Security
Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
- GitHub: https://github.com/topics/security
- Wikipedia: https://en.wikipedia.org/wiki/Computer_security
- Aliases: security-tools, security-vulnerability, security-audit,
- Last updated: 2026-06-11 00:27:45 UTC
- JSON Representation
https://github.com/liamg/furious
:angry: Go IP/port scanner with SYN (stealth) scanning and device manufacturer identification
ip-scanner network-scanner port-scanner security
Last synced: 04 Apr 2025
https://github.com/trailofbits/winchecksec
Checksec, but for Windows: static detection of security mitigations in executables
hacktoberfest mitigations security windows
Last synced: 15 May 2025
https://github.com/cedricbonhomme/stegano
A pure Python steganography module.
hidden-message image-processing secret security steganalysis steganography
Last synced: 20 Jan 2026
https://github.com/tv-labs/elixir-secure-coding
An interactive cybersecurity curriculum designed for enterprise use at software companies using Elixir
elixir elixir-lang elixir-phoenix livebook salus security security-education sobelow
Last synced: 04 Apr 2025
https://github.com/drduh/Purse
GnuPG asymmetric password manager
bash bash-script encryption file-encryption gnupg gpg password password-manager security unix
Last synced: 27 Mar 2025
https://github.com/AnyeDuke/Enterprise-Security-Skill
用于记录企业安全规划，建设，运营，攻防的相关资源
enterprise enterprise-security-skill osint security
Last synced: 13 Mar 2025
https://github.com/Graphite-Docs/graphite
Encrypted, secure, user-owned productivity suite
blockchain decentralized-applications privacy security writing
Last synced: 03 Apr 2025
https://github.com/CERT-Polska/Artemis
A modular vulnerability scanner with automatic report generation capabilities.
artemis pentesting security security-scanner security-tools vulnerability-detection vulnerability-scanner web-scanner
Last synced: 28 Sep 2025
https://github.com/leiweibau/pi.alert
Scan the devices connected to your WIFI / LAN and alert you the connection of unknown devices. It also warns if a "always connected" device disconnects. In addition, it is possible to check web services for availability. For this purpose HTTP status codes and the response time of the service are evaluated.
arp-scan network-security pi-hole pialert security self-hosted
Last synced: 28 Feb 2026
https://github.com/RobustNLP/CipherChat
A framework to evaluate the generalization capability of safety alignment for LLMs
alignment chatgpt gpt-4-0613 jailbreak large-language-models llm security
Last synced: 12 Mar 2025
https://github.com/TechRate/Smart-Contract-Audits
Smart Contract security audit reports
audit defi ethereum reflection security security-audit smart-contracts smart-contracts-audit solidity techrate
Last synced: 08 May 2025
https://github.com/EvilBytecode/GoRedOps
🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Go programming language, all is made for educational purpoeses only.
go golang hacking malware malware-development offensive-security red-team redteaming security windows
Last synced: 14 Oct 2025
https://github.com/chainguard-dev/osquery-defense-kit
Production-ready detection & response queries for osquery
defense osquery security threat-hunting
Last synced: 25 Jan 2026
https://github.com/Marshall-Hallenbeck/red_team_attack_lab
Red Team Attack Lab for TTP testing & research
ansible hacking infosec lab penetration-testing pentesting red-team redteam security security-testing security-tools vagrant
Last synced: 12 Jul 2025
https://github.com/ConsenSysDiligence/vscode-solidity-auditor
Solidity language support and visual security auditor for Visual Studio Code
security solidity vscode vscode-extension vscode-language vscode-theme
Last synced: 15 Apr 2025
https://github.com/jkctech/Telegram-Trilateration
Proof of concept for abusing Telegram's "People Near Me" feature and tracking people's location
exploit gps-coordinates gps-location nox nox-player privacy python security telegram vulnerability
Last synced: 20 Apr 2025
https://github.com/elliotkillick/mido
The Secure Microsoft Windows Downloader
automation download downloader microsoft security windows windows-10 windows-11 windows-7 windows-8-1 windows-downloader windows-iso windows-iso-downloader windows-ltsc windows-server windows10 windows11
Last synced: 04 Apr 2025
https://github.com/diversenok/TokenUniverse
An advanced tool for working with access tokens and Windows security policy.
