An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/gitguardian/gg-mcp

MCP server for scanning and remediating hardcoded secrets using GitGuardian’s API. Detect over 500 secret types and prevent credential leaks before code goes public.

mcp mcp-server secrets security

Last synced: 27 Aug 2025

https://github.com/snawoot/httptrap

Web-server which produces infinite chunked-encoded responses to slowdown malicious clients

ddos-mitigation filter filtering http-flood http-server security webserver

Last synced: 13 Apr 2025

https://github.com/github/entitlements-gitrepo-auditor-plugin

Entitlements plugin for a robust audit log

audit entitlements iam security

Last synced: 10 May 2025

https://github.com/securestackco/actions-exposure

A GitHub Action that scans your public web applications after every deployment. Add this to your dev, staging and prod steps and SecureStack will make sure that what you've just deployed is secure and meets your requirements.

actions cloud-security cloud-security-posture-management deployment deployment-automation deployment-pipeline dynamic-analysis github-actions secrets-detection security software-composition-analysis vulnerability-detection vulnerability-scanning web-application web-vulnerability web-vulnerability-scanner

Last synced: 07 Aug 2025

https://github.com/dgac/inseca

INSECA is a set of tools to build and manage very secure live Linux based endpoint systems.

cybersecurity debian endpoint linux linux-desktop live-linux security workstations

Last synced: 13 Apr 2025

https://github.com/En14c/LilyOfTheValley

Simple LKM linux kernel rootkit (x86 / x86_64)

c kernel kernel-module linux-kernel linux-kernel-module security

Last synced: 10 Mar 2025

https://github.com/robertdebock/ansible-role-cis

Apply and/or check recommendations from the CIS benchmarks.

ansible cis molecule playbook security tox

Last synced: 24 Apr 2025

https://github.com/aquasecurity/windows-bench

Checks whether a Windows server according to security best practices as defined in the CIS Distribution-Independent Windows Benchmark

cis-benchmarks devsecops security windows-cis

Last synced: 13 Oct 2025

https://github.com/nokia/attestationengine

An experimental (but fully functional) Remote Attestation Engine and Applications for TPM2.0 based systems (cloud, edge, IoT etc)

attestation cloud coreboot edge-computing ietf integrity-checker iot rats security tpm tpm2 trust txt uefi

Last synced: 26 Oct 2025

https://github.com/timkuijsten/node-chroot

Safely chroot the current process and drop privileges

chroot nodejs security

Last synced: 09 Apr 2025

https://github.com/chainguard-dev/image-comparison

Comparison of Chainguard Images to others

containers data no-ghaudit-branch-protections security

Last synced: 26 Feb 2026

https://github.com/suzuki-shunsuke/ghir

ghir is a CLI making past GitHub Releases immutable

cli github oss security

Last synced: 13 Jun 2026

https://github.com/freeandfair/coloradorla

Software to facilitate risk-limiting audits at the state level, developed for the state of Colorado.

audit civic-tech elections government java postgresql python security typescript

Last synced: 04 May 2026

https://github.com/jczic/microwifi

A micro WiFi class that supports the two LAN wireless interfaces (AP&STA) and manages many automatized methods, for MicroPython (used on Pycom modules & ESP32)

access-point connections esp32 hc2 hotspot layer list lopy micropython network pycom security station wi-fi wifi wipy wireless wireless-hotspot wlan wpa2

Last synced: 05 Aug 2025

https://github.com/cokebeer/go-cves

收录go语言编写的项目、框架和组件出现的cve,或者一些相关的利用方式的文章

bugbounty cve exploit go poc security

Last synced: 26 Jul 2025

https://github.com/jupiterone/sdk

Home of the JupiterOne SDK

aws azure gcp graph hacktoberfest neo4j security

Last synced: 07 Apr 2026

https://github.com/kosasih/decentralized-quantum-internet-core

The Decentralized-Quantum-Internet-Core repository serves as the foundational framework for building a next-generation quantum communication network. This project leverages quantum entanglement and quantum key distribution (QKD) to enable ultra-secure, decentralized data transmission.

communication communication-systems healthcare iot quantum quantum-algorithms quantum-computing quantum-finance security

Last synced: 01 Aug 2025

https://github.com/pymodsecurity/django-pymodsecurity

ModSecurity Django middleware

django middleware modsecurity security

Last synced: 01 Sep 2025

https://github.com/justakazh/CVE_Database

The Common Vulnerabilities Exposures (CVE) Database

0day cve cwe database infosec json nvd pentester security vulnerabilities vulnerability zeroday

