An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/atalii/adage

ada privilege escalation

ada security spark sudo

Last synced: 14 Mar 2025

https://github.com/tijme/blog-v2

My blog about cyber security, hacking, software engineering and much more.

blog cyber hacking jekyll programming redteam security tiber

Last synced: 12 Aug 2025

https://github.com/austinheap/wordpress-security-txt

A plugin for serving `security.txt` in WordPress 4.9+, based on configuration settings. https://securitytext.org/

beta php php7 php70 php71 php72 security security-txt wordpress wordpress-plugin wordpress49 wordpress5

Last synced: 03 Oct 2025

https://github.com/andrea11/openv

openv a tool to automatically load secrets from .env files using 1password CLI under the hood

1password secrets security

Last synced: 08 Aug 2025

https://github.com/garyku0/nextjs-passkey-auth

Modern passwordless authentication with WebAuthn passkeys, Next.js, and Supabase. Optimized for Cloudflare Pages with optional CAPTCHA protection.

authentication biometric cloudflare edge-runtime nextjs passkey passwordless security supabase typescript webauthn

Last synced: 09 Aug 2025

https://github.com/mjmccans/docker-socket-proxy

Docker socket proxy using Nginx for security.

docker docker-compose proxy security

Last synced: 23 May 2026

https://github.com/cristianzsh/modsecurity-to-es-parser

A script to send ModSecurity logs to Elasticsearch

elasticsearch kibana logs modsecurity owasp owasp-top-10 parser python security

Last synced: 27 Sep 2025

https://github.com/Kin69/Athena

Athena is a modern, comprehensive firewall solution that supports both root and VPN modes, offering DNS blocklists, Material Design UI, and native performance. Unlike older alternatives, Athena provides advanced features like app lock, real-time packet monitoring, and malicious site protection, all while maintaining a user-friendly interface.

android dns dynamic-colo firewall foss kotlin kotlin-android material mvvm network opensource packets privacy protection root secure security vpn

Last synced: 03 Aug 2025

https://github.com/SAP-samples/risk-explorer-execution-pocs

A collection of proof-of-concepts in multiple languages and for different package managers, showcasing how third-party dependencies trigger code execution on downstream projects, leading to potential open-source software supply chain attacks.

proof-of-concepts sample security

Last synced: 10 Mar 2026

https://github.com/lfaoro/spark

Fireblaze Vault is a tokenization service, useful for the secure storage of sensitive data like PII, Credit Cards, Passports/IDs.

encryption payment security tokenization

Last synced: 01 Aug 2025

https://github.com/guardicode/centra-py-client

A Python client for Guardicore Centra API access.

firewall python security segmentation

Last synced: 16 Jan 2026

https://github.com/plabick/actions-secret-decoder

Decode secrets extracted with the GitHub Secret Extractor action

github-actions secrets security

Last synced: 31 Jul 2025

https://github.com/aguslr/bluerock

A Fedora Silverblue image that has been hardened for extra security

fedora fedora-silverblue oci ostree security

Last synced: 01 Sep 2025

https://github.com/jasondrawdy/krypta

An advanced cryptography suite packaged with a file manager, password manager, and a swiss army knife of crypto tools.

application cryptography data encryption filemanager generators hashing notepad password-manager security software windows

Last synced: 08 Jan 2026

https://github.com/multiform-validator/typescript-javascript

Javascript / Typescript library made for validation, various form fields, such as: email, telephone, password, cpf, cnpj, credit card, magic numbers for image mimetype validation and much more.

javascript javascript-library library multiform-validator npm security security-tools typescript typescript-library validate-js validation validation-library validator

Last synced: 22 Jan 2026

https://github.com/njonsson/passwordtextbox-control

A Windows Forms control that enables the user to enter password text, momentarily showing each character entered

input nuget-packages password security ui-widget windows

Last synced: 28 Jul 2025

https://github.com/alanvivona/microservices

Go Rest API with Google Auth + Nginx reverse proxy + Mysql

docker gdrive golang microservices mysql nginx security

Last synced: 03 Aug 2025

https://github.com/netflix-skunkworks/swag-functions

Lambda functions for SWAG management

security

Last synced: 28 Jul 2025

https://github.com/rollerworks/split-token

Split Tokens: Token-Based Authentication Protocol without Side-Channels

authentication crypto php rollerworks security sodium split-token token

Last synced: 15 Apr 2025

https://github.com/houzuoguo/hana-firewall

Generate firewalld service definitions for SAP HANA

linux os sap sap-hana security sles suse

Last synced: 27 Jul 2025

https://github.com/kabragaurav/whaling-phishing

A demo of whaling attack in computer networks

cns networks phishing security whaling

Last synced: 02 Jan 2026

https://github.com/armeggaddon/py2cy

A package to convert Python code to Cython for Security and Obfuscation

anti-reverse-engineering cython cythonize encryption obfuscation secure-code security software-protection

