An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/felixdes/java-dop-example

Simple example of fine access implemented with new Java DOP paradigm

dop gradle java security spring-boot

Last synced: 06 Jul 2025

https://github.com/bocaletto-luca/pysecscope

PySecScope Author: Bocaletto Luca PySecScope is a comprehensive Linux enumeration tool with a Tkinter-based graphical user interface. Inspired by LinEnum, this tool gathers system, user, network, and service information, along with detailed security checks, and generates reports in multiple formats (Text, JSON, CSV). English and Italian languages.

admin-tool bocaletto-luca information-services linenum-expired linux multilanguage network pysecscope python real-time reports scan-modules security security-tools system-tools tkinter

Last synced: 25 Oct 2025

https://github.com/celenityy/better-vanadium

My recommendations for the ultimate configuration of the Vanadium web browser to maximize privacy, security, and usability. :)

ads android android-application anti-fingerprinting anti-tracking aosp aosp-android chromium chromium-browser divested grapheneos hardened hardening mulch privacy privacy-protection security security-hardening tracking vanadium

Last synced: 04 Aug 2025

https://github.com/elektro-wolle/check-certs

Simple checker for new certificates for a given set of domain-names

monitoring security tls-certificate

Last synced: 15 Apr 2026

https://github.com/codingo/ctfs

Code and writeups for a variety of CTF challenges. Links to writeups included where available.

capture-the-flag penetration-testing python security writeups

Last synced: 12 Mar 2026

https://github.com/swillner/regban

Lightweight alternative to fail2ban using nftables (banning IPs with failed login attempts)

fail2ban ip-blacklist ip-blocking nftables security

Last synced: 25 Mar 2025

https://github.com/hammackj/kekkan

Kekkan is a parser for NIST Version 2 CVE and CPE XML files.

nvd2 ruby security xml-parser

Last synced: 17 Mar 2026

https://github.com/greycloudss/sabaton

Sabaton is a WIP offline password cracker and wordlist engine in C. It generates exhaustive keyspaces and evaluates them against mainstream hash functions via a simple API. Built for air-gapped environments and high-throughput use, with a roadmap including CLI, multithreading, streaming mode, and GPU acceleration.

armourer c cracking cryptography security

Last synced: 07 Oct 2025

https://github.com/e-zk/page

password manager using age for encryption

age encryption go password-manager secrets security

Last synced: 14 Jan 2026

https://github.com/marcbperez/c-programming-security

C programming examples that cover basic operations and security exploits.

c docker gradle security

Last synced: 29 Apr 2026

https://github.com/kukoboris/ubuntu-security-setup

Скрипт для автоматизированной настройки безопасности и оптимизации серверов Ubuntu

bash-script hardening security server-setup ubuntu

Last synced: 29 Apr 2026

https://github.com/shopstack-projects/shopstack-security-hmac

Authenticate Shopify requests using the provided HMAC.

authentication hmac security shopify shopify-apps

Last synced: 08 Oct 2025

https://github.com/fabianferno/the-riot-protocol

It offers device authentication, data encryption, decentralized key generation, and blockchain-based authentication for secure and reliable communication between devices and users.

arduino blockchain cryptography data gateway iot security solidity university-project

Last synced: 18 Jan 2026

https://github.com/0xjjpa/deniable-website

👀 deniable.website / An usage example of Web Cryptography API

cryptography security web

Last synced: 23 Feb 2026

https://github.com/4thel00z/oneliners

Magic offsec/utility oneliners to make your red teaming/CTF/h4x0r life easier! 🤓

bash offsec oneline oneliner oneliners security sysadmin

Last synced: 30 Apr 2026

https://github.com/standardnotes/brakeman-action

Runs Brakeman against a repository's source code to find security vulnerabilities, using GitHub actions.