Last synced: 28 Sep 2025

https://github.com/mrcl0wnlab/afdwordpress

Check arbitrary file download vulnerability in the WordPress

hacking python security security-tools wordpress

Last synced: 01 Aug 2025

https://github.com/p-rog/cve-analyser

A tool to analyse the list of detected CVEs in the containers (usually created by static security scanner) and compare them to the Red Hat Security Data.

openshift security

Last synced: 07 Mar 2026

https://github.com/atulkamble/aviatrixace

Aviatrix ACE (Aviatrix Certified Engineer) Multi-Cloud Networking Associate Exam Notes + Study Guide

atul-kamble atulkamble aviatrix aviatrix-certified-engineer aviatrixace multi-cloud-networking security

Last synced: 03 Nov 2025

https://github.com/nvisosecurity/logalert.py

Smart piping of command output to email for alerting.

alerting monitoring security sysadmin

Last synced: 22 Jul 2025

https://github.com/primitivefinance/proto-sim-portfolio

Prototype risk modeling simulation for Portfolio using Arbiter.

amm arbiter evm portfolio risk-modeling rust security solidity

Last synced: 19 Jun 2025

https://github.com/rahiel/id0-rsa.pub

Solutions to the security/cryptography problems at https://id0-rsa.pub

cryptography security

Last synced: 09 Jul 2025

https://github.com/marcoonroad/twostep

HOTP and TOTP algorithms for 2-step verification (for OCaml). :clock10: :closed_lock_with_key: :1234: :camel:

2-factor-authentication 2-step-verification authentication cryptography infosec ocaml ocaml-library one-time-password one-time-passwords security security-tools

Last synced: 07 May 2025

https://github.com/IQTLabs/AuraBorealisApp

Do You Know What's In Your Python Packages? A Tool for Visualizing Python Package Registry Security Audit Data

flask malware pypi registry security security-audit security-tools static-analysis static-code-analysis

Last synced: 11 Jul 2025

https://github.com/denorg/scrypt

🔑 Deno library for hashing passwords using scrypt

deno denoland denorg key-derivation-function scrypt security typescript

Last synced: 12 Apr 2025

https://github.com/eikendev/hackenv

Manage and access your Kali Linux or Parrot Security VM from the terminal (SSH support + file sharing, especially convenient during CTFs, Hack The Box, etc.) :rocket::wrench:

cli ctf ctf-scripts ctf-tools hacking hackthebox kali kali-linux kali-setup kalilinux libvirt parrot-sec parrotsec penetration-testing pentest-scripts pentest-tool pentest-tools pentesting security security-tools

Last synced: 17 Feb 2026

https://gitlab.freedesktop.org/bolt/bolt

⚡🐧 - Thunderbolt 3 device manager

daemon linux security thunderbolt

Last synced: 07 May 2025

https://github.com/florianregaz/pyobfuscator

Make your code difficult to understand and read. Minimize exposure to attacks.

obfuscate obfuscation python security

Last synced: 04 May 2025

https://github.com/duality-solutions/web-bridge

Connecting HTTP servers and clients on disparate networks using WebRTC and blockchain signaling

blockchain http-client http-server networking restful-api security webrtc

Last synced: 12 Apr 2025

https://github.com/lstrojny/uffff

Unicode input processing made trivial

php security text unicode

Last synced: 22 Jun 2025

https://github.com/crowdstrike/ivan

Falcon Image Vulnerability Analysis (IVAN) is a command-line image assessment tool.

containers security vulnerability-assessment

Last synced: 22 Jun 2025

https://github.com/tomwechsler/securing_linux_systems

Linux security with three different distributions (Rocky Linux, Ubuntu and openSUSE)!

linux linux-security opensuse rockylinux security ubuntu

Last synced: 08 Oct 2025

https://github.com/firefart/massnmap

Scans an internal network using massscan and nmap

massscan nmap scan security

Last synced: 11 Apr 2025

https://github.com/line/webauthn-kotlin

WebAuthn Kotlin is an open-source toolkit for secure, password-less authentication in mobile apps. Developed in Kotlin, it integrates seamlessly with native Android apps, adhering to WebAuthn 2.0 standards for enhanced security and user experience.

