An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/mitre/chef-cis-tomcat-hardening

(WIP) Chef recipe for hardening tomcat 8 to the CIS Tomcat Benchmark v1.0.1

chef hardening inspec mitre-corporation mitre-inspec mitre-saf security test-kitchen tomcat8

Last synced: 10 Jun 2026

https://github.com/christianklisch/smartmask-spring-boot-starter

A unified data masking library for Spring Boot applications that consistently masks sensitive data in JSON responses and logs, reducing GDPR/DSGVO risks while enabling secure audit and security logging.

audit-logging compliance data-masking dsgvo gdpr jackson java json logging pii-masking privacy security spring-boot spring-boot-starter

Last synced: 13 Jan 2026

https://github.com/antosser/base94-rs

Base94 Encoding Library: Convert binary data to a compact text-based format using Base94 encoding. Effortlessly encode and decode data for a wide range of use cases. 🔐🔍

algorithm base94 binary-to-text cryptography development encoding rust rust-library security text-format utility

Last synced: 24 Oct 2025

https://github.com/anoblescm/mcp-zero-trust-proxy

Open-source zero-trust proxy for MCP servers — adds OAuth 2.1, tool-level RBAC, audit logging, and rate limiting to any MCP server. One Docker command, zero code changes.

ai-agents claude copilot cursor go mcp model-context-protocol oauth proxy rbac security zero-trust

Last synced: 29 Apr 2026

https://github.com/parsiya/parsiya.fa

Source for my Farsi blog.

hugo personal-blog security

Last synced: 10 May 2026

https://github.com/phstc/probot-security-alerts

Auto file issues for GitHub security alerts

probot probot-app security typescript

Last synced: 02 May 2026

https://github.com/volkansah/the_collector.py

The Collector.py (lite) is a RedTeam Black-Python script designed to help in finding BAD sites. This script is part of a larger collection and was created to be used with caution. Some functions have been removed to prevent any malicious attacks, but it remains a simple yet powerful script that can be used to scan for bad sites.

abuse-detection cybersecurity hacking hacking-tool information-gathering infosec malware offensive-scripts offensive-security osint penetration-testing pentest pentesting phishing python reconnaissance redteam-tools redteaming script security

Last synced: 11 Apr 2025

https://github.com/circle-rd/upki-ca

A small PKI dedicated to be used in internal infrastructures and Docker deployment using Traefik

certificate certificates docker mcp mcp-server openssl pki python security traefik

Last synced: 23 Apr 2026

https://github.com/mrwong99/gitscanner

Gitscanner is used to perform a variety of security checks against Git repositories and is expandable. Feel free to add your own checks.

cli clone git golang scan security ui

Last synced: 16 Jan 2026

https://github.com/sarvsav/devsecops-with-docker-and-k8s

This repository will contain the material for training course on devsecops with docker 🐳 and k8s ☸️

devops docker golang k8s kubernetes security

Last synced: 04 May 2026

https://github.com/a1573595/securitysharedpreferences

A small SharedPreferences wrapper and cryptographic android library power by Kotlin.

aes android base64 keystore kotlin rsa security sharedpreferences

Last synced: 22 Apr 2026

https://github.com/faryon93/swarmprom

Secure way to expose Prometheus HTTP handler in an Docker Swarm environment.

docker go metric prometheus security swarm

Last synced: 10 May 2026

https://github.com/mendel5/thunderbird

How to configure Mozilla Thunderbird

email how-to howto mozilla security thunderbird

Last synced: 03 Mar 2026

https://github.com/jnm2/threshold

Paper backup requiring a chosen K of N pieces to decrypt. Useful for storing passwords, private keys for PGP or Bitcoin, recovery codes, secret instructions, and small files. Work in progress.

backup bitcoin cross-platform cryptography csharp digital dotnet-core encrypt paper password pgp print private-key redundancy secret-sharing security shamir threshold wallet