brakeman rails review ruby security static-code-analysis

Last synced: 25 Aug 2025

https://github.com/lirantal/serverless-goof-azure

Oreilly's Serverless security example application - serverless-goof todo app

owasp security serverless snyk

Last synced: 23 Apr 2025

https://github.com/fiware/tutorials.securing-access

:closed_book: FIWARE 403: IDM - Securing Access to Resources

access-control fiware fiware-keyrock oauth2 pdp pep security tutorial

Last synced: 11 Oct 2025

https://github.com/pandarudra/ecrypto

Secure folder encryption with modern cryptography (XChaCha20-Poly1305 + Argon2id)

cli clitool decryption ecrypto encryption go golang security

Last synced: 21 Jan 2026

https://github.com/darkstarbdx/cryptid2

Cryptid2 🐍💻 is a Python tool for educational HTTP/UDP flood attacks. It tests server/network resilience, aiding ethical hackers in security assessments. Customizable threads, attack durations, and targets make it ideal for controlled tests. Compatible with Linux/Termux.

ddos ethical-hacking security security-tools

Last synced: 30 Oct 2025

https://github.com/moolen/secco

:shield: auto-generate seccomp profiles for Kubernetes

ebpf kubernetes seccomp security

Last synced: 04 Feb 2026

https://github.com/severityc/discord-2fa-receiver

This script receives Discord 2FA codes and outputs it via terminal. It refreshes the available codes for people to use for their Discord account.

2024 2fa 2fa-bypass 2fa-client-python 2fa-codes 2fa-receiver 2fabypass 2factor beta codes cybersecurity discord discord-2fa discord-script online-safety python safety security topt

Last synced: 09 Apr 2025

https://github.com/checkpointsw/sourceguard-action

SourceGuard is designed to leverage Check Point's varied prevention technologies and services, providing source-code security and visibility. With a simple, cross-platform CLI tool users can customize exclusions and control an ignore list with easy integration into any pipeline.

code-quality compliance oss security source-code

Last synced: 08 Mar 2026

https://github.com/mikebionic/smart-iot

An IoT system tools with remote control rest-api and automation

arduino automation image-processing iot master-slave-architecture orangepi python raspberrypi rest-api security

Last synced: 09 Apr 2025

https://github.com/cisagov/cool-sharedservices-cdm

Terraform code to create a site-to-site VPN tunnel between the COOL and the CISA CDM (Continuous Diagnostics and Mitigation) environment, as well as some related resources to feed COOL logging data to CDM.

cdm cisa security

Last synced: 14 Oct 2025

https://github.com/yoozzeek/actix-csrf-middleware

CSRF protection middleware for Actix Web. Supports double submit cookie and synchronizer token patterns (with actix-session).

actix actix-web csrf csrf-protection middleware rust security web

Last synced: 30 May 2026

https://github.com/tink-crypto/tink-java-gcpkms

Extension to Tink Java that provides Google Cloud KMS integration

crypto cryptography gcp-kms google-cloud-kms java security

Last synced: 27 Jan 2026

https://github.com/ofabiodev/resafe

🛡️ Detects ReDoS vulnerabilities in regexes using Thompson NFA construction and spectral radius analysis.

analyzer backtracking javascript library lightweight npm-package package performance redos regex regexp security typescript validation vulnerability

Last synced: 22 Jan 2026

https://github.com/webmd-health-services/carbon.cryptography

Cross-platform PowerShell module that makes encrypting and decrypting strings (using standard cryptographic algorithms) and managing certificates easy.

aes-crypto aes-encryption certificates cryptography dpapi powershell powershell-core powershell-module rsa-cryptography rsa-encryption securestring security x509 x509certificates

Last synced: 15 Oct 2025

https://github.com/petritbahtiri123/leakguard

Local-only Chrome extension that detects and redacts secrets before prompts are sent to AI chat tools.

ai browser-extension chatgpt chrome-extension dlp infosec privacy redaction security

Last synced: 10 May 2026

https://github.com/tonikelope/passport-trace-attack

Proof of concept of traceability attack against e-passport

epassport passport security traceability

Last synced: 23 Apr 2026

https://github.com/tsteinholz/groundsec

IoT Solution for Insecure Open Areas. Code-name: Emerald Guardian.

