An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/gyulyvgc/crosswall

Cross-platform interface to built-in firewalls

firewall firewall-management network-programming networking rust security

Last synced: 01 Mar 2026

https://github.com/azu/express-mongo-sanitize-reporter

Dry-Run mode for express-mongo-sanitize.

express midddleware mongo plugin security

Last synced: 28 Oct 2025

https://github.com/quenchworks/charts

Clean-room Helm charts for the QuenchWorks catalog: each pinned to a signed, 0-CVE image digest, published as OCI to GHCR and listed on ArtifactHub.

artifacthub cosign devsecops digest-pinned hardened helm helm-charts k8s kubernetes oci security sigstore

Last synced: 22 Jun 2026

https://github.com/shahradelahi/timing-safe-compare

🔐 Isomorphic constant-time string and buffer comparison to prevent timing attacks.

browser constant-time cryptography isomorphic nodejs security timing-attack

Last synced: 03 Apr 2026

https://github.com/csharper63/pihole_dnscrypt_config

This repository contains a working docker configuration for pihole and dnscrypt that support DoH.

dns-over-https dnscrypt pihole pihole-dnscrypt pihole-over-doh pihole-over-https privacy security

Last synced: 11 Feb 2026

https://github.com/darkwizard242/ansible-role-sslscan

Ansible role for Sslscan. Available on Ansible Galaxy.

ansible ansible-galaxy ansible-role security sslscan sslscanner system

Last synced: 27 Feb 2026

https://github.com/tokido-io/tokido-core

Production-grade MFA toolkit for Java. TOTP, recovery codes, extensible factors. GraalVM native-image ready.

authentication graalvm java mfa security totp two-factor

Last synced: 28 Apr 2026

https://github.com/r1c0n/blacksmith

Blacksmith generates only the most secure passwords.

generator password password-generator security vue

Last synced: 04 Apr 2026

https://github.com/jjlibra/badusb

badUSB learning.

security usb-devices

Last synced: 04 Jan 2026

https://github.com/riklewis/better-captcha

Stop bots from attacking your forms using hCaptcha

captcha security wordpress wordpress-plugin

Last synced: 18 Apr 2026

https://github.com/khaouiti-apps/cdn

A tutorial-based project that walks you through the process of building a YouTube-like video streaming system using Spring Boot, securing video access with signed URLs. This project will help you implement video content delivery with token-based authentication, which ensures secure and time-limited access to video streams.

security spring-boot streaming urls youtube youtube-api

Last synced: 01 Apr 2025

https://github.com/seqred-s-a/gxdlmsdirector-cve

CVE-2020-8809 and CVE-2020-8810

advisory ami cosem cve dlms security

Last synced: 10 Mar 2025

https://github.com/davemolk/fuzzyhelpers

add browser headers (chrome or firefox) to your requests (plus other helpful utils)

browser-emulation go golang headers infosec pentesting pentesting-tools recon research security

Last synced: 07 Jul 2025

https://github.com/filiprokita/bcrack

BCrack is a basic tool designed to crack Bcrypt hashed passwords using brute-force methods. Written in C, it highlights the importance of strong passwords and the effectiveness of Bcrypt for password hashing. Ideal for educational purposes and ethical security testing with permission.

bcrypt bruteforce c cli command-line crypt cryptography cybersecurity decryption encryption file-handling hacking hash-comparison hash-cracking password-cracking security wordlist

Last synced: 11 Feb 2026

https://github.com/nowsecure/nowsecure-android-root-detection-test-app

Test app for NowSecure Root Detection Bypass tutorial

android dynamic-analysis reverse-engineering security

Last synced: 31 Jul 2025

https://github.com/bormaxi8080/nmap-scanner

Nmap packet domain list scanner to find exploited vulnerabilities

nmap pentesting security shell

Last synced: 23 Nov 2025

https://github.com/abnerpersio/bedrock-api

Studying security on NodeJS APIs

docker nodejs security typescript

Last synced: 12 Apr 2026

https://github.com/codexlynx/qr-brute-force

PoC of brute force attack with QR code.

brute-force hacking qr-code red-team security

Last synced: 30 May 2026

https://github.com/cityssm/simple-password-generator

Makes generating simple or complex, appropriate passwords a breeze.

generator hacktoberfest password password-generator safe security unleet zxcvbn

Last synced: 03 Aug 2025

https://github.com/itsanuragsingh/secret-hunter

A powerful command-line tool to scan your codebase for hardcoded secrets, API keys, and sensitive information.