Last synced: 09 Apr 2026

https://github.com/adjh54ir/blog-codes

Contributor9 티스토리 블로그 내에서 활용한 내용들을 담은 레포지토리입니다.

chatgpt-api fcm-messaging java jpa-hibernate junit5 mockito mockmvc querydsl-jpa rabbitmq-consumer rabbitmq-producer security spring-boot spring-boot-quartz

Last synced: 16 May 2025

https://github.com/pgilad/csp-builder

A builder tool to help generate Content Security Policies in a type-safe way

builder content-security-policy csp generator hacktoberfest pika security typescript web

Last synced: 08 Mar 2026

https://github.com/go-appsec/sectool-agents

Agents which use the go-appsec/toolbox in autonomous security workflows

agent application-security appsec penetration-testing pentesting pentesting-tools security security-testing security-tools

Last synced: 06 Jul 2026

https://github.com/hhimanshu/google-oauth2-jwt-secure-api

Demonstrates how to write secure Web Applications using Google Oauth2 on client side and securing protected resources with JWT based token

full-stack google jwt oauth2 security spring-boot webapp

Last synced: 02 May 2025

https://github.com/kyra-1/otw-banditgames

You can try the games provided here at the given link

basics cyber-security cybersecurity linux security securitybasics shell-scripting

Last synced: 16 Apr 2025

https://github.com/linkdd/secure-user-data

Infrastructure to store, manage and access user data in a very secure manner.

data-privacy data-protection microservice python3 security user-data

Last synced: 15 Sep 2025

https://github.com/silbermm/genex_remote

Companion project to Genex

elixir-lang secrets security

Last synced: 08 Mar 2026

https://github.com/pedroac/nonce4php

A nonce manager PHP library useful for preventing CSRF and replay attacks.

csrf-tokens nonces nonces-generator php php-library replay-attack security

Last synced: 08 Apr 2026

https://github.com/zejiran/computational-infrastructure

Collection of projects made on a computational infrastructure course at Universidad de los Andes

clustering concurrency java security uniandes virtualization

Last synced: 15 Mar 2025

https://github.com/douganger/flask-ipfilter

A simple Flask extension to limit access to a site to certain IP addresses.

flask heroku python3 security

Last synced: 12 Apr 2025

https://github.com/vdlp/oc-hashids-plugin

Allows developers to use secure hashed ID's in October CMS powered websites.

hashids hashing laravel october-cms octobercms octobercms-plugin php security

Last synced: 12 Apr 2025

https://github.com/trishankatdatadog/tuf-on-a-plane

Allegedly, a minimal, Pythonic TUF client can be written on a long flight. This was written after that flight, but hey, it's a shot.

security tuf updates

Last synced: 14 Apr 2025

https://github.com/xen0l/dlint-check

Github Action to run dlint security linter on your Python code

flake8 github-actions linter python python3 security security-testing static-analysis

Last synced: 02 Jan 2026

https://github.com/bellthomas/citadel

Citadel — A Trusted Reference Monitor for the Linux Kernel using Intel SGX Enclaves

difc enclave kernel linux lsm reference-monitor security sgx

Last synced: 20 Apr 2025

https://github.com/nyxnor/onionwash

Parse tor configuration files and edit the torrc in a safe manner

configuration open-source security tor torrc

Last synced: 03 Sep 2025

https://github.com/644/avg-audit

Arch Linux Audit Tool - checks for vulnerable packages installed against security.archlinux.org

advisory arch-linux archlinux audit cve security

Last synced: 10 Mar 2025

https://github.com/codingchili/sidechannel-timing-tool

Small tool for measuring system latency during string comparison.

network proof-of-concept security side-channel

Last synced: 06 Apr 2025

https://github.com/Bilal-Belli/DictionaryWifiAttackTool

This repository presents a simple Python program for testing a large number of passwords (dictionary) to connect to a WiFi network.

dictionary-attack python security security-tools wifi-hacking wifi-security

Last synced: 14 Apr 2025

https://github.com/jakejarvis/careful-downloader

🕵️‍♀️ Downloads a file and its checksums, validates the hash, and optionally extracts it if safe.

