An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/mugomes/miantivirus

MiAntivirus is a graphical interface for ClamAV that allows you to scan your computer for viruses and easily update the virus definition database through a user-friendly interface.

antivirus clamav frontend fyne go golang linux security ubuntu

Last synced: 14 Feb 2026

https://github.com/hamidurrahman1/news-portal

A RESTful Webservice built with Spring Boot, Spring Security, Spring AOP, and H2. This is also for learning and practicing purposes only.

h2-database rest-api security spring-aop spring-boot spring-security

Last synced: 10 Aug 2025

https://github.com/nozaq/terraform-google-parked-domain-baseline

A terraform module to set up DNS records to harden the parked(unused) domain using GCP Cloud DNS.

devops dns domain email-security gcp security security-hardening terraform terraform-module

Last synced: 13 Aug 2025

https://github.com/volkansah/tor-scapy-application

This project is a simple example of using Stem and Scapy together to create an anonymized network analysis tool. The application can connect to a running Tor process or start a new one, send network packets through the Tor network, and rotate identities.

admins analytics defense hack hacking offensive python scapy script security stem tor wardrive

Last synced: 17 Aug 2025

https://github.com/idriz4work/cs50w

In CS50W, I'm gaining proficiency in the foundational aspects of full-stack web development. I working on numerous projects encompassing both frontend and backend components.CS50W (Web Development)

ci-cd css django git html javascript migrations models python react scalability security sql testing user-interface

Last synced: 18 Aug 2025

https://github.com/thewh1teagle/magen

Pikud Haoref Apps and API's

alert israel pikudhaoref security

Last synced: 22 Aug 2025

https://github.com/protosec-research/tree-of-ast

Tree-of-AST: Python Security Analysis framework inspired by ToT (Tree-of-Thoughts) of Deliberate Code analysing states using ToT-based ways.

ai gpt-4 ml python security security-audit security-tools source-to-sink static-code-analysis tree-of-thoughts

Last synced: 04 Sep 2025

https://github.com/customcommander/xss-lang

An experimental grammar for parsing XSS attacks

grammar javascript nearley parser security xss

Last synced: 25 Aug 2025

https://github.com/valoran-m/keylogger

it is a keylogger with two different clients one for linux and the other for windows and a server that compiles under linux only

c explain keylogger schema security socket

Last synced: 27 Aug 2025

https://github.com/zebrunner/carina-crypto

Cryptographic Java Library. Provides an interface for encrypting / decrypting based on Cipher. Part of the Carina Framework

carina carina-framework cryptography java security

Last synced: 30 Apr 2025

https://github.com/krishkumar/agentguard

Work safely with AI agents like Claude Code, Cursor, Kiro

agents ai-safety claude cli developer-tools kiro kiro-cli kiroween security

Last synced: 20 Jan 2026

https://github.com/pgilad/security-keys-ftw

My list of congrats and call-outs for services supporting (or not) security keys

2fa security security-key yubikey

Last synced: 11 Jan 2026

https://github.com/vt-alt/tripso

Трансляция меток безопасности CIPSO и ГОСТ Р 58256-2018 (RFC 1108 Astra)

cipso gost-58256-2018 ipso iptables kernel-module rfc1108 security

Last synced: 07 Apr 2025

https://github.com/solentlabs/har-capture

Capture and sanitize HAR (HTTP Archive) files with deep PII removal. Perfect for support diagnostics, security reviews, and test fixtures.

bug-reports devtools har http-archive pii playwright privacy python sanitization security support-tools zero-dependencies

Last synced: 02 Apr 2026

https://github.com/oqullcan/berry-privacy

BERRY-privacy is a PowerShell script designed to enhance your privacy by blocking telemetry fields and IP addresses.

automation firewall hosts network-security powershell privacy privacy-protection script security telemetry-blocking windows

Last synced: 15 Apr 2025

https://github.com/praveensirvi1212/jenkins_sonarqube_basic_project

DevSecOps Project using git, GitHub, Jenkins and sonarqube

cicd codequality jenkins-pipeline security sonarqube

Last synced: 16 Oct 2025

https://github.com/kw-soft/threatintelligence

RSS feed aggregator that collects security-related news and advisories from multiple sources and posts them to designated Discord channels via webhooks

discord feed forensics malware-analysis malware-research python security security-tools threat-hunting threat-intelligence