capstone iot linklabs pir security sensors

Last synced: 11 May 2026

https://github.com/d4rklynk/simpleprivacy.fr

Voici mon site web. Il est dédié à regagner sa vie privée sur Internet, compréhensible pour les personnes qui n'ont pas de connaissances en informatique.

hugo privacy security

Last synced: 24 Apr 2025

https://github.com/robertdebock/ansible-role-spamassassin

Install and configure spamassassin on your system.

ansible installer molecule package playbook security spamassassin tox

Last synced: 24 Apr 2025

https://github.com/aegisjsproject/component

Base component using `@shgysk8zer0/aegis` & `@shgysk8zer0/aegis-styles`

aegis constructable-stylesheets custom-elements sanitizer-api security web-components

Last synced: 23 Oct 2025

https://github.com/zapalm/auto-indexer

PHP auto indexer: the tool against directory traversal security vulnerability. It recursively adds a index.php file in all given directories.

cli-utility directory-traversal-vulnerability hacktoberfest php-library security vulnerability

Last synced: 24 Apr 2025

https://github.com/appsechq/skill-scanner-test

Skill Scanner - An automated security scanning pipeline for AI agent SKILL.md and Agent plugins in popular public skills directories.

appsec security security-tools skills

Last synced: 04 Jun 2026

https://github.com/mauricelambert/entropyanalysis

This package analyzes file entropy (shannon entropy) for forensic and malware analysis.

cybersecurity disk-analysis entropy entropy-analysis file-analysis forensic malware-analysis security

Last synced: 04 Jun 2026

https://github.com/sultaniman/allowed_hosts

Elixir plug to protect your APIs from Host header attacks

allowedhosts elixir header-attack plug security

Last synced: 04 Jun 2026

https://github.com/deutsia/deutsia-radio

A privacy-focused, censorship-resistant multinet Android radio player built with Claude Code. Supports I2P, clearnet and Tor streaming.

android i2p material-design-3 privacy radio radio-streaming radio-streaming-application security tor

Last synced: 29 Apr 2026

https://github.com/root-tanishq/pscrap

multi processed parameter scrapper

bugbounty hacking pentesting python scrapping security web

Last synced: 14 Apr 2025

https://github.com/rayhanadev/replit-token-dump

Secrets that were found by the Replit Token Scanner are dumped here for revocation.

replit secret-scanning security

Last synced: 28 Jan 2026

https://github.com/raj-tyagi/nmap-ip-scanner-gui

This repository hosts Python code for an advanced IP scanning tool with a user-friendly graphical interface. Built using the nmap library, it provides efficient network scanning options including Ping Scan, Quick Scan, and Intense Scan, making it ideal for network administrators and cybersecurity professionals.

ip-address nmap python security tkinter

Last synced: 02 Mar 2026

https://github.com/bootstrapsp/miu

Developing with Hyperledger Indy made easy.

blockchain-technology golang grpc-python hyperledger-indy iot-application security

Last synced: 04 Apr 2026

https://github.com/vladlen-codes/llm-security-toolkit

Python library that sits between your app and the LLM client, adding security checks around every model call.

ai ai-security llm-inference security

Last synced: 04 Apr 2026

https://github.com/cyb3rko/matrix-guardian

A friendly, lightweight Matrix bot for protecting the people

docker go golang guardian matrix security

Last synced: 17 Apr 2026

https://github.com/keywaysh/cli

Keyway CLI - Sync secrets with your team and infra

cli devtools secrets-management security

Last synced: 17 Mar 2026

https://github.com/bad-antics/n01d-machine

🔒 n01d Machine - Secure Cross-Platform Virtual Machine Manager with Sandboxing, Tor, VPN & Network Isolation

privacy qemu rust sandbox security tauri tor virtualization vm vpn

Last synced: 08 Feb 2026

https://github.com/dev-sec/cnspec-collection-baselines

DevSec Security Baselines provide battle tested hardening checks for Linux, SSH, nginx, MySQL in cnspec

hardening security

Last synced: 31 Aug 2025

https://github.com/danvixent/cryptany

A simple tool for encrypting/decrypting any sequence of bytes using a key

encryption golang security

Last synced: 08 Feb 2026

https://github.com/invariant-systems-ai/aiir

AI Integrity Receipts — generate, verify, and attest cryptographic receipts for commits with declared AI involvement. Release verification with SLSA-compatible VSA. Zero dependencies. Apache 2.0.