authenticator fido2 kotlin passwordless security webauthn

Last synced: 23 Oct 2025

https://github.com/firefart/goshell

Simple golang reverse shell

golang hacking reverse-shell security shell

Last synced: 26 Oct 2025

https://github.com/vaddy/go-vaddy

VAddy API Command-Line Tool with golang

ci security security-test vaddy

Last synced: 14 Jan 2026

https://github.com/kosasih/galactic-banking-network

A cutting-edge, high-tech autonomous banking network built with advanced security features, robust authentication, and authorization mechanisms. The GBN repository includes a modular architecture, secure communication protocols, and a robust incident response plan, making it a reliable and secure platform for financial transactions in the galaxy.

autonomous finance finance-management security security-tools

Last synced: 23 Apr 2025

https://github.com/friendsofredaxo/httpheader

Redaxo 5 Addon zur Aktivierung verschiedener Webseiten-Header für die Einstellung von Sicherheitsmaßnahmen und Optimierungen.

backend frontend hacktoberfest headers redaxo redaxo-addon redaxo5 security sicherheit

Last synced: 12 Jul 2025

https://github.com/ulbora/goauth2

A complete standalone Oauth2 Server RFC 6749 implementation written in Golang and licensed under the GPL V3 license.

authentication goauth2 golang jwt jwt-auth jwt-authentication jwt-bearer-tokens jwt-server jwt-token nginx oauth oauth-provider oauth-server oauth2 oauth2-authentication oauth2-client oauth2-provider oauth2-server secure security

Last synced: 26 Jun 2025

https://github.com/osvaldokalvaitir/nodejs-gostack9-module17

:barber: Security in Node.js using express-brute, express-brute-redis, Helmet, Node Redis, Rate Limit Redis, CORS, GitHub and Greenkeeper

bootcamp gobarber gostack gostack-9 nodejs rocketseat security

Last synced: 08 Aug 2025

https://github.com/pixel-open/magento-cloudflare-turnstile

Protect your Magento store from spam messages and spam user accounts with Cloudflare Turnstile

adobe-commerce captcha cloudflare form magento magento-2 magento-module security turnstile

Last synced: 21 Aug 2025

https://github.com/domgolonka/foretoken

A blazing fast, highly customizable, modern-day defence tool using (in memory) SQL & REST/gRPC protocols.

consul database etcdv3 fraud-scores grpc grpc-protocols modern-threats proxy regex regular-expression restful-api security security-automation security-tools spam threat-detection threats tor vpn zookeeper

Last synced: 12 Mar 2026

https://github.com/jeremylaratro/cloud_pentesting_overview

Cloud Pentesting Resource Collection

aws cloud cloudsecurity pentesting security

Last synced: 09 Apr 2025

https://github.com/dockpack/base_tailscale

𐄳 Ansible role to install Tailscale. Zero config VPN. Installs on any device in minutes, manages firewall rules for you, and works from anywhere.

hacktoberfest security tailscale vpn wireguard-vpn-setup

Last synced: 27 Feb 2025

https://github.com/ministryofjustice/security-guidance

Security guidance from the MOJ Digital & Technology Cybersecurity team

cybersecurity information-security security

Last synced: 27 Jul 2025

https://github.com/obelisk/endpointsecurity

Nice (ish) bindings for the EndpointSecurity framework on macOS for Rust.

endpointsecurity endpointsecurityframework macos rust security

Last synced: 07 Mar 2026

https://github.com/ssg/yubitell

Silently extract a YubiKey serial number

otp security u2f yubikey

Last synced: 29 Apr 2025

https://github.com/neuralegion/bright-cli

Command Line Interface (CLI) tool for BrightSec's solutions.

api cli crawler cyber-security devops har nexploit oas secops security typescript

Last synced: 01 Apr 2026

https://github.com/stacklok/brood-box

CLI tool for running coding agents inside hardware-isolated microVMs

ai-agents claude-code codex developer-tools microvm sandbox security

Last synced: 01 Apr 2026

https://github.com/enigmatikk/torch

Torch is a fast, secure, and production-ready web framework for Rust. Built on Tokio and Hyper, it provides everything you need to build modern web applications with minimal configuration.

async backend hyper middleware performance rest-api rust security tokio tokio-rs web-framework

Last synced: 14 Oct 2025

https://github.com/avelex/passwordme

🦁 tiny cross-platform password manager

golang password password-manager passwords reactjs security wails

Last synced: 14 Jan 2026

https://github.com/ctc-oss/fapolicy-analyzer

Tools to assist with the configuration and management of fapolicyd.

