An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/someaspy/fuckie

Fuck Internet Explorer, Redirect users to a page explaining why its bad.

internet-explorer security website-development

Last synced: 09 Oct 2025

https://github.com/hhruszka/secrethunter

secretshunter is a penetration testing tool that uses regular expressions to search a filesystem for secrets (logins, passwords, API keys, hashes, ssh keys etc.).

scaning secrets secrets-detection security

Last synced: 14 Jan 2026

https://github.com/16patsle/wordpress-csp-manager

WordPress plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors.

content-security-policy csp hacktoberfest security wordpress wordpress-plugin

Last synced: 11 Oct 2025

https://github.com/johnny-morrice/sensephreak

Sensephreak: Single-exe outgoing port block scanner for the web

golang network security

Last synced: 12 Oct 2025

https://github.com/zebrunner/carina-crypto

Cryptographic Java Library. Provides an interface for encrypting / decrypting based on Cipher. Part of the Carina Framework

carina carina-framework cryptography java security

Last synced: 30 Apr 2025

https://github.com/unicef/holistic-assessments-for-ict4d

Guidance that provides a methodology for ICT4D practitioners to assess software from the security an privacy point of view.

assessment audit digital-impact evaluation guidance ict4d methodology security t4d technology-for-development unicef

Last synced: 03 Mar 2026

https://github.com/localzet/lwt

Localzet LWT is a library for working with Localzet Web Tokens, which are based on JWT (JSON Web Tokens). It provides functionality for creating, verifying, and handling tokens using modern technologies and standards.

library security

Last synced: 09 Feb 2026

https://github.com/ferrum-edge/ferrum-edge

Ferrum Edge - API Gateway / AI Gateway / Mesh

ai-gateway api api-gateway loadbalancing mesh networking security

Last synced: 01 Jul 2026

https://github.com/mycloudlab/example-maven-dependency-check-sonar

Exemplo de uso do dependency check com sonar

dependency-check devops devsecops java security sonar

Last synced: 04 May 2026

https://github.com/macmod/bloodhelpers

A simple set of JQ scripts to gather important info from BloodHound dumps and store them in greppable CSV files.

active-directory bloodhound csv infosec jq script security security-tools

Last synced: 09 Feb 2026

https://github.com/jaegertracing/security-audits

Jaeger security audits

cncf security

Last synced: 02 Mar 2026

https://github.com/camjac251/tool-gates

Intelligent tool permission gate for AI coding assistants. Bash AST parsing, file guards, configurable tool blocking

ai-tools claude-code cli gemini-cli hooks permissions rust security tree-sitter

Last synced: 30 Apr 2026

https://github.com/rohansx/nullbox

immutable, minimal Linux OS purpose-built for AI agents. No SSH, no shell, no systemd - just microVMs, default-deny networking, and shared agent memory

agent-os ai-agent immutable-infrastucture immutable-os libkrun linux microvms os rust security

Last synced: 04 Apr 2026

https://github.com/motikan2010/serverless-goat-python

Python version of the deliberately vulnerable serverless application Serverless-Goat from

security

Last synced: 27 Feb 2026

https://github.com/aeksco/autolock

:lock: A USB device that locks your computer when it detects you've left your seat

arduino lockscreen security teensy usb

Last synced: 29 Apr 2026

https://github.com/rsc-dev/cve_db

Common Vulnerabilities and Exposures DB and Python API

cve database security

Last synced: 13 Feb 2026

https://github.com/pjbgf/beargrabz

Monitor Kubernetes Clusters for authorisation tokens being passed in clear-text.

bearer-tokens devsecops kubernetes network-security security security-audit security-tools

Last synced: 24 Apr 2026

https://github.com/kw-soft/threatintelligence

RSS feed aggregator that collects security-related news and advisories from multiple sources and posts them to designated Discord channels via webhooks

discord feed forensics malware-analysis malware-research python security security-tools threat-hunting threat-intelligence

Last synced: 01 Mar 2026

https://github.com/turbot/steampipe-mod-terraform-oci-compliance

Run compliance and security controls to detect Terraform OCI resources deviating from security best practices prior to deployment using Powerpipe and Steampipe.

compliance hacktoberfest oci oracle-cloud oracle-cloud-infrastructure powerpipe powerpipe-mod security sql steampipe steampipe-mod terraform

Last synced: 12 Feb 2026

https://github.com/idthings/idengine

Open sourced project for the core engine used in idThings.