ai attestation audit compliance copilot cryptography eu-ai-act git github-actions in-toto mcp receipts security slsa supply-chain-security verification

Last synced: 17 Apr 2026

https://github.com/sysdiglabs/dockerfile-benchmarker

CIS Docker Benchmark for dockerfiles

cis docker dockerfile image security

Last synced: 09 Aug 2025

https://github.com/didinj/springboot-security-mongodb-example

Spring Boot, Security, MVC, Data and MongoDB Login Example

data example login mongodb mvc security springboot

Last synced: 30 Jul 2025

https://github.com/jaayperez/keysoft

Crypto Js secure, dynamic password creator application that uses cryptographic algorithms with Node.js, Express 4, and Heroku cloud deployment.

crypto cryptographic-algorithms expressjs generator heroku nodejs password password-generator random-password security tool tools

Last synced: 23 Mar 2025

https://github.com/0x48piraj/barely-windows

Barely Windows is a user-friendly web-based GUI editor that enhances your Windows experience. Easily remove pre-installed apps, disable telemetry, and eliminate Bing from search. Boost gaming performance with FPS optimization. Compatible with Windows 10 and 11, it helps you declutter and optimize your system in just a few clicks.

bloatware-removal debloat debloater fps gaming open-source performance privacy security tweaks webapp windows windows-10 windows-11 windows-debloat

Last synced: 15 Apr 2025

https://github.com/reconmap/command-line-tools

Reconmap CLI and agent command line tools

cli golang hacking hacktoberfest pentesting security

Last synced: 28 Apr 2025

https://github.com/readyyyk/chapy

Messaging service with anonymous access and decentralized data storage. To join chat chat just enter a valid link with the chat id

chapy chat chatting confidence hacktoberfest material-ui reactjs security websocket

Last synced: 04 Oct 2025

https://github.com/reasonsoftware/security-group-manager

:closed_lock_with_key: AWS Security Group Management Lambda :closed_lock_with_key:

aws devops firewall lambda security whitelist

Last synced: 08 May 2025

https://github.com/cryxnet/crawnet

CRAWNET is a graph-based domain discovery tool by CRYXNET that helps you gather information about domains and potential relationships with other actors.

cybersecurity data-mining docker flask fullstack graph information-gathering neo4j nextjs osint python red-teaming security

Last synced: 10 Apr 2026

https://github.com/federicoceratto/nim-libu2f

FIDO U2F server-side and client-side library for Nim

authentication fido nim nim-lang security u2f

Last synced: 03 Oct 2025

https://github.com/jonzeolla/lab-internetofinsecurity

An introductory lab to IOT device security.

information-security infosec iot iot-security lab security

Last synced: 09 Mar 2026

https://github.com/aguslr/bluerock

A Fedora Silverblue image that has been hardened for extra security

fedora fedora-silverblue oci ostree security

Last synced: 01 Sep 2025

https://github.com/doucol/clyde

Project Calico Observability Tools

calico k8s kubernetes networking observability projectcalico security tigera

Last synced: 02 Feb 2026

https://github.com/nigelhorne/sniff2ban

Dynamically change firewall

ban-hosts firewall security

Last synced: 08 May 2025

https://github.com/bilal-belli/dictionarywifiattacktool

This repository presents a simple Python program for testing a large number of passwords (dictionary) to connect to a WiFi network.