Last synced: 01 Mar 2026

https://github.com/sebescudie/vl.virustotal

A not-complete-at-all implementation of the VirusTotal V3 API for vvvv

malware security virustotal vl vvvv

Last synced: 30 Oct 2025

https://github.com/luckman212/dstat

CLI tool to query the screen sleep or lock status

displays macos screen security shell-scripting utility

Last synced: 16 Oct 2025

https://github.com/sidhaler/jmsscanner

JmS network port scanner

network rust scanner security

Last synced: 25 Mar 2025

https://github.com/mercedes-benz/sechub-plugin-eclipse

eclipse plugin for sechub https://marketplace.eclipse.org/content/sechub

eclipse eclipse-plugin ide plugin sechub security security-automation security-testing

Last synced: 09 Apr 2025

https://github.com/jacksingleton/dast-pipeline

Notes on the current state of DAST tooling in automated delivery pipelines

automated-delivery-pipelines burp security zap

Last synced: 25 Mar 2025

https://github.com/binorassocies/bro-scripts

Bro IDS useful scripts

bro-ids security smtp x509

Last synced: 04 Feb 2026

https://github.com/kicksecure/apparmor-profile-thunderbird

AppArmor profile for Thunderbird - https://www.kicksecure.com/wiki/AppArmor - for better security (hardening).

apparmor debian security thunderbird

Last synced: 19 Apr 2025

https://github.com/fxboy/fanxing-security-spring-boot-starter

fanxing-security-spring-boot-starter 是 一个精简版的安全框架。它专注于权限校验与安全方面,并不考虑用户的登录状态,支持多角色多权限的权限校验,多个接口实现开发者自定义操作

authentication-tokenauthentication permission-verification security verification

Last synced: 24 Jan 2026

https://github.com/ree-verse/rexor

Cross-platform Rust library with CLI app implementing XOR encryption/decryption

cli decryption encryption security xor

Last synced: 04 Apr 2026

https://github.com/camjac251/tool-gates

Intelligent tool permission gate for AI coding assistants. Bash AST parsing, file guards, configurable tool blocking

ai-tools claude-code cli gemini-cli hooks permissions rust security tree-sitter

Last synced: 30 Apr 2026

https://github.com/bseddon/letsencrypt-hmailserver

Using Let's Encrypt certificates with hMailServer

email hmailserver lets-encrypt privacy security ssl ssl-certificates

Last synced: 29 Jan 2026

https://github.com/jaegertracing/security-audits

Jaeger security audits

cncf security

Last synced: 02 Mar 2026

https://github.com/marcjulian/pyoram

Crypto tool written in python which stores files on a cloud storage and disguises the access of the files

cloud-storage oram privacy python security

Last synced: 31 Mar 2025

https://github.com/robertdebock/ansible-role-collectd

Install and configure collectd on your system.

ansible collectd molecule playbook security tox

Last synced: 24 Apr 2025

https://github.com/kicksecure/apparmor-profile-hexchat

AppArmor profile for HexChat IRC - https://www.kicksecure.com/wiki/AppArmor - for better security (hardening).

apparmor hexchat irc profile security

Last synced: 10 Mar 2025

https://github.com/landlock-lsm/tuto-lighttpd

Landlock tutorial to patch lighttpd

landlock linux sandboxing security

Last synced: 09 Aug 2025

https://github.com/alex5402/enc-tool

kotlin based encription for strings

encryption encryption-decryption kotlin-android security

Last synced: 26 Feb 2026

https://github.com/rustcohlnikov/eslint-config-sec

🔒 Linting rules for safe and secure client code

eslint fe-sec linter security

Last synced: 25 Mar 2025

https://github.com/glowyphp/csrf

Csrf Package provides Cross Site Request Forgery protection by comparing provided token with session token to ensure request validity.

csrf glowy glowyphp package php php-package security

Last synced: 02 May 2025

https://github.com/vt-alt/ipt-so

Селектор меток безопасности для iptables

cipso ipso iptables kernel-module rfc1108 security

Last synced: 05 Oct 2025

https://github.com/benjaminxscott/awesome-threats

A curated list of security threats and how to mitigate them

infosec security security-professionals

Last synced: 08 Jan 2026

https://github.com/monke443/cve-2023-40028

Arbitrary file read in Ghost-CMS allows an attacker to upload a malicious ZIP file with a symlink.

cve cve-2023-40028 exploit ghost-cms github pentesting security vulnerability

Last synced: 07 May 2025

https://github.com/dinanathdash/envault

Auditable .env secret manager featuring aggressive CLI safeguards and GitHub JIT access.

cli developer-tools devsecops dotenv jit-access secret-manager secrets-management security

Last synced: 20 Apr 2026

https://github.com/hollobit/wg3_tcm

a matrix to provide the clarified definition and relationship information of trustworthiness characteristics between in the AI/ML standards

accountability ai bias consistency controllability effectiveness explainability integrity ml quality reliability risk robustness security testing traceability transparency trust trustworthiness vulnerability