arduino arduino-nano containers iot iot-device microservices security things

Last synced: 25 Apr 2026

https://github.com/marc2332/defender-demo

A security/helper app UI idea

android apk defender design idea java security

Last synced: 05 May 2026

https://github.com/brandonfl/discord-virustotal-bot

Discord bot using VirusTotal API to check if the content of messages sent by discord users is safe

discord discord-bot security virustotal

Last synced: 17 Apr 2026

https://github.com/ogrodev/fsociety

Multi-plugin marketplace for Claude Code offensive security plugins

claude-code claude-code-plugin offensive-security pentesting security

Last synced: 30 Apr 2026

https://github.com/jeckel/eloquent-signature

Add signature check on your Eloquent models

eloquent laravel security signature

Last synced: 21 Apr 2026

https://github.com/geeknik/mempool-partyline

Anarcho-ephemeral Mempool Messaging System with TUI

bitcoin chat encryption infosec mempool messaging privacy security

Last synced: 30 Apr 2026

https://github.com/sorah/vault2kube

manage Vault lease on Kubernetes secrets and keep it fresh

hashicorp-vault kubernetes security vault

Last synced: 30 Apr 2026

https://github.com/tdmalone/cloudfront-security-headers

A quick Lambda@Edge function to add security headers to AWS CloudFront responses.

aws cloudfront headers lambda lambda-edge node-js security

Last synced: 10 May 2026

https://github.com/excalibra/scripts

Platform: Windows/Mac/Linux. Scripting: Various, no restrictions; customized as needed. Tasks: Desktop checks, software cracking, AV evasion, privilege execution, firmware read/write, password checks, Wi-Fi scans, cloud security, log analysis, NLP, and data analysis in humanities/social sciences.

automation ban-ip clawer linux macos security spiders update wi-fi windows

Last synced: 04 Mar 2026

https://github.com/alexmacarthur/wp-sniff

A Python script that searches a site's source code for signs that it runs on WordPress.

python security wordpress

Last synced: 13 Feb 2026

https://github.com/vhscom/birdcage

Secure remote access for personal AI

acme go remote-access reverse-proxy security self-hosted single-user wireguard

Last synced: 04 Jun 2026

https://github.com/jwplayer/github-vul

:octocat: Enable GitHub vulnerability alerts for all repositories

github security security-fix vulnerability-alerts vulnerability-management

Last synced: 24 Apr 2026

https://github.com/radareorg/r2sarif

Load, manage and create SARIF documents with radare2

radare2 reports sarif security

Last synced: 14 Feb 2026

https://github.com/turbot/flowpipe-mod-opsgenie

Opsgenie pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Opsgenie to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code opsgenie opsgenie-api orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 30 Jan 2026

https://github.com/grimdork/awsec

Store secrets in AWS Parameter Store.

aws cli cross-platform secrets security security-tools

Last synced: 01 Apr 2026

https://github.com/tallyto/algafood

Treinamento em java com springboot

java jpa openapi security spring-boot

Last synced: 11 Feb 2026

https://github.com/soapbucket/mcptest

The test suite your MCP server is missing. Tool, resource, agent-loop, schema-drift, compliance, and security tests against any Model Context Protocol server, in CI on every commit. One YAML suite, deterministic cassette replay, multi-model comparison, and LLM-judge evals. Rust, Apache-2.0.

agent-testing ai-agents anthropic compliance conformance developer-tools evals llm llm-as-a-judge llm-as-a-jury llm-evaluation llm-testing mcp mcp-testing openai security test-automation testing

Last synced: 26 Jun 2026

https://github.com/devinbarry/longline

A safety hook for Claude Code that parses Bash commands and enforces configurable security policies

bash claude-code cli hook rust safety security tree-sitter

Last synced: 30 May 2026

https://github.com/clagentic/clagentic-lite

A personal coding harness with serious gates. POSIX shell, two SQLite files, no server.

ai-tooling claude-code code-review developer-tools posix-shell security

Last synced: 02 Jun 2026

https://github.com/smeso/saractl

saractl is the userspace counterpart of the S.A.R.A. LSM.

hardening linux lsm sara security

Last synced: 14 Jun 2026

https://github.com/ree-verse/rexor

Cross-platform Rust library with CLI app implementing XOR encryption/decryption

cli decryption encryption security xor

Last synced: 04 Apr 2026

https://github.com/atani/mysh

MySQL connection manager with SSH tunnel support. Auto-masks sensitive data for AI/non-TTY environments. Supports MySQL 4.x+.