access-tokens delphi native-api security security-tools windows windows-internals
Last synced: 09 Apr 2025
https://github.com/xfiftyone/STS2G
Struts2漏洞扫描利用工具 - Golang版. Struts2 Scanner Written in Golang
golang golang-application security struts2-exp vulnerability
Last synced: 14 Apr 2025
https://github.com/pocketpaw/pocketpaw
Your AI agent in 30 seconds. Not 30 hours. Self-hosted, open-source personal AI with desktop installer, multi-agent Command Center(Deep Work), and 7-layer security. Anthropic, OpenAI, or Ollama.
ai-agents cli jarvis-assistant multi-agent-systems ollama open-source personal-assistant python security self-hosted telegram-bot-ai-assistant
Last synced: 10 Mar 2026
https://github.com/DataDog/dd-trace-py
Datadog Python APM Client
apm ci datadog debugging error-monitoring observability profiling python security tracing
Last synced: 26 Mar 2025
https://github.com/rust-ammonia/ammonia
Repair and secure untrusted HTML
crates html-sanitization security web
Last synced: 13 May 2025
https://github.com/artginzburg/sudo-touchid
Permanent TouchID support 👆 for `sudo`.
authentication bash cli macos security sudo terminal touchid
Last synced: 25 Oct 2025
https://github.com/stacklok/codegate
CodeGate: Security, Workspaces and Muxing for AI Applications, coding assistants, and agentic frameworks.
ai ai-gateway aisecurity artificial-intelligence claude cline codegen copilot developer-productivity developer-tools generative-ai ide jetbrains llm ollama openai privacy python security vscode
Last synced: 15 May 2025
https://github.com/dan-v/rattlesnakeos-stack
Build your own privacy and security focused Android OS in the cloud.
android aosp aws aws-lambda chromium custom ec2 f-droid golang ota-update privacy security signing-keys spot-instances terraform verified-boot
Last synced: 03 Oct 2025
https://github.com/kkomelin/isomorphic-dompurify
Use DOMPurify on server and client in the same way
dompurify html-escape isomorphic isomorphic-dompurify sanitize sanitize-html sanitizer security ssr universal wrapper xss xss-filter
Last synced: 02 Apr 2026
https://github.com/soxoj/counter-osint-guide-ru
Исчерпывающее руководство по приватности и контр-ОСИНТ для Рунета и всего СНГ 🇷🇺
cis counter-osint guide osint privacy runet security
Last synced: 27 Jan 2026
https://github.com/Coldcard/firmware
❄️ Firmware and simulator for Coldcard Hardware Wallet
bitcoin bitcoin-wallet cryptocurrency cryptography security
Last synced: 26 Mar 2025
https://github.com/konstruktoid/ansible-role-hardening
Ansible role to apply a security baseline. Systemd edition.
almalinux amazon-linux ansible auditd centos debian hacktoberfest hardening information-security openscap security security-compliance security-hardening security-tools systemd ubuntu vagrant
Last synced: 19 Oct 2025
https://github.com/prompt-security/ps-fuzz
Make your GenAI Apps Safe & Secure :rocket: Test & harden your system prompt
ai ai-fuzzer fuzzer generative-ai llm llm-fuzzer security security-tools system-prompt-hardener
Last synced: 14 Jan 2026
https://github.com/OWASP/www-project-kubernetes-top-ten
OWASP Foundation Web Respository
Last synced: 12 Apr 2025
https://github.com/shenril/sitadel
Web Application Security Scanner
penetration-testing python3 scanner-web security
Last synced: 02 Apr 2025
https://github.com/devops-kung-fu/bomber
Scans Software Bill of Materials (SBOMs) for security vulnerabilities
cyclonedx devsecops epss golang gomodule oss sbom security security-automation security-tools spdx supply-chain supplychain syft vulnerability-scanners
Last synced: 15 May 2025
https://github.com/liamg/scout
🔭 Lightweight URL fuzzer and spider: Discover a web server's undisclosed files, directories and VHOSTs
fuzzer hackthebox pentesting security url url-fuzzer
Last synced: 05 Apr 2025
https://github.com/the-viper-one/pentest-everything
A collection of CTF write-ups, pentesting topics, guides and notes. Notes compiled from multiple sources and my own lab research. Topics also support OSCP, Active Directory, CRTE, eJPT and eCPPT.
active-directory active-directory-security bloodhound crto crtp ctf ctf-writeups ecpptv2 ejpt hacking hackthebox offensive-security oscp penetration-testing pentest-tools pentesting proving-grounds-writeups security tryhackme
Last synced: 27 Jan 2026
https://github.com/m0nad/HellRaiser
Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.
