An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/avivsinai/telclaude

Secure Telegram-Claude bridge with LLM-based command screening and tiered permissions

ai-agent anthropic claude cryptography docker isolation llm llm-security permission-tiers sandbox security telegram-bot typescript

Last synced: 28 May 2026

https://github.com/dajiaji/mkkey

Application-layer Key Generator supporting JWK (JSON Web Key) and PASERK (Platform-Agnostic Serialized Keys).

cryptography jose jwk jwt paserk paseto python security

Last synced: 14 Jan 2026

https://github.com/deratheone/motion_detection_system

An Arduino-based security system that detects motion using an ultrasonic sensor and triggers a buzzer and RGB LED alarm. Supports day, night, and always-on modes with auto arming/disarming using an LDR, and mode selection via touch sensor. Ideal for home security and demos.

arduino motion motion-sensor security sensors

Last synced: 13 Jul 2025

https://github.com/monke443/cve-2023-40028

Arbitrary file read in Ghost-CMS allows an attacker to upload a malicious ZIP file with a symlink.

cve cve-2023-40028 exploit ghost-cms github pentesting security vulnerability

Last synced: 07 May 2025

https://github.com/ogrodev/fsociety

Multi-plugin marketplace for Claude Code offensive security plugins

claude-code claude-code-plugin offensive-security pentesting security

Last synced: 30 Apr 2026

https://github.com/bluet/express-pwnd-pw

Express.js security middleware for checking user password safety with Have I Been Pwned (HIBP) API

express express-middleware expressjs hacktoberfest hibp middleware node nodejs password password-safety security

Last synced: 14 Feb 2026

https://github.com/aadrianleo/python-login-system

Login system application is use for login page for desktop application it registers the users id and password and use it for logging in to the system.

login python security

Last synced: 03 May 2026

https://github.com/geeknik/scada-scanner

A high-performance, asynchronous SCADA/ICS scanner

bug-bounty bugbounty ics infosec scada scanner security

Last synced: 28 Apr 2025

https://github.com/smeso/saractl

saractl is the userspace counterpart of the S.A.R.A. LSM.

hardening linux lsm sara security

Last synced: 14 Jun 2026

https://github.com/localden/mcp-auth-servers

🔒 Reference MCP servers that demo how authentication works with the current Model Context Protocol spec.

authentication authorization mcp model-context-protocol security

Last synced: 10 Apr 2025

https://github.com/binorassocies/bro-scripts

Bro IDS useful scripts

bro-ids security smtp x509

Last synced: 04 Feb 2026

https://github.com/irfaardy/encrypt-file-laravel

🛡️A Simple Laravel Encrypt uploaded file plugin

aes256 encrypt encrypt-file laravel php7 secure security storage upload upload-file

Last synced: 27 Oct 2025

https://github.com/wravoc/harden-ghostbsd

Implements a broad, cohesive group of hardening settings for GhostBSD. Any directive can be set, re-set, for administering, tuning, and jails. Zenbleed workaround, Downfall info.

bsd cybersecurity downfall ghostbsd hardening security security-automation security-tools vulnerability-assessment vulnerability-detection zenbleed

Last synced: 10 Feb 2026

https://github.com/wgtechlabs/container-build-flow-action

Intelligent docker container build automation for modern development workflows.

docker ghcr security workflow-automation

Last synced: 28 Feb 2026

https://github.com/Zeerg/modsecurity-layer

A ModSecurity Lambda Layer for AWS

aws lambda modsecurity security serverless-framework

Last synced: 31 Mar 2025

https://github.com/wolfeidau/github-action-workflow-check

CLI which checks if the version of actions used in your workflow are up to date

github github-actions security

Last synced: 03 May 2026

https://github.com/edmartt/profilesaver

This is a password manager developed for fun and learning about MVC.

desktop-application java mvc-application password password-generator password-manager passwordmanager security

Last synced: 06 Jan 2026

https://github.com/geeklearningio/gl-ionic-secure-file-storage

A service using two encryption plugins to encrypt data on iOS and Android

cordova cryptography ionic security storage

Last synced: 28 Apr 2025

https://github.com/roptat/hayha

Verifying CloudFormation deployments for intra-update sniping vulnerabilities

security

Last synced: 15 Mar 2026

https://github.com/k1low/oshka

oshka is a tool for extracting nested CI/CD supply chains and executing commands.

github-actions security supply-chain

Last synced: 18 Oct 2025

https://github.com/cy7su/cysu

Modern educational platform built with Flask, featuring enterprise-grade security, automated CI/CD, and beautiful Material Design UI. Deploy in 30 seconds with Docker or run locally with Python 3.11+.