ai-safety cli connection-manager data-masking database golang mysql mysql-client security ssh-tunnel

Last synced: 03 Jun 2026

https://github.com/vdjagilev/owasp-risk-calculator

An attempt to create a basic OWASP Risk Calculator

calculator owasp risk risk-assessment security

Last synced: 12 Mar 2026

https://github.com/furritos/flask-simple-crypt

Flask extension based on simple-crypt that allows simple, secure encryption and decryption for Python.

cryptography decryption encryption flask python security symmetric symmetric-cryptography

Last synced: 24 Oct 2025

https://github.com/bluet/express-pwnd-pw

Express.js security middleware for checking user password safety with Have I Been Pwned (HIBP) API

express express-middleware expressjs hacktoberfest hibp middleware node nodejs password password-safety security

Last synced: 14 Feb 2026

https://github.com/thetallprogrammer/password-generator

Falkenberg's Password Generator is a secure and customizable tool designed to generate strong passwords with ease. Adjust complexity and length, exclude specific symbols, and copy your password with one click. This standalone generator is part of a larger password manager project currently in development.

cpp desktop-app desktop-application password-generator password-generator-cpp privacy qt security tool tools user-interface

Last synced: 24 Jan 2026

https://github.com/akotov-dev/sstp-connector

Simple SSTP (Secure Socket Tunneling Protocol) VPN connector

anonimity anticensorship gui mageia-linux security sstp vpn-client

Last synced: 23 Jan 2026

https://github.com/mozilla-services/audit-filter

Filter for npm audit results

audit npm security

Last synced: 11 Oct 2025

https://github.com/edoverflow/slides

Slides from my past talks.

infosec security slides talks

Last synced: 02 Mar 2026

https://github.com/wgtechlabs/container-build-flow-action

Intelligent docker container build automation for modern development workflows.

docker ghcr security workflow-automation

Last synced: 28 Feb 2026

https://github.com/tpritc/verboten_keys

Verboten Keys is a last line of defense to help prevent you and your team from accidentally leaking private information via your APIs.

rack rails ruby security

Last synced: 08 Oct 2025

https://github.com/richbl/distributed-motion-surveillance

Distributed Ruby-based video security surveillance system using Motion (a software motion detector)

client email image iot motion motion-detection motion-detector ruby security server surveillance video video-security-surveillance

Last synced: 29 Apr 2026

https://github.com/wolfeidau/github-action-workflow-check

CLI which checks if the version of actions used in your workflow are up to date

github github-actions security

Last synced: 03 May 2026

https://github.com/alexander-naumov/pam2control

Easily configurable authentication provider

linux login pam pam-authentication protection security

Last synced: 22 Jan 2026

https://github.com/netcode/oauthgoat

Vulnerable dockerized environment designed to test OAuth vulnerabilities

oauth-client oauth2 oauth2-server security security-labs vulnerability

Last synced: 14 Feb 2026

https://github.com/contrast-security-oss/integration-verify-github-action

GitHub Action to verify an application by determining whether the application violates a job outcome policy or threshold of open vulnerabilities

assess contrast github-actions security verify

Last synced: 08 Oct 2025

https://github.com/roptat/hayha

Verifying CloudFormation deployments for intra-update sniping vulnerabilities

security

Last synced: 15 Mar 2026

https://github.com/sofianhw/dlyscl-web3-bootcamp

Web3 Developer Bootcamp by DailySocial.id - Day 2

bootcamp frontend security web3

Last synced: 05 Mar 2026

https://github.com/robertdebock/ansible-role-vault_agent

Install and configure HashiCorp Vault Agent on your system.

ansible application cloud infrastructure linux molecule playbook security system tools tox vaultagent

Last synced: 13 Mar 2026

https://github.com/finleap-connect/vaultoperator

VaultOperator provides a CRD to interact securely and indirectly with secrets stored in Hashicorp Vault.

devops kubernetes secrets security vault

Last synced: 07 Oct 2025

https://github.com/e-t-y-b/etyb-skills

ETYB — virtual engineering company for AI coding agents. 31 skills: CTO + 20 specialists + 9 engineering disciplines. Claude Code, Codex, Antigravity.

agentskills ai-agent architecture claude-code code-review devops engineering google-antigravity openai-codex quality-gates sdlc security tdd verification virtual-team