checksum download extract file hash javascript npm security

Last synced: 03 Jul 2025

https://github.com/grantseltzer/prism

Container based binary analysis tool

binary-analysis containers prism security snapshot

Last synced: 15 Feb 2026

https://github.com/dryewo/fahrscheine-bitte

Clojure library for checking OAuth2 access tokens

access-token api clojure compojure oauth2 security swagger1st

Last synced: 22 Apr 2025

https://github.com/e3prom/kryptoxin

A security-oriented payload encryption tool written in Python.

aes cryptography encryption encryptor penetration-testing pentesting programming red-team security

Last synced: 13 May 2025

https://github.com/jonzeolla/lab-securitydataanalysis

An introductory lab to Security Data Analysis (using Apache Metron (incubating)).

apache-metron data-analysis lab metron security

Last synced: 03 Jul 2025

https://github.com/turbot/flowpipe-mod-github

GitHub pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect GitHub to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod github github-api hacktoberfest integrations low-code orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 22 Apr 2025

https://github.com/airlock/microgateway-running-example

Running example of Airlock Microgateway, a Kubernetes-native WAAP (Web Application and API Protection) solution

airock devops ergon gateway-api k8s kubernetes microgateway oidc openapi security waap waf

Last synced: 22 Apr 2025

https://github.com/devexpress-examples/connect-winforms-grid-to-backend-using-middletier-server

Connects the DevExpress WinForms Data Grid to a backend using a Middle Tier Server (EF Core without OData).

aspnetcore authorization devexpress dotnet ef efcore grid rbac security webapi winforms xaf

Last synced: 30 Aug 2025

https://github.com/ralish/certuiexts

A library which extends Windows cryptography support for displaying additional OIDs and associated certificate extensions

certificates security windows x509

Last synced: 07 May 2026

https://github.com/yoozzeek/actix-csrf-middleware

CSRF protection middleware for Actix Web. Supports double submit cookie and synchronizer token patterns (with actix-session).

actix actix-web csrf csrf-protection middleware rust security web

Last synced: 30 May 2026

https://github.com/webmd-health-services/carbon.cryptography

Cross-platform PowerShell module that makes encrypting and decrypting strings (using standard cryptographic algorithms) and managing certificates easy.

aes-crypto aes-encryption certificates cryptography dpapi powershell powershell-core powershell-module rsa-cryptography rsa-encryption securestring security x509 x509certificates

Last synced: 15 Oct 2025

https://github.com/lemonyte/safe-exec

Deobfuscate and inspect code passed into exec() and eval()

cybersecurity deobfuscation deobfuscator eval exec malware-detection python security

Last synced: 12 Oct 2025

https://github.com/tonikelope/passport-trace-attack

Proof of concept of traceability attack against e-passport

epassport passport security traceability

Last synced: 23 Apr 2026

https://github.com/darkstarbdx/cryptid2

Cryptid2 🐍💻 is a Python tool for educational HTTP/UDP flood attacks. It tests server/network resilience, aiding ethical hackers in security assessments. Customizable threads, attack durations, and targets make it ideal for controlled tests. Compatible with Linux/Termux.

ddos ethical-hacking security security-tools

Last synced: 30 Oct 2025

https://github.com/nozaq/security-organizations-jp

日本国内のセキュリティ関連機関・団体をまとめていきます。

compliance cybersecurity security threat-intelligence vulnerabilities

Last synced: 29 Jan 2026

https://github.com/cisagov/cool-sharedservices-cdm

Terraform code to create a site-to-site VPN tunnel between the COOL and the CISA CDM (Continuous Diagnostics and Mitigation) environment, as well as some related resources to feed COOL logging data to CDM.

cdm cisa security

Last synced: 14 Oct 2025

https://github.com/bootstrapsp/miu

Developing with Hyperledger Indy made easy.

blockchain-technology golang grpc-python hyperledger-indy iot-application security

Last synced: 04 Apr 2026

https://github.com/astrogilda/mcp-keyring-injector

Session-scoped MCP credential security - keys auto-injected at startup, auto-removed at exit, zero config file exposure

api-keys authentication claude-code credentials keyring mcp python security

Last synced: 17 Jun 2026

https://github.com/surelle-ha/vindicter

Vindicter is a local-first security workspace for scanning projects, tracking vulnerability findings, and exporting security review reports. The desktop app stores project state in each project folder, reads the local codebase, and uses the Codex CLI for read-only security analysis.

security

Last synced: 16 Jun 2026

https://github.com/elektro-wolle/check-certs

Simple checker for new certificates for a given set of domain-names

monitoring security tls-certificate

Last synced: 15 Apr 2026

https://github.com/indspl0it/blue-tap

Blue-Tap is a comprehensive Bluetooth and BLE penetration testing toolkit designed specifically for security assessments of automotive In-Vehicle Infotainment (IVI) systems. It provides a complete attack lifecycle — from passive device discovery through active exploitation, data extraction, and automated report generation.

