandboxing security supervisor systemd

Last synced: 23 May 2026

https://github.com/nikogura/vault-authenticator

Managed Secrets Client Libraries

security

Last synced: 27 Jan 2026

https://github.com/0xtter/pentestingwebsiteauditchallenge

This project provides a comprehensive penetration testing audit, report, and fixed version of a website to improve site security. The report analyzes potential security risks and recommends actionable solutions. By identifying and addressing website vulnerabilities, this project helps ensure the safety and security of websites and their users.

audit pentesting security vulnerabilities

Last synced: 15 Oct 2025

https://github.com/ribafs/laravel7-acl

ACL Implementation to laravel 7 applications

access acl laravel laravel7 security

Last synced: 07 Feb 2026

https://github.com/valera-rozuvan/gen2fa

generate 2FA codes helper utility

2fa 2fa-security security

Last synced: 16 Oct 2025

https://github.com/yandex-cloud-examples/yc-webinar-kubernetes-security-2021

Материалы вебинара «Безопасность в инфаструктуре, основанной на Kubernetes».

kubernetes mk8s security terraform yandex-cloud yandexcloud

Last synced: 15 Apr 2026

https://github.com/turbot/flowpipe-mod-sendgrid

SendGrid pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect SendGrid to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code orchestration pipelines security sendgrid sendgrid-api trello-se twilio-sendgrid workflow workflow-automation workflow-engine

Last synced: 19 Mar 2026

https://github.com/elnappo/broadtractor

Broadcast Extractor

broadcast privacy python3 security

Last synced: 25 Mar 2025

https://github.com/kiencang/rtd-cafe

rtd-cafe là công cụ tự động hóa việc cấu hình Cache Rules và WAF (Bảo mật) trên Cloudflare, được tối ưu hóa đặc biệt cho WordPress Blog & Trang tin tức sử dụng VPS.

cache cloudflare security vps wordpress

Last synced: 27 Feb 2026

https://github.com/baraja-core/simple-template

Simple PHP templating system for user editable templates.

edit editable-templates php safe security template template-system validate validator

Last synced: 01 Feb 2026

https://github.com/p-zielinski/mail-scanner

Mail scanner that detects scam/phishing emails in inbox using ai and automatically moves them to the spam/junk folder. supports multiple accounts, historical backfill with emailsanalyzeduntil, and live watching with reconnection/keepalive.

ai anthropic automation backfill claude imap inbox mail mailparser nodejs phishing-detection security spam-detection typescript watcher

Last synced: 31 Jan 2026