Last synced: 10 May 2026

https://github.com/shell-company/dumbdns

an LLM client implemented in a DNS server using TXT queries for prompts

ai dns llm security security-tools shell-company

Last synced: 10 Aug 2025

https://github.com/shisa-ai/textguard

Hostile-text normalization, inspection, and cleaning for LLM-adjacent systems.

cli llm prompt-injection python sanitization security text-processing unicode unicode-normalization yara

Last synced: 28 May 2026

https://github.com/davidzajac1/iamscan

Checks code for needed AWS IAM Privileges

aws iam javascript python security shell-scripting

Last synced: 06 May 2026

https://github.com/kovart/forta-ens-spoofing

🧐 The bot detects attacks in which someone registers ENS name visually similar to an existing one

bot ens forta security spoofing

Last synced: 22 Apr 2026

https://github.com/luvmad/vanity-anticheat

ℹ️ About VANITY-ANTICHEAT / - Real-Time Cheat Detection / Optimized Performance /Comprehensive Logging / Constant Updates / For ROBLOX

anti-cheat anticheat banning-system cheat-detection community-tools discord-webhook exploits game-development game-modifications game-security lua online-gaming open-source player-monitoring player-safety roblox scripting security version-check

Last synced: 17 Mar 2025

https://github.com/kurtbuilds/simple2fa

Simple2FA is a simple and fast library to easily add two-factor authentication to your app. Bindings in Rust, Python, and Node.

2fa nodejs python rust security

Last synced: 05 May 2026

https://github.com/innosoft-company/innocaptcha

A professional, pluggable CAPTCHA library with image, math, and custom challenge types, token-based security, and multiple storage backends.

bot-protection captcha innocaptcha math-captcha security text-captcha

Last synced: 17 Apr 2026

https://github.com/luvmad/VANITY-ANTICHEAT

ℹ️ About VANITY-ANTICHEAT / - Real-Time Cheat Detection / Optimized Performance /Comprehensive Logging / Constant Updates / For ROBLOX

anti-cheat anticheat banning-system cheat-detection community-tools discord-webhook exploits game-development game-modifications game-security lua online-gaming open-source player-monitoring player-safety roblox scripting security version-check

Last synced: 02 Apr 2025

https://github.com/luke-jr/full-retpoline

Patches and such to build your entire system with retpolines

compiler gcc-complier meltdown patches security spectre

Last synced: 11 Oct 2025

https://github.com/eaceto/localauthentication-verify

A CLI tool to verify user's credential using Biometry, Watch or Password. Useful for other other apps wanting to use Local Authentication as a unlock method.

apple biometry fingerprint fingerprint-authentication localauthentication macos macos-app macosx security touchid touchid-authentication

Last synced: 30 Apr 2026

https://github.com/s44wn/the-watcher

A wep-app uses tensorflow to monitor a person presence.

ai nextjs nextjs14 security tailwindcss tensorflow typescript webcam

Last synced: 17 Apr 2026

https://github.com/blackhatinside/btech_pydosc

Python Reconnaisance using Google Dorks and Web Scraping

bs4 dorking dorks hacking osint python regex scraping security

Last synced: 06 Jul 2025

https://github.com/antonmeep/system_random

Minimal Ada library to retrieve random data from system sources

cryptography random security

Last synced: 23 Feb 2026

https://github.com/spirizeon/nixos-maxxing

Config using dendritic patterns with security hardening, NVIDIA GPU support, and a customized desktop environment.

modularization nixos nvidia-gpu security

Last synced: 02 May 2026

https://github.com/agent-sh/enhance

Plugin structure and tool use analyzer - validates plugin.json, MCP tools, and security patterns

ai claude code-quality devtools javascript linter mcp plugin security validation

Last synced: 04 Apr 2026

https://github.com/conseilgouz/pkg_cgsecure_j4

CG Secure package for Joomla 4.x

joomla-4-x joomla-5-x package security security-tools

Last synced: 18 Apr 2026

https://github.com/sum-catnip/foundry-rnghax

foundryvtt admin authentication bypass POC exploit

authentication-bypass exploit foundry-vtt poc security

Last synced: 03 Apr 2026

https://github.com/benjitrapp/aws-loginguard

Ever wondered who is lurking around in your AWS Account? Get notified if someone strange login activities occured in your AWS Account

aws aws-lambda python3 security

Last synced: 29 Apr 2026

https://github.com/sakiib/integrate-vault-with-microservices-in-k8s

This project aims at demonstrating & providing a guideline on using Vault to manage DB credentials for microservices in K8s.