ble bluetooth fuzzing ivi pentesting security vulnerability-research

Last synced: 17 Apr 2026

https://github.com/marcbperez/c-programming-security

C programming examples that cover basic operations and security exploits.

c docker gradle security

Last synced: 29 Apr 2026

https://github.com/ofabiodev/resafe

🛡️ Detects ReDoS vulnerabilities in regexes using Thompson NFA construction and spectral radius analysis.

analyzer backtracking javascript library lightweight npm-package package performance redos regex regexp security typescript validation vulnerability

Last synced: 22 Jan 2026

https://github.com/pavanvaranasi02/ecommerce-website

"An e-commerce web app with user registration, login, responsive product listing, and a 'Buy Later' feature. Built using Java, Servlets, JSP, JDBC, and styled with CSS. Enhance your online shopping experience!"

java jdbc jsp security servlets

Last synced: 08 Oct 2025

https://github.com/sap-samples/risk-explorer-execution-pocs

A collection of proof-of-concepts in multiple languages and for different package managers, showcasing how third-party dependencies trigger code execution on downstream projects, leading to potential open-source software supply chain attacks.

proof-of-concepts sample security

Last synced: 14 Mar 2026

https://github.com/felixdes/java-dop-example

Simple example of fine access implemented with new Java DOP paradigm

dop gradle java security spring-boot

Last synced: 06 Jul 2025

https://github.com/chitinhq/shellforge

🔥 Forge local AI agents. Governed. Private. Unstoppable. — Ollama + AgentGuard + OpenShell + DefenseClaw

agentguard agentic-ai ai-agents apple-silicon defenseclaw governance local-llm ollama openshell security

Last synced: 19 Apr 2026

https://github.com/abhinandan-khurana/vulncon_2021

A fully-responsive website for the International Cyber Security Conference and a 24-hour Jeopardy-style CTF: VULNCON 2021, organised by the open source Cyber Security Community "N00B_4rMY" annually.

conference ctf cybersecurity infosec international security

Last synced: 14 Feb 2026

https://github.com/neocky/it-security-for-humans

:guard: IT Security Guidelines for Humans written in an understandable language with examples

cybersecurity it-security security security-tools system-administration zero-trust zero-trust-network

Last synced: 01 Mar 2026

https://github.com/marc2332/securityapp-ui-idea

A UI idea for a security/cleaner app

design idea kotlin security ui

Last synced: 02 May 2026

https://github.com/mahaloz/mahaloz.re

My hacking blog: https://mahaloz.re

decompilers security vuln-analysis

Last synced: 08 Feb 2026

https://github.com/practicalparticle/sandblox

**EXPERIMENTAL SOFTWARE** SandBlox: A secure blockchain development platform using pre-built components called Blox & Particle's State Abstraction. Build dApps quickly and safely with React & TypeScript.

account-abstraction blockchain security smart-contracts web3

Last synced: 10 Oct 2025

https://github.com/kukoboris/ubuntu-security-setup

Скрипт для автоматизированной настройки безопасности и оптимизации серверов Ubuntu

bash-script hardening security server-setup ubuntu

Last synced: 29 Apr 2026

https://github.com/mablanco/docker-fgds

Docker image for Fast Google Dorks Scan (FGDS), a script to enumerate web-sites using Google dorks

docker osint pentesting security

Last synced: 02 Jun 2026

https://github.com/marc-shade/fraud-detection-mcp

Advanced fraud detection MCP server with behavioral biometrics, real-time anomaly detection, and explainable AI for comprehensive fraud prevention

anthropic behavioral-biometrics claude fraud-detection fraud-prevention fraudulent-transactions mcp model-context-protocol security

Last synced: 05 Apr 2026

https://github.com/nckslvrmn/whisper

Simple service for one time secret (and file) sharing

aes-gcm-256 container cryptography docker encryption golang scrypt secret-management security

Last synced: 16 Mar 2026

https://github.com/petritbahtiri123/leakguard

Local-only Chrome extension that detects and redacts secrets before prompts are sent to AI chat tools.

ai browser-extension chatgpt chrome-extension dlp infosec privacy redaction security

Last synced: 10 May 2026

https://github.com/pandarudra/ecrypto

Secure folder encryption with modern cryptography (XChaCha20-Poly1305 + Argon2id)

cli clitool decryption ecrypto encryption go golang security

Last synced: 21 Jan 2026