Last synced: 29 May 2026

https://github.com/isabellaalstrom/nd-motionsnapshot

Takes snapshots of your cameras and sends to discord

automation camera cameras discord hacs home-assistant netdaemon security snapshot

Last synced: 15 Apr 2026

https://github.com/dariomonopoli-dev/codegate-cli

Zero Trust Runtime for AI Agents. Isolates pip install in Firecracker MicroVMs to prevent slopsquatting and hallucinated package attacks.

devsecops llm malware-detection python security supply-chain

Last synced: 14 Jan 2026

https://github.com/dajiaji/mkkey

Application-layer Key Generator supporting JWK (JSON Web Key) and PASERK (Platform-Agnostic Serialized Keys).

cryptography jose jwk jwt paserk paseto python security

Last synced: 14 Jan 2026

https://github.com/ladjs/mongoose-omit-common-fields

Array of common fields to emit for Mongoose toObject/toJSON (helpful for security)

common fields helper koa lad mongo mongodb mongoose omit security select

Last synced: 15 Apr 2025

https://github.com/wravoc/harden-ghostbsd

Implements a broad, cohesive group of hardening settings for GhostBSD. Any directive can be set, re-set, for administering, tuning, and jails. Zenbleed workaround, Downfall info.

bsd cybersecurity downfall ghostbsd hardening security security-automation security-tools vulnerability-assessment vulnerability-detection zenbleed

Last synced: 10 Feb 2026

https://github.com/marthijn/sidio.web.security

Helper functions and middleware to secure ASP.NET Core applications

asp-net-core content-security-policy http security web-security

Last synced: 26 Oct 2025

https://github.com/abhishekpanda0620/eol-check

A CLI tool to check the End-Of-Life (EOL) status of your development environment and project dependencies.

cli-tool devops end-of-life eol nodejs security sre typescript

Last synced: 13 Jan 2026

https://github.com/amusarra/liferay-portal-security-audit

This project implements some of the mechanisms of the Liferay Portal Security Framework and in particular of the Audit Framework section. Customized message processor audits have been implemented such as: CloudAMQP Audit Message Processor, Login Failure Message Processor and Syslog Audit Message Processor

audit audit-message audit-router audit-service liferay liferay7 message-processors osgi security

Last synced: 21 Jul 2025

https://github.com/xiosec/leakguard

LeakGuard is a project to prevent the use of leaked passwords.

active-directory hardening ldap leak leakguard lsa lsass security windows windows-internals

Last synced: 03 May 2026

https://github.com/skyf0l/sveltekit-helmet

Important security headers for SvelteKit

csp headers helmet hsts http-headers security sveltekit

Last synced: 11 Apr 2025

https://github.com/mauricelambert/chromepasswordsstealer

This module steals chrome and chromium passwords on Windows.

browser chrome password passwords pypi-package python3 recovery security stealer windows

Last synced: 15 Mar 2026

https://github.com/craftzman7/pentest-mcp

Automated discovery and exploitation of security vulnerabilities using natural language and LLMs.

llm mcp pentesting security

Last synced: 14 Jul 2025

https://github.com/turbot/steampipe-mod-terraform-oci-compliance

Run compliance and security controls to detect Terraform OCI resources deviating from security best practices prior to deployment using Powerpipe and Steampipe.

compliance hacktoberfest oci oracle-cloud oracle-cloud-infrastructure powerpipe powerpipe-mod security sql steampipe steampipe-mod terraform

Last synced: 12 Feb 2026

https://github.com/pjbgf/beargrabz

Monitor Kubernetes Clusters for authorisation tokens being passed in clear-text.

bearer-tokens devsecops kubernetes network-security security security-audit security-tools

Last synced: 24 Apr 2026

https://github.com/trendmicro/v1-cloud-community

About Collection of Trend Micro Open Source Community Projects related to Trend Vision One

automation demo security trendmicro trendvisionone visionone

Last synced: 15 Apr 2025

https://github.com/menezess42/grandmaai

A security System Powered by AI.

ai computer-vision lstm machine-learning security yolov8

Last synced: 04 Feb 2026

https://github.com/cppalliance/crypt

A C++20 module of cryptographic utilities for CPU and GPU

cpp20 cuda security

Last synced: 23 Apr 2025

https://github.com/capelabs/threatmesh-feed

ThreatMesh is an integrated threat intelligence engine that connects malicious IPs, scripts, and open-source signals into a unified mesh for real-time detection and context-rich analysis.