cve cve-scanning hacking hacking-tool network network-analysis nmap rails ruby scanner security security-audit security-tools vulnerability-assessment vulnerability-detection vulnerability-scanners
Last synced: 07 Apr 2025
https://github.com/m0nad/hellraiser
Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.
cve cve-scanning hacking hacking-tool network network-analysis nmap rails ruby scanner security security-audit security-tools vulnerability-assessment vulnerability-detection vulnerability-scanners
Last synced: 05 Apr 2025
https://github.com/trailofbits/fickling
A Python pickling decompiler and static analyzer
machine-learning python security
Last synced: 04 Mar 2026
https://github.com/xalgord/xalgorix
Xalgorix - The Most Powerful Open-Source AI Pentesting Agent
ai ai-tools bug-bounty bugbounty cybersecurity security technology
Last synced: 07 Jun 2026
https://github.com/aws-samples/siem-on-amazon-opensearch-service
A solution for collecting, correlating and visualizing multiple types of logs to help investigate security incidents.
Last synced: 16 Apr 2025
https://github.com/firewalla/firewalla
http://firewalla.com
cyber dns doh firewalla iot monitoring parental-control raspberry-pi router security simple vlan vpn
Last synced: 27 Sep 2025
https://github.com/ivpn/ios-app
Official IVPN iOS app
ios ivpn privacy security swift vpn vpn-client
Last synced: 11 Jun 2026
https://github.com/nccgroup/tracy
A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.
browser-extension chrome chrome-extension firefox firefox-addon security security-tools xss xss-detection
Last synced: 04 Apr 2025
https://github.com/mateusjunges/laravel-acl
This package helps you to associate users with permissions and permission groups with laravel framework
access-control access-management acl authentication authorization hacktoberfest laravel package php7 security
Last synced: 03 Oct 2025
https://github.com/Threagile/threagile
Agile Threat Modeling Toolkit
agile architecture cicd devsecops infosec risk-analysis risk-management security threagile threat-modeling
Last synced: 01 Apr 2025
https://github.com/JamesWoolfenden/pike
Pike is a tool for determining the permissions or policy required for IAC code
aws bridgecrew gcp iac policy security terraform
Last synced: 30 Mar 2025
https://github.com/jamesWoolfenden/pike
Pike is a tool for determining the permissions or policy required for IAC code
aws bridgecrew gcp iac policy security terraform
Last synced: 30 Mar 2025
https://github.com/jameswoolfenden/pike
Pike is a tool for determining the permissions or policy required for IAC code
aws bridgecrew gcp iac policy security terraform
Last synced: 25 Feb 2026
https://github.com/lockgit/hacking
Hacker, ready for more of our story ! 🚀
attack attacker attacks cracker geek hack hacker hacking hacking-tool poc scanner security security-research security-vulnerability tool tools vulnerabilities vulnerability vulnerability-scanners
Last synced: 13 Apr 2025
https://github.com/jedisct1/libsodium-php
The PHP extension for libsodium.
crypto cryptography halite libsodium libsodium-php php php-extension security
Last synced: 15 May 2025
https://github.com/LockGit/Hacking
Hacker, ready for more of our story ! 🚀
attack attacker attacks cracker geek hack hacker hacking hacking-tool poc scanner security security-research security-vulnerability tool tools vulnerabilities vulnerability vulnerability-scanners
Last synced: 13 Mar 2025
https://github.com/quillhash/quillaudit_auditor_roadmap
This repository contains a mindmap and stepwise resource to get started with Smart Contract Auditing. If you find anything missing or want to update existing resources, feel free to create a pull request.
blockchain ethereum evm security solidity
Last synced: 15 May 2025
https://github.com/burtonqin/lockbud
Detect concurrency and memory bugs and possible panic locations in Rust projects
bug-detection rust security static-analyzer
Last synced: 30 Aug 2025
https://github.com/cleverbeagle/pup
The Ultimate Boilerplate for Products.
apollo app boilerplate example graphql graphql-client graphql-server javascript markdown meteor meteorjs mongodb nodejs react security sitemap ssr styled-components webhooks websockets
Last synced: 04 Apr 2025
https://github.com/kanidm/webauthn-rs
An implementation of webauthn components for Rustlang servers
Last synced: 23 Oct 2025
https://github.com/FourCoreLabs/EDRHunt
Scan installed EDRs and AVs on Windows
infosec security security-tools
Last synced: 11 Jul 2025
https://github.com/MetaOSINT/MetaOSINT.github.io
A tool to quickly identify relevant, publicly-available open source intelligence ("OSINT") tools and resources, saving valuable time during investigations, research, and analysis.