Last synced: 16 May 2026

https://github.com/kyrcha/secure-mern-app

A secure web application using the MERN stack

express-js heroku mongodb mongoose nodejs reactjs security

Last synced: 28 Feb 2026

https://github.com/cossacklabs/dockerfiles

Repository with docker containers, useful for running Themis and Acra

docker security themis

Last synced: 16 Mar 2026

https://github.com/marthijn/sidio.web.security

Helper functions and middleware to secure ASP.NET Core applications

asp-net-core content-security-policy http security web-security

Last synced: 26 Oct 2025

https://github.com/burmuley/ovoo

Privacy Mail Gateway helping to protect your mailbox from spam and tracking

email email-privacy privacy security spam-filtering

Last synced: 09 Jun 2026

https://github.com/paratron/next-server-session

Functions to handle serverside session data and csrf tokens

csrf-tokens nextjs react security serverside-sessions session-lifetime

Last synced: 26 Feb 2026

https://github.com/adamyordan/go-die

Go-DIE is a go wrapper module for Detect-It-Easy (https://github.com/horsicq/Detect-It-Easy/)

detect detect-it-easy detector disassembler go golang packer reverse-engineering security signature unpacker wrapper

Last synced: 18 Oct 2025

https://github.com/wultra/powerauth-cmd-tool

Command-line utility for PowerAuth Reference Client

authentication authorization mobile-security security testing-tools

Last synced: 21 Jan 2026

https://github.com/k1low/oshka

oshka is a tool for extracting nested CI/CD supply chains and executing commands.

github-actions security supply-chain

Last synced: 18 Oct 2025

https://github.com/turbot/flowpipe-mod-entra

Microsoft Entra ID pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Microsoft Entra ID to the people, systems and data that matters.

automation cloud devops entra flowpipe flowpipe-mod hacktoberfest integrations low-code microsoft-entra orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 01 Mar 2026

https://github.com/dinanathdash/envault

Auditable .env secret manager featuring aggressive CLI safeguards and GitHub JIT access.

cli developer-tools devsecops dotenv jit-access secret-manager secrets-management security

Last synced: 20 Apr 2026

https://github.com/saed-gpr/file-deleter

this tool can delete all file (or just .psd file or another)!! you can open the "file deleter.py" with vscode and edit it how you like!

file-deleter python python-virus python3 saed-gpr security security-tools simple-virus tools virus

Last synced: 24 Feb 2026

https://github.com/martin-ger/esp_nacl

NaCl crypto lib for the ESP8266

crypto esp8266 security

Last synced: 10 May 2026

https://github.com/alvarezops/privacy-shield

DNS Infrastructure with AdBlocking and Recursive Resolution #Pihole #RaspberryPi #Unbound

adblock dns docker docker-compose homelab networking pi-hole privacy raspberry-pi recursive-dns security sovereignty unbound

Last synced: 04 May 2026

https://github.com/kedi/jwt-attacker

tool to test and exploit common JWT security issues such as weak signing keys, alg:none bypasses, and RS/HS confusion attacks.

jwt jwt-attacks security

Last synced: 26 Oct 2025

https://github.com/petemcw/ansible-role-security-updates

Automatic Security Updates Role for Ansible

ansible ansible-role security unattended-upgrades yum-cron

Last synced: 26 Oct 2025

https://github.com/adamo08/encryption-decryption

This repository contains implementations of various encryption and decryption algorithms in Python. The goal is to provide simple and easy-to-understand code for educational and practical purposes.

affine-cipher algorithms caesar-cipher cryptography decryption des-cipher encryption hill-cipher python security vigenere-cipher

Last synced: 11 Feb 2026

https://github.com/rakibulhossain/tlsstuff

Learning stuff for TLS.

certificate https security ssl tls

Last synced: 19 Mar 2026

https://github.com/alvinwan/motiosecure

toy security platform with motion detection implementation for cheap, low-quality camera lens

desktop ios mac mobile motion-detection python security swift

Last synced: 01 May 2026

https://github.com/aquasecurity/katacoda-scenarios

Katacoda scenarios for Aqua's open source projects

examples kubernetes security starbuard tracee trivy

Last synced: 13 Oct 2025

https://github.com/lvlcn-t/secret-detection-operator

🔍 Detects hardcoded secrets in ConfigMaps and auto-remediates them via Kubernetes-native resources.

kubernetes operator secrets security

Last synced: 23 Jan 2026