cli scanner secrets security security-tools

Last synced: 03 Aug 2025

https://github.com/boburmirzo/authgear-spring-oauth2-example

Authentication for Spring Boot App with Authgear and OAuth2

authentication low-code security spring-boot

Last synced: 07 Aug 2025

https://github.com/fikriaf/sentrysol-langchain-v2

SentrySol-Langchain is a professional backend service for Solana blockchain analysis, wallet risk scoring, and AI-powered chat

agent fastapi security web3

Last synced: 23 Aug 2025

https://github.com/haytham-hammioui/cs50x-2024

This is CS50x , Harvard University's introduction to the intellectual enterprises of computer science and the art of programming for majors and non-majors alike, with or without prior programming experience. An entry-level course taught by David J. Malan, CS50x teaches students how to think algorithmically and solve problems efficiently.

ai algorithms c computer computer-science cs50 cs50x css flask html javascript programming python scratch security software-engineering sql

Last synced: 22 Apr 2025

https://github.com/keep-starknet-strange/unrug-tg-bot

Unruggable Meme Telegram Bot

memecoin security starknet

Last synced: 11 Jul 2025

https://github.com/milenmk/laravel-email-change-confirmation

A Laravel package for secure email change confirmation with support for both traditional controllers and Livewire components

email email-security laravel laravel-package security

Last synced: 12 Sep 2025

https://github.com/golab-arch/synaptic-sentinel

The vibe-coding security sentinel. Apache-2.0 agentic security toolkit for AI-assisted projects: 5 deterministic scouts + LLM Brain Layer (BYOK Anthropic), in the IDE and CI.

ai-coding ai-generated-code byok llm-security sast security synaptic taint-analysis vibe-coding vscode-extension

Last synced: 29 May 2026

https://github.com/VainlyStrain/checkdoor

Simple sudo backdoor hunter written in Python.

backdoor backdoor-finder detect-backdoor linux security security-tools sudo unix

Last synced: 11 Mar 2025

https://github.com/the-viper-one/invoke-powerstrings

Extract strings from binary files with PowerShell

powershell security strings windows

Last synced: 18 May 2026

https://github.com/hahwul/cyclonedx-cr

A Crystal tool for generating CycloneDX Software Bill of Materials (SBOM) from Crystal shard projects.

crystal cyclonedx cyclonedx-sbom sbom sbom-generator security

Last synced: 12 Sep 2025

https://github.com/shisa-ai/textguard

Hostile-text normalization, inspection, and cleaning for LLM-adjacent systems.

cli llm prompt-injection python sanitization security text-processing unicode unicode-normalization yara

Last synced: 28 May 2026

https://github.com/marcolugo/vulnserver

Different exploits created for Vulnserver

exploit-development security shellcode

Last synced: 17 May 2026

https://github.com/leodog896/redos.deno

check for ReDoS vulnerabilities in code.

cli redos redos-checker redos-detector security security-automation

Last synced: 06 Mar 2025

https://github.com/entrlcom/go-http-server

HTTP server with tuned and hardened defaults ready for Internet exposure.

go golang http-server security

Last synced: 28 Mar 2025

https://github.com/sqreen/sqreen-monitoring-wordpress

Automatically monitor Wordpress with Sqreen PHP agent

security wordpress

Last synced: 17 May 2026

https://github.com/crcsmnky/service-mush

Service Mush: Debugging Istio Deployments

istio kubernetes microservices mtls security telemetry traffic

Last synced: 26 Mar 2025

https://github.com/kolteq/kubeapt

CLI toolkit for validating Kubernetes admission policies, Pod Security Admission labels, and cluster webhook safeguards.

admission-controllers kubernetes security

Last synced: 13 Jan 2026

https://github.com/kaihendry/badpath

Could a security linter ever pick up on this?

security

Last synced: 29 Mar 2025

https://github.com/jaegeral/misp-chrome-plugin

MISP Chrome plugin for adding and looking up indicators

broswer chrome cyber misp plugin security security-tools threat-intelligence threatintel

Last synced: 13 May 2026

https://github.com/leifrogers/php-copilot

A comprehensive GitHub Copilot configuration that transforms your coding assistant into a Senior PHP Architect and Security Specialist

github-copilot laravel php php-development prompt-engineering security symfony

Last synced: 08 May 2026

https://github.com/uldyssian-sh/vmware-vsphere-8-stig-auditor

vSphere 8 STIG compliance auditing and validation suite with automated security assessments

audit auditing automation compliance devops infrastructure security stig tools validation vmware vsphere8