dictionary-attack python security security-tools wifi-hacking wifi-security

Last synced: 19 Apr 2025

https://github.com/alisaduncan/angular-owasp-secure-coding

Code for Pluralsight course "Secure Coding with OWASP in Angular"

angular security

Last synced: 30 Oct 2025

https://github.com/raveensr/secura-pi-cam

A surveillance security system written in python which uses a Raspberry Pi with motion detector and it sends mobile notifications to telegram app

raspberry-pi security telegram-bot wifi

Last synced: 19 Apr 2025

https://github.com/atao/shodan2db

🔌 Shodan export to SQLite database and generate an HTML report.

analysis converter cve export osint python-class python3 report reporting security shodan shodan-python sqlite vulnerability

Last synced: 10 Jun 2025

https://github.com/644/avg-audit

Arch Linux Audit Tool - checks for vulnerable packages installed against security.archlinux.org

advisory arch-linux archlinux audit cve security

Last synced: 10 Mar 2025

https://github.com/nyxnor/onionwash

Parse tor configuration files and edit the torrc in a safe manner

configuration open-source security tor torrc

Last synced: 03 Sep 2025

https://github.com/authzed/workshops

The repository for self-guided SpiceDB workshops

ai authorization permissions security spicedb

Last synced: 10 Aug 2025

https://github.com/circl/odfcleaner

Python module to cleanup ODF files.

cleanup-odf-files odf odfcleaner security

Last synced: 07 Mar 2026

https://github.com/algosup/2023-2024-project-4-sportshield-team-7

🛡️🔐 This is our take on the SportShield project, aiming to help better secure sports gear all around the world!

arduino bluetooth-low-energy c embedded gps iot motion-sensor security

Last synced: 22 Jul 2025

https://github.com/volkansah/sqlp-edu

Example Python script that demonstrates a simple example of a Cross-Site Scripting (XSS) exploit for educational purposes only. This script is intended to be used responsibly, for learning and understanding the security implications of XSS attacks, and should not be used for any illegal or unethical activities.

bypass cross-site-scripting ehtical-hacking-tools exploit exploitation explotation hacking hacking-tool hacking-tools penetration-testing pentesting phishing python security sql-xss vulnerability xss xss-attacks xss-exploitation xss-injection

Last synced: 11 Jul 2025

https://github.com/filiprokita/cracksha256

This Python program, called CRACKSHA256, is a simple SHA256 hash cracker that takes a SHA256 hash and a wordlist as inputs. It attempts to crack the hash by iterating over each word in the wordlist, encoding it, and hashing it using SHA256. If successful, it prints the word that was used to generate the hash.

bruteforce cracking hack hacking hacking-tool password-crack password-cracker password-cracking-and-hash-cracking password-decryption password-decryptor password-hash programming python security sha256

Last synced: 29 Aug 2025

https://github.com/humanjavaenterprises/nostr-auth-middleware

The nostr-auth-middleware repository offers a TypeScript-based middleware solution for managing authentication and enrollment in Nostr web applications. It supports NIP-07 compatible authentication, secure user enrollment, event validation, and JWT-based session management, with optional Supabase integration for data persistence.

authentication decentralized-protocols event-validation jwt middleware nostr security supabase web-applications

Last synced: 13 Jun 2025

https://github.com/atalii/adage

ada privilege escalation

ada security spark sudo

Last synced: 14 Mar 2025

https://github.com/tegridydev/multi-agent-secops-llm

This project is a multi-agent security framework that utilizes multiple LLM models to analyze and generate comprehensive security briefs.

ai llm local localllm ollama secops security

Last synced: 11 Jul 2025

https://github.com/atrox/tower-helmet

tower-helmet helps you secure your tower server by setting various HTTP headers. It's not a silver bullet, but it can help!

helmet http-headers middleware rust rust-tower security tower

Last synced: 23 Aug 2025

https://github.com/kasuken/passwordify

Generate secure password on the fly

blazor-webassembly hacktoberfest password-generator security

Last synced: 02 Jan 2026