authentication bootstrap ci-cd docker educational-platform enterprise-grade flask github-actions material-design modern-ui production-ready python python3 responsive-design security sqlalchemy sqlite telegrambot web-application

Last synced: 28 Feb 2026

https://github.com/dinotools/ansible-role-dionaea

ansible role to install and/or update dionaea from git

ansible ansible-role dionaea honeypot security

Last synced: 06 May 2026

https://github.com/sixarm/sixarm_shell_random_scripts

SixArm.com → Shell → Random scripts to generate text

encryption random script security shell unix

Last synced: 09 Sep 2025

https://github.com/webship/websecurity

Most needed contributed modules and configurations to manage a secure website.

drupal security web websecurity

Last synced: 06 Mar 2026

https://github.com/lpndev/wpis

Windows Post Install Scripts

debloat privacy security windows

Last synced: 07 Sep 2025

https://github.com/radyakaze/nuxt-dompurify

A Nuxt 3 module for sanitizing HTML content using DOMPurify to protect against XSS attacks.

dompurify html-sanitization html-sanitizer nuxt nuxt3 sanitizer security xss

Last synced: 18 Mar 2025

https://github.com/defguard/yubikey-provision

YubiKey provisioning tool used by defguard security platform

grpc security yubico yubico-otp yubikey

Last synced: 11 Apr 2025

https://github.com/pregress/tflint-ruleset-azurerm-security

TFLint ruleset to enforce security best practices on the AzureRM provider

azure azure-resource-manager azurerm azurerm-terraform-provider security terraform tflint tflint-ruleset

Last synced: 11 Apr 2025

https://github.com/sahilm/hived

hived is a honeypot

go golang honeypot security

Last synced: 11 Apr 2025

https://github.com/hacrvlq/skeld

a tui tool for opening projects in a restricted sandbox to prevent supply chain attacks such as typosquatting

malicious-packages project-launcher sandbox sandboxing security security-tools software-supply-chain-security supply-chain-security tui typosquatting

Last synced: 08 Aug 2025

https://github.com/cmccandless/safepass

Check passwords against https://haveibeenpwned.com/API/v2#PwnedPasswords

password-safety python python3 security

Last synced: 06 May 2025

https://github.com/sefinek/known-bots-ip-whitelist

A whitelist of trusted IP addresses used by legitimate crawlers and services such as Googlebot, Bingbot, AhrefsBot, UptimeRobot, Pingdom, Cloudflare, Bunny CDN, Stripe, Shodan, FacebookBot, TelegramBot, etc.

bot bots crawler firewall goodbot goodbots googlebot ip-address ip-addresses ipset safe safe-bots safety security whitelist whitelist-bot whitelists

Last synced: 21 Jun 2025

https://github.com/msaadshabir/pci-segment

Go CLI for PCI-DSS network segmentation. Validates YAML policies, enforces via eBPF (Linux) or pf (macOS), syncs to AWS/Azure, and generates compliance reports.

audit-logging aws azure cli compliance ebpf golang network-policy network-seg pci-dss pf security

Last synced: 05 Apr 2026

https://github.com/buanzo/crowdsec-dnsbl-service

DNSBL service that bases listing on crowdsec decisions

crowdsec dnsbl security

Last synced: 11 Apr 2025

https://github.com/arhcoder/denunciags

🚨 Aplicación que permite hacer denuncias federales de manera rápida y segura (Descripción pendiente).

application artificial-intelligence denuncias django flutter hackathon mysql python security web

Last synced: 29 Oct 2025

https://github.com/manuelberrueta/hashfinder

Go script that finds a matching hash or a diff of a target hash in a directory.

blueteam blueteam-tools dfir dfir-automation hashing security security-tools

Last synced: 06 Jul 2025

https://github.com/princiya/lightbeam-aframe

WebVR version for the Lightbeam web-extension

aframe aframevr lightbeam privacy security webextension

Last synced: 14 Mar 2026

https://github.com/ssh-mitm/ssh-mitm-plugins

example plugins for SSH-MITM

features plugins security ssh-mitm tools

Last synced: 11 Aug 2025

https://github.com/ichhabrecht/devtools

Adds nice developer tools to your TYPO3 installation

changes developement extension integrity manager security typo3 typo3-cms typo3-extension