fapolicyd fedora pyo3 python rhel rust security whitelisting

Last synced: 01 Feb 2026

https://github.com/mk-fg/acme-cert-tool

Simple one-stop tool to manage X.509/TLS certs and all the ACME CA authorization stuff

acme-client certificates cryptography letsencrypt python security sysadmin tls tool web-pki x509

Last synced: 23 Apr 2025

https://github.com/didinj/spring-boot-security-rest

Securing RESTful API with Spring Boot, Security, and Data MongoDB

api data example mongodb rest restful security spring springboot tutorial

Last synced: 05 Aug 2025

https://github.com/bl4ck44/sandboxed

Menú de herramientas para análisis de malware y virus informáticos.

analysis bash bash-script linux python python3 remnux sandbox sandboxed security security-tools

Last synced: 12 Aug 2025

https://github.com/plazmaz/liquidhoney

A small, fluid, low-interaction honeypot

honeypot low-interaction monitoring security tcp udp

Last synced: 23 Apr 2025

https://github.com/fkie-cad/ipal_transcriber

Industrial protocol transcriber - a common representation of industrial communication as input for protocol-independent industrial intrusion detection systems.

cip ids iec-60870-5-104 iec-61162-450 industry ipal modbus network nmea0183 protocols s7 security

Last synced: 06 May 2025

https://github.com/sagi/node-dns-over-tls

DNS-over-TLS API for Node.js

dns dns-over-tls dnstls nodejs privacy security tls

Last synced: 05 May 2025

https://github.com/alajusticia/laravel-logins

🔑 Sessions and Sanctum tokens tracking in Laravel apps. User notifications on new login, multiple remember tokens, IP geolocation, User-Agent parser.

authentication geolocation guard ip laravel login remember security session user-agent

Last synced: 10 Mar 2026

https://github.com/perimetersec/resources

Public resources on fuzzing services, methodologies, and benefits for protocol security.

echidna evm fuzzing medusa security solidity

Last synced: 14 Apr 2025

https://github.com/christosgalano/skaleql

sKaleQL is an opinionated template repository for managing, executing, and organizing Kusto Query Language (KQL) queries against Azure Log Analytics Workspaces.

automation azure devops devsecops github-actions kql kusto-query-language log-analytics security template-repository

Last synced: 07 Mar 2026

https://github.com/subrose/thorn

🌹 Thorn is an open-source, data privacy vault to store and manage PII in a fully compliant manner.

ccpa data-privacy encryption gdpr hipaa pci pci-dss privacy privacy-by-default privacy-by-design privacy-engineering security subrose

Last synced: 10 Mar 2026

https://github.com/tolitius/hubble

hubbling the universe nebula by nebula

clojure configuration consul security vault

Last synced: 23 Apr 2025

https://github.com/ctnkaan/postman-sentinel

Postman Sentinel (Previously Postman Student Helper) is the Discord Bot that specializes in server security. It also has some fun commands to lighten up the mood. This bot has blocked more than 900 attacks!

bot discord discord-bot discord-js discrodjs javascript nodejs postman security typescript

Last synced: 23 Jun 2025

https://github.com/codingchili/enigmatic-mouse

The enigmatic mouse will keep your passwords safe - password manager on Android in Kotlin.

android android-application kotlin password-generator password-manager passwords security

Last synced: 11 Aug 2025

https://github.com/uzyn/passcay

🦎🔑 Secure & fast Passkey (WebAuthn) library for Zig

authentication passkey relying-party security webauthn zig zig-package ziglang

Last synced: 13 Jun 2025

https://github.com/matchilling/aws-kms-boilerplate

🔐 This repository contains the example code for the blog post "Painlessly storing security sensitive data using AWS KMS and OpenSSL"

aws-kms encryption key-management openssl security

Last synced: 02 Apr 2025

https://github.com/robertdebock/ansible-role-firewall

Manage firewall ports on all (known) Linux operating systems.

ansible firewall firewalld molecule playbook security server system tox

Last synced: 24 Apr 2025

https://github.com/pelock/radio-code-calculator-python

Radio Code Calculator is an online service along with Web API & SDK for generating car radio unlock codes for popular vehicle brands.

anti-theft car car-hacking navigation python radio radio-code radio-codes security unlock vehicle

Last synced: 30 Jul 2025