dataset security security-tools threat threat-intelligence

Last synced: 04 Feb 2026

https://github.com/gdatasoftwareag/nextcloud-gdata-antivirus

This nextcloud app aims to provide an additional layer of security to your Nextcloud instance by enabling automatic and manual scanning of files for malicious content powered by G DATA Verdict-as-a-Service.

cloud it-security malware malware-detection nextcloud nextcloud-apps security

Last synced: 05 Mar 2026

https://github.com/jeckel/eloquent-signature

Add signature check on your Eloquent models

eloquent laravel security signature

Last synced: 21 Apr 2026

https://github.com/roptat/hayha

Verifying CloudFormation deployments for intra-update sniping vulnerabilities

security

Last synced: 15 Mar 2026

https://github.com/lucadibello/virtualsafe

🔒 Crypt your directories and make your files completely unreadable!

cryptography fernet privacy-tools python security security-tool

Last synced: 06 Jun 2026

https://github.com/openwall/popa3d

Tiny POP3 daemon designed with security as the primary goal

daemon pop3 security server

Last synced: 16 Oct 2025

https://github.com/turbot/flowpipe-mod-teams

Microsoft Teams pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Microsoft Teams to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code microsoft-teams orchestration pipelines security teams workflow workflow-automation workflow-engine

Last synced: 28 Feb 2026

https://github.com/nikogura/keymaster

A tool for configuring Hashicorp Vault for Managed Secrets

security

Last synced: 14 Jan 2026

https://github.com/skipmcgee/host_security

Red Hat Enterprise Linux 6 & 7 security tool for enumerating security and IT operations-relevant information on a host and forwarding to a SIEM or enterprise syslog server in key='value' format.

cyber cybersecurity linux python3 rhel6 rhel7 security security-tools syslog

Last synced: 12 Jul 2025

https://github.com/wgtechlabs/container-build-flow-action

Intelligent docker container build automation for modern development workflows.

docker ghcr security workflow-automation

Last synced: 28 Feb 2026

https://github.com/matutetandil/anyhide

Hide any data in any file. Steganography tool that never modifies the carrier - transmits only encrypted positions. X25519 + ChaCha20 with forward secrecy.

chacha20 cli covert-communication cryptography data-hiding encryption forward-secrecy plausible-deniability privacy rust security steganography x25519

Last synced: 13 Jan 2026

https://github.com/tpritc/verboten_keys

Verboten Keys is a last line of defense to help prevent you and your team from accidentally leaking private information via your APIs.

rack rails ruby security

Last synced: 08 Oct 2025

https://github.com/open-turo/actions-security

GitHub Actions for security checks

action ci gha github security

Last synced: 16 Jan 2026

https://github.com/vdjagilev/owasp-risk-calculator

An attempt to create a basic OWASP Risk Calculator

calculator owasp risk risk-assessment security

Last synced: 12 Mar 2026

https://github.com/contrast-security-oss/integration-verify-github-action

GitHub Action to verify an application by determining whether the application violates a job outcome policy or threshold of open vulnerabilities

assess contrast github-actions security verify

Last synced: 08 Oct 2025

https://github.com/teezzan/ohtp

A secured and extensible authentication service with support for multiple media and integration forms.

open-source otp-generator otp-verification security

Last synced: 12 Jun 2025

https://github.com/donbarbos/i2p-jabber

🐧 Script to configure Jabber (a.k.a. XMPP) server inside i2p network

bash i2p i2pd jabber linux privacy prosody script security self-hosted shell xmpp

Last synced: 05 Feb 2026

https://github.com/astrohelm/isolation

How often do you see libraries which mutates global variables. Or how often do you check libraries actions 🥸 ?This library prevents unexpected behavior and global pollution.

astrohelm container context dependency-injection isolation javascript loader nodejs pollution-control realm realms runner sandbox script script-loader security v8 vm wrapper zero-dependencies

Last synced: 09 Apr 2026

https://github.com/cy7su/cysu

Modern educational platform built with Flask, featuring enterprise-grade security, automated CI/CD, and beautiful Material Design UI. Deploy in 30 seconds with Docker or run locally with Python 3.11+.

authentication bootstrap ci-cd docker educational-platform enterprise-grade flask github-actions material-design modern-ui production-ready python python3 responsive-design security sqlalchemy sqlite telegrambot web-application

Last synced: 28 Feb 2026

https://github.com/junzhengca/gitscanner

Automatically clone and scan all public GitHub repositories for a given organization.

github hacking pentesting recon scanner security

Last synced: 21 Jan 2026

https://github.com/timgrossmann/securitycat

Conent and PoC of my security testing automation thesis

policy security security-rat security-tools thesis

Last synced: 16 Feb 2026