Last synced: 06 Oct 2025

https://github.com/aliesmaeil/api-key-hiding-client

Demonstration of API key hiding locally in Mobile Applications.

api apikey apikeys dart encryption security

Last synced: 04 Jan 2026

https://github.com/simplito/privmx-endpoint-java

Java wrappers for the native C++ library used by PrivMX to handle end-to-end (E2E) encryption.

android communication e2ee end-to-end-encryption java kotlin mobile privmx security

Last synced: 11 Apr 2025

https://github.com/buluma/ansible-role-security

Basic Ansible Role Security

ansible ansible-role molecule security tox

Last synced: 18 Jan 2026

https://github.com/satanaelcode/pyssword

A simple Password Generator based on Python.

password python security

Last synced: 17 Apr 2025

https://github.com/01tek/npm-security-score

World-class security standard for npm packages. Automated threat detection, supply chain analysis, and 0-100 security scores. Because in 2025, we can do better than the Wild West

ci-cd devsecops npm package-security security security-tools supply-chain vulnerability-scanner

Last synced: 13 Jan 2026

https://github.com/oritwoen/shaha

Hash database builder and reverse lookup tool. SHA + aha!

cli crypto hash parquet reverse-lookup rust security

Last synced: 13 Jan 2026

https://github.com/rof13thfloor/sql-slammer-worm_detection

Slammer worm is a type of Worm that caused a denial of service on some Internet hosts and dramatically slowed general Internet traffic.

network security worm

Last synced: 30 Mar 2025

https://github.com/7majesty-m/terminal-guardian-mcp

Secure MCP server for safe AI-powered terminal access with risk analysis, sandboxing, logging, filesystem protection, and Docker/Git integrations.

ai ai-agents claude cli dev-tools mcp nodejs sandbox security terminal

Last synced: 26 May 2026

https://github.com/moresec-io/conduit

A transparent proxy mesh. 一个透明代理网格,为你集群间安全保驾护航!

iptables mesh-networks mtls security tls tob transparent-proxy

Last synced: 12 Jan 2026

https://github.com/embetrix/meta-pqc

OpenEmbedded/Yocto layer dedicated to Post-Quantum Cryptography, providing integration and testing of quantum-safe cryptographic algorithms for embedded linux systems.

crypto-agility cryptography embedded-linux embedded-systems openembedded post-quantum-cryptography python security yocto

Last synced: 24 Feb 2025

https://github.com/padok-team/dojo-terraform-aws-security

Hands-on introduction to secure AWS resources with Terraform.

aws dojo security terraform

Last synced: 08 Jul 2025

https://github.com/frewsxcv/homograph-attack-finder

Find homograph attack candidates for top 1m sites

homograph-attack security

Last synced: 06 Apr 2025

https://github.com/node-link/cakephp-remember-me

CakePHP plugin that performs Remember-me authentication with the new cookie algorithm of version 3.5 or later.

cakephp cakephp-plugin cookie remember-me security

Last synced: 26 Jul 2025

https://github.com/asankasovis/password-manager-csharpgui

🔐 Muragala is a password manager designed to make managing passwords easy and secure. My goal is to make it a secure and reliable password manager available in the public domain for everyone to use. Privacy and security is for everyone, this is the core value behind this project.

csharp password password-generator password-manager security

Last synced: 28 Mar 2025

https://github.com/careydevelopment/jwt-security

Handles security for the Carey Development ecosystem.

java json jwt security spring spring-boot

Last synced: 13 Apr 2026

https://github.com/andreswebs/kali-ec2-lab

Setup Kali Linux on an AWS EC2 instance and connect to it via RDP

aws kali-linux penetration-testing security

Last synced: 14 Apr 2025

https://github.com/rami-aouinti/bro-world-backend-ecommce

E-commerce backend based on Sylius (an OSS framework atop Symfony). Emphasizes strong testing culture, REST API, BDD workflow, and modular features—useful as a foundation for custom commerce solutions.

api-rest mongodb php security

Last synced: 12 Jan 2026

https://github.com/sarperavci/exploitme

A collection of containerized security vulnerabilities including privilege escalation CVEs and SUID exploits for hands-on penetration testing practice.

ctf cybersecurity docker exploit penetration-testing privilege-escalation security security-training suid vagrant vulnerable