Last synced: 12 Apr 2025

https://github.com/pavlakis/csp-middleware

Add Content-Security-Policy headers for PSR-7 requests. Uses the csp-builder library paragonie/csp-builder

content-security-policy csp middleware php php7 security

Last synced: 11 Jan 2026

https://github.com/tenset-security/audits

security audits by Tenset Security

audits blockchain security security-review solidity

Last synced: 03 Apr 2025

https://github.com/rsrdesarrollo/auto-ysoserial

Generate all ysoserial payloads with burp collaborator (or similar)

burp burpsuite exploit java python security security-tools ysoserial

Last synced: 15 May 2026

https://github.com/destan0098/makehash4shodan

This Tools make favicon hash for shodan search

security security-tools shodan

Last synced: 03 Mar 2025

https://github.com/maya-data-privacy/ai-safe-plugin

Real-time PII detection and redaction for AI chat interfaces.

chatgpt chrome-extension claude gemini gliner llm ner pii-detection pii-redaction security security-tools

Last synced: 23 Jun 2026

https://github.com/kou029w/websri

A universal Subresource Integrity (SRI) utility for Node.js, browsers, Cloudflare Workers, Deno, Bun, and other web-compatible runtimes.

browser bun cloudflare cloudflare-workers deno hashing integrity nodejs security sri subresource-integrity typescript

Last synced: 10 Apr 2025

https://github.com/jwilk/vcsnoop

Linux virtual console snooping via TIOCLINUX

security

Last synced: 20 Mar 2025

https://github.com/husseinfo/securitools

Useful security related tools

bash encryption security shell

Last synced: 04 Apr 2025

https://github.com/tubenhirn/rasic

create issues for cve's found by trivy.

cve issues security

Last synced: 13 May 2026

https://github.com/xunholy/k8s-workload-identity

Example setup of workload-identity into a Kubernetes cluster on GCP - https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity

gcp google-cloud iac kubernetes kubernetes-cluster kubernetes-setup pod security security-automation workload-identity

Last synced: 05 May 2025

https://github.com/zackeryrsmith/cval

A layer of protection for python's eval function

eval pypi-package python python3 security

Last synced: 19 Mar 2025

https://github.com/manelli/ex_bcrypt

Elixir wrapper for the OpenBSD bcrypt password hashing algorithm

bcrypt cryptography elixir password security

Last synced: 20 Jun 2025

https://github.com/doctena-org/octorules

Manage WAF rules across providers as code

firewall iac octorules security waf yaml

Last synced: 01 Jul 2026

https://github.com/sug0/git-signify

Harness the power of signify(1) to sign arbitrary git objects

cryptography git openbsd rust security signature signify

Last synced: 07 May 2025

https://github.com/joho1968/fail2wp

WordPress plugin providing security functionality, plays nicely with Fail2ban and Cloudflare. Verified with WordPress 5.5+/6.6.x and PHP 7.4/PHP 8.1.x

cloudflare fail2ban fail2ban-filter php php74 php81 security security-hardening webbplatsen wordpress wordpress-development wordpress-plugin wordpress-security wordpress-security-plugin wordpress5 wordpress55 wordpress6 wordpress66 wordpress67 xmlrpc

Last synced: 09 Apr 2025

https://github.com/grantbirki/auditor-action

The Auditor - A GitHub Action that audits changes made in a pull request, using a customizable configuration

actions auditor automation ci compliance-as-code git-diff review security

Last synced: 07 May 2025

https://github.com/jokk-itu/authserver

Authorization server with OAuth 2.1 and OpenId Connect 1.0

csharp identity oauth2 oidc-server openid-connect security

Last synced: 09 Sep 2025

https://github.com/irfaardy/lockout-account

Laravel Lockout Account. Lock user account automaticaly if login fails with json.

block json kunci laravel laravel-5-package laravel-framework laravel-package lock-account lockouts penguncian security

Last synced: 15 Jun 2025

https://github.com/gyumeijie/securecodingrules

secure coding in c/c++

c coding cpp security

Last synced: 01 May 2026

https://github.com/fiware/tutorials.securing-access-openid-connect

:closed_book: FIWARE 407: Authenticating Identities with OpenID-Connect

fiware fiware-keyrock identity-management openid-connect security tutorial

Last synced: 30 Apr 2025

https://github.com/bad-antics/Fuzz.jl

Security fuzzing toolkit for Julia — mutation, generation, and coverage-guided fuzzing

fuzzing julia mutation-fuzzing security testing

Last synced: 06 Apr 2026

https://github.com/sg-milad/audit-reports

This is a repo containing the smart contract security reviews that I've completed.