cryptocurrency cybersecurity disinformation email facebook geoint geolocation instagram intelligence investigation news opsec osint search search-engine security social-media social-network twitter username
Last synced: 06 Aug 2025
https://github.com/Esonhugh/Attack_Code
文章 Attack Code 的详细全文。安全和开发总是具有伴生属性，尤其是云的安全方向，本篇文章是希望能帮助到读者的云安全入门材料。Full text of the article Attack Code. Security and development always have concomitant attributes, and this is especially true with the security direction of the cloud. This article is an introduction to cloud security that I hope will help readers.
article cloud cloud-security cloudsecurity introduction security
Last synced: 11 May 2025
https://github.com/honmashironeko/ARL-docker
基于ARL v2.6.2版本源码，生成docker镜像进行快速部署，同时提供七千多条指纹
arl cyber-security cyber-security-tool docker security security-tools
Last synced: 01 Mar 2026
https://github.com/payloadbox/rfi-lfi-payload-list
🎯 RFI/LFI Payload List
application-security appsec bug-bounty bugbounty lfi lfi-exploitation lfi-vulnerability payload payload-list payloads rfi rfi-exploiton rfi-vulnerabillity security security-research security-researcher security-researchers web-application-security web-hacking websecurity
Last synced: 05 Mar 2025
https://github.com/esonhugh/attack_code
文章 Attack Code 的详细全文。安全和开发总是具有伴生属性，尤其是云的安全方向，本篇文章是希望能帮助到读者的云安全入门材料。Full text of the article Attack Code. Security and development always have concomitant attributes, and this is especially true with the security direction of the cloud. This article is an introduction to cloud security that I hope will help readers.
article cloud cloud-security cloudsecurity introduction security
Last synced: 05 Apr 2025
https://github.com/so87/CISSP-Study-Guide
study material used for the 2018 CISSP exam
cheatsheet cissp exam security study study-guide study-materials
Last synced: 11 Jul 2025
https://github.com/kevinburke/nacl
Pure Go implementation of the NaCL set of API's
curve25519 golang nacl secretbox security
Last synced: 16 May 2025
https://github.com/evilbytecode/goredops
🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Go programming language, all is made for educational purpoeses only.
go golang hacking malware malware-development offensive-security red-team redteaming security windows
Last synced: 15 May 2025
https://github.com/shenril/Sitadel
Web Application Security Scanner
penetration-testing python3 scanner-web security
Last synced: 30 Mar 2025
https://github.com/chainloop-dev/chainloop
SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
attestation compliance cyclonedx devsecops in-toto license metadata-platform open-source-licensing ospo oss-compliance regulated-industry sbom sbom-discovery sbom-distribution security slsa slsa-provenance spdx supply-chain-security
Last synced: 01 May 2026
https://github.com/podium/elixir-secure-coding
An interactive cybersecurity curriculum designed for enterprise use at software companies using Elixir
elixir elixir-lang elixir-phoenix livebook salus security security-education sobelow
Last synced: 28 Mar 2025
https://github.com/pcaversaccio/snekmate
State-of-the-art, highly opinionated, hyper-optimised, and secure 🐍Vyper smart contract building blocks.
ethereum evm library security smart-contracts vyper vyper-contracts
Last synced: 14 May 2025
https://github.com/line/line-fido2-server
FIDO2(WebAuthn) server officially certified by FIDO Alliance and Relying Party examples.