Last synced: 08 Jul 2025

https://github.com/dan-q/length-extension-attack-demo

A demonstration of a (SHA1) length extension attack, with instructions

attack hacking hacking-tool length-extension security sha1 sha1-hash

Last synced: 27 Jun 2025

https://github.com/qit-tools/browser-extension-password-generator-pro

🔒 Powerful and user-friendly browser extension/add-on with PRO features for randomly generating and checking passwords security.

add-on add-ons-for-firefox brave chrome edge extension extension-chrome extension-edge extension-firefox firefox generator opera password pro protection random security security-tools

Last synced: 06 May 2026

https://github.com/justintime50/.github

Default GitHub Community Health Files for all my projects.

codeofconduct community contributing docs files funding git github health meta security support template

Last synced: 30 Apr 2026

https://github.com/engineering87/jwt-inspector

Effortlessly decode, inspect, and validate JWTs

decoding dotnet jsonwebtoken jwt security token validation

Last synced: 14 Apr 2025

https://github.com/claudiaslibrary/visualsec

A tool for visualizing and analyzing cybersecurity data as interactive graphs. Supports entity modeling, risk-based coloring, attack path analysis, and data import/export. Designed for OSINT and cybersecurity professionals.

cybersecurity ethical-hacking graph hacking hacking-tool matplotlib network osint penetration-testing python security security-tools

Last synced: 03 Feb 2026

https://github.com/timescale/ressrf

Multi-platform SSRF prevention library

go nodejs python rust security ssrf ssrf-protection wasm webassembly

Last synced: 29 May 2026

https://github.com/volkansah/x201-batconsole

🔧 Turn an old Lenovo X201 into a full-featured, hardened, AI-ready home server — or use it as a deep server guide for your $20,000 rig. This isn’t just a setup – it’s a statement for real devs, tinkerers & privacy freaks. 🦇

ai apache2 darknet development do-it-yourself guide hardening hidden-services how-to how-to-setup huggingface lamp pandas security security-tools server tor torch ubuntu-server wifi

Last synced: 31 Aug 2025

https://github.com/jeremylaratro/purplesploit

Purplesploit - a framework for ultimate pentesting workflow efficiency

cyber offensive offsec pentesting purple purpleteam purpleteaming redteam security

Last synced: 21 May 2026

https://github.com/mikong/anshou

A text-based UI (TUI) application for generating passwords.

rust security terminal

Last synced: 17 May 2026

https://github.com/ramnes/pyshellshock

:scream: Python library and utility for CVE-2014-6271 (aka. "shellshock")

python security security-audit security-vulnerability

Last synced: 10 Jan 2026

https://github.com/tijme/blog-v1

My blog about cyber security, hacking, software engineering and much more.

blog cyber engineering hacking hexo programming security software static

Last synced: 22 May 2026

https://github.com/kattecon/gh-app-access-token-gen

Generate a temporary access token for a github app using app id and its private key and either installtation id or installation repository name.

access gh security token

Last synced: 17 Jan 2026

https://github.com/barek2k2/local_llm

Lightweight Ruby gem for interacting with locally running Ollama LLMs with streaming, chat, and full offline privacy.

ai artificial-intelligence chatbot data-privacy-compliance data-security llm local-ai local-ai-development local-ai-llm machine-learning offline-ai privacy private-chat ruby ruby-on-rails security

Last synced: 19 Apr 2026

https://github.com/ashkanrafiee/nightwarden

Nightwarden is a microservices-based antivirus scanning solution using ClamAV. It streamlines file upload scanning by serving as a central antivirus service across multiple applications.

antivirus api devops devsecops docker dockercompose fileupload kubernetes microservice rest-api security

Last synced: 04 Feb 2026

https://github.com/kiko-g/feup-fsi

FEUP FSI | Computer Security Foundations | 2021/22

intro security seed-labs

Last synced: 15 Jul 2025

https://github.com/spoutn1k/python-sotools

Python tools to resolve dynamic dependencies of ELF objects

elf linker linux security system tool

Last synced: 17 Nov 2025

https://github.com/pirate-emperor/cipherx

CipherX is a verification project for Advanced Encryption Standard (AES-128) using Universal Verification Methodology (UVM). It leverages Verilog, SystemVerilog, and Python to ensure robust encryption algorithm validation, integrating comprehensive UVM components and tests.

aes-128 cryptography cryptography-algorithms dataencryption dataencryptionstandards digitaldesign encrytption hardwareverification python security testing-framework uvm verification verilog

Last synced: 26 Jan 2026