auditing blockchain security smart-contract solidity

Last synced: 15 May 2026

https://github.com/XiaomingX/simple-springboot-app

这是一个基于SpringBoot的安全教育框架,提供了清晰的教程,帮助用户快速部署和运行平台。 项目目标:打造一个简便的一站式平台,用于全面评估和提升系统的安全能力。

benchmark security springboot vulnerability

Last synced: 03 May 2025

https://github.com/zerosonesfun/wp-email-blocker

Prevent people or bots from registering with certain email domains or full addresses.

bots email registration security spam wordpress

Last synced: 06 May 2025

https://github.com/neverbehave/rc_hcaptcha

Adds Hcaptcha to the RoundCube login form

captcha hcaptcha login plugin roundcube security

Last synced: 11 Apr 2025

https://github.com/carhartl/talisman-secrets-scan-action

Scan incoming commits for secrets with Talisman

appsec devsecops security

Last synced: 21 Aug 2025

https://github.com/dominicbreuker/iprecon

CLI tool that retrieves WHOIS data for IP addresses

bug-bounty ip recon security whois

Last synced: 28 Oct 2025

https://github.com/hegdepavankumar/cipher-encryption-decryption

Cipher Encryption/Decryption This project is a simple implementation of the cipher encryption and decryption algorithm using JavaScript, HTML, and CSS. The cipher is a substitution cipher that replaces each letter in the plaintext with a letter a certain number of positions down the alphabet.

cipher cipher-algorithms cryptography encryption-algorithms encryption-decryption hashing-algorithm networking-concepts password security

Last synced: 03 Aug 2025

https://github.com/wisespace-io/honeypot-blacklist

Rust library for querying Project Honeypot Blacklist (Http:BL)

honeypot rust security spammer

Last synced: 15 Jun 2025

https://github.com/rappie/portfolio

Rappie's Portfolio

evm fuzzing portfolio security solidity

Last synced: 02 Mar 2025

https://github.com/casbin/caswire

An open-source host-based anti-virus, firewall and IDS (Intrusion Detection System) platform: https://discord.gg/S5UjpzGZjN

antispam antivirus casbin casdoor caswire firewall host ids security

Last synced: 08 Jul 2025

https://github.com/federicoceratto/debian-debsecan

UNOFFICIAL MIRROR. Please use:

debian security

Last synced: 12 Jul 2025

https://github.com/tigera-solutions/cc-aks-strengthen-security-workshop

In this AKS-focused workshop, you will work with Calico Cloud to learn how to strengthen your Microsoft AKS cluster security posture.

aks azure cc regismartins security workshop

Last synced: 13 Apr 2025

https://github.com/elithrar/recon-agent

An Agent that can check the state of GitHub repositories for security advisories and notify users when it sees something looks off.

agents cloudflare security workers

Last synced: 13 Apr 2025

https://github.com/hernanmd/applicationsecurity

A Smalltalk domain-independent security model which you can easily instantiate in your applications

nacl pbkdf2 pharo pharo-smalltalk security security-tools smalltalk

Last synced: 11 Apr 2025

https://github.com/turbot/flowpipe-mod-jira

Jira pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Jira to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations jira jira-api jira-rest-api low-code orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 03 Mar 2026

https://github.com/aeticusdev/youngersibling

YoungerSibling is an OSINT command-line tool designed for educational purposes, featuring web scraping, DNS lookups, EXIF data extraction, and username availability checks to help users learn and explore networking and cybersecurity concepts.

cyberinvestigation cybersecurity footprinting informationgathering opensource osint osinttools pip privacy pypi pypi-package pypi-source python python3 recon reconnaissance security threatintelligence youngersibling

Last synced: 28 May 2026

https://github.com/nathanhi/avrlarm

AVRlarm is an open source alarm system for 8-Bit Atmel CPUs (ATmega2560).

alarm avr burglar gsm gsm-based monitoring security sensor sms sms-notifications

Last synced: 10 Jul 2025

https://github.com/clarkio/pdfjs-vuln-demo

This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js (pdfjs-dist) library reported in CVE-2024-4367

application-security appsec astro astrojs pdf pdfjs pdfjs-dist react security svelte vue vuejs web

Last synced: 09 Sep 2025

https://github.com/skroutz/aws-securityhub-configuration

Configure AWS SecurityHub Subscriptions and Exceptions using GitOps

aws security securityhub terraform terragrunt

Last synced: 15 May 2026

https://github.com/graphtylove/python_with_tor

Repo to demonstrate how to use TOR with python.

python python3 sec security tor

Last synced: 11 Jun 2026

https://github.com/sap/vs-code-extension-for-project-credential-digger

VS Code extension for project Credential Digger https://github.com/SAP/credential-digger

api-key code-scan credential-digger github-scan github-security password secret secret-scan security

Last synced: 22 Jun 2025