example fido2 java passwordless relying-party security spring-boot webauthn
Last synced: 29 Apr 2026
https://github.com/marshall-hallenbeck/red_team_attack_lab
Red Team Attack Lab for TTP testing & research
ansible hacking infosec lab penetration-testing pentesting red-team redteam security security-testing security-tools vagrant
Last synced: 06 Feb 2026
https://github.com/Frissi0n/GTFONow
Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
ctf ctf-tools gtfobins hacking hackthebox offensive-security pentest pentesting post-exploitation privilege-escalation redteam security security-tools suid-binaries
Last synced: 11 Jun 2025
https://github.com/hakky54/mutual-tls-ssl
🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC, WebSocket and ElasticSearch examples are included
certificate certificate-authority certificate-signing-request encryption https java keystore keytool kotlin mutual-authentication mutual-tls openssl scala security server spring-boot ssl tls truststore two-way-ssl-authentication
Last synced: 04 Apr 2025
https://github.com/Hakky54/mutual-tls-ssl
🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC, WebSocket and ElasticSearch examples are included
certificate certificate-authority certificate-signing-request encryption https java keystore keytool kotlin mutual-authentication mutual-tls openssl scala security server spring-boot ssl tls truststore two-way-ssl-authentication
Last synced: 10 May 2025
https://github.com/paragonie/csp-builder
Build Content-Security-Policy headers from a JSON file (or build them programmatically)
content-security-policy cross-site-scripting csp csp-builder csp-header easy-to-use http http-header json-configuration php secure-by-default security xss
Last synced: 14 May 2025
https://github.com/vu1nt0tal/vehicle-security-toolkit
汽车/安卓/固件/代码安全测试工具集
android apk cve pentest reverse-engineering security static-analysis vulnerability
Last synced: 15 Dec 2025
https://github.com/ciscocsirt/gosint
The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
golang ioc security threat-intelligence
Last synced: 14 Jan 2026
https://github.com/Vu1nT0tal/Vehicle-Security-Toolkit
汽车/安卓/固件/代码安全测试工具集
android apk cve pentest reverse-engineering security static-analysis vulnerability
Last synced: 15 May 2025
https://github.com/scheb/2fa
Two-factor authentication for Symfony applications 🔐
2fa security symfony symfony-bundle two-factor-authentication
Last synced: 04 Jan 2026
https://github.com/joshlarsen/aws-recon
Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.
aws cli collection inventory scanner security
Last synced: 14 Mar 2025
https://github.com/phra/rustbuster
A Comprehensive Web Fuzzer and Content Discovery Tool
bug-bounty hacktoberfest pentesting reconnaissance security security-tools
Last synced: 05 Apr 2025
https://github.com/abhi-r3v0/Adhrit
Android Security Suite for in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.
analysis android android-security apk blackhat2020 blackhatarsenal dex enjarify ghera java mobile-security reverse-engineer security security-tools smali smalisca
Last synced: 08 May 2025
https://github.com/simonepri/upash
🔒Unified API for password hashing algorithms
api argon bcrypt brute-force cli credential credentials hash-functions hashing nodejs password pbkdf2 rainbow-table secure security timing-attacks unified universal upash verification
Last synced: 12 Apr 2025
https://github.com/ciscocsirt/GOSINT
The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
golang ioc security threat-intelligence
Last synced: 13 Mar 2025
https://github.com/paperboytm/spool
Your local AI session library. Collects sessions from Claude Code, Codex CLI, Gemini CLI (and more) — browsable and ⌘K-searchable.
ai-agents claude-code codex codex-cli developer-tools electron full-text-search gemini-cli linux local-first macos mcp open-source opencode privacy productivity security
Last synced: 03 Jun 2026
https://github.com/wolfssl/wolfmqtt
wolfMQTT is a small, fast, portable MQTT client implementation, including support for TLS 1.3.
embedded iot iot-security mqqt-packet mqtt mqtt-client mqtt-library mqtt-sn mqtt-tls qos-0-2 quality-of-service security sensor-network tls tls13 tls13-support wolfmqtt wolfssl wolfssl-library
Last synced: 14 Apr 2025
https://github.com/wolfSSL/wolfMQTT
wolfMQTT is a small, fast, portable MQTT client implementation, including support for TLS 1.3.
embedded iot iot-security mqqt-packet mqtt mqtt-client mqtt-library mqtt-sn mqtt-tls qos-0-2 quality-of-service security sensor-network tls tls13 tls13-support wolfmqtt wolfssl wolfssl-library
Last synced: 05 Apr 2025
https://github.com/momenbasel/keyFinder
Keyfinder🔑 is a tool that let you find keys while surfing the web!
chrome-extension js pentesting pentesting-tools security
Last synced: 10 May 2025
https://github.com/kicksecure/security-misc
Kernel Hardening; Protect Linux User Accounts against Brute Force Attacks; Improve Entropy Collection; Strong Linux User Account Separation; Enhances Misc Security Settings - https://www.kicksecure.com/wiki/Security-misc
kernel-hardening kspp security
Last synced: 15 May 2025
https://github.com/lithnet/ad-password-protection
Active Directory password filter featuring breached password checking and custom complexity rules
active-directory lithnet-password-protection lpp password password-protection security
Last synced: 23 Jul 2025