database dynamiccredential kubernetes microservices security vault

Last synced: 01 May 2026

https://github.com/b4fun/turtle

🐢 Turtle is a toolkit for simulating and validating application layer denial-of-service attacks in both live and unit testing environments.

golang-http-attack security slowloris slowloris-attack

Last synced: 31 Mar 2025

https://github.com/jbsenovs/hope

About AI-Powered Medical Assistant 🏥🤖 The AI-Powered Medical Assistant is an intelligent healthcare platform that utilizes AI to assist users in symptom analysis, treatment recommendations, medical research, and patient management. By integrating advanced AI models and multiple innovative features, this project enhances healthcare accessibility,

blogging druid graph hope hopenet machine-learning pose-estimation pytorch security shiro spring-boot sso vuepress vuepress-theme

Last synced: 13 Oct 2025

https://github.com/miroslav-reiter/znalec

⭐ Znalec/Expert SW, HW, Security, Multimedia

electro expert hw ikt multimedia reiter security sw znalec

Last synced: 19 Mar 2026

https://github.com/turbot/steampipe-mod-terraform-gcp-compliance

Run compliance and security controls to detect Terraform GCP resources deviating from security best practices prior to deployment using Powerpipe and Steampipe.

compliance gcp hacktoberfest powerpipe powerpipe-mod security sql steampipe steampipe-mod terraform

Last synced: 04 Feb 2026

https://github.com/tamper000/tor-scanner

Easily Find Working Bridges for Tor

golang security security-tools tor

Last synced: 30 May 2026

https://github.com/openchargingcloud/pki

The public key infrastructure of the Open Charging Cloud

emobility pki security

Last synced: 28 Jan 2026

https://github.com/mpdenisov/laravel_admin_module

Rhinoda Admin Module. Role management and creating CRUD controllers

admin-panel auth crud laravel-5-package laravel-framework permissions security

Last synced: 12 Feb 2026

https://github.com/kovart/forta-dashboard

An experimental version of Forta Dashboard with focus on attack researchers 🔬🦠

alerts attack blockchain dashboard explorer forta security

Last synced: 20 Apr 2026

https://github.com/keep-starknet-strange/unrug-tg-bot

Unruggable Meme Telegram Bot

memecoin security starknet

Last synced: 11 Jul 2025

https://github.com/ishanoshada/spiral-cipher

A spiral cipher implementation for text encryption and decryption

cipher crypto cryptography encryption pypi python security spiral spiral-cipher

Last synced: 18 Feb 2026

https://github.com/lana-20/api-gateway-sdet

API Gateway from SDET Perspective

api-gateway load-balancer microservices security

Last synced: 19 Mar 2026

https://github.com/shahradelahi/timing-safe-compare

🔐 Isomorphic constant-time string and buffer comparison to prevent timing attacks.

browser constant-time cryptography isomorphic nodejs security timing-attack

Last synced: 03 Apr 2026

https://github.com/gyulyvgc/crosswall

Cross-platform interface to built-in firewalls

firewall firewall-management network-programming networking rust security

Last synced: 01 Mar 2026

https://github.com/marc-shade/dos-detector-mcp

DoS/DDoS Attack Detection - Log analysis, traffic patterns, and anomaly detection

ai-tools anomaly-detection anthropic claude ddos mcp model-context-protocol security

Last synced: 05 Apr 2026

https://github.com/azu/mongoose-serialization-proxy-plugin

Mongoose plugin that hide mongo model fields when JSON.stringify

express mongo mongoose plugin security serialize

Last synced: 18 Apr 2026

https://github.com/yasirhamza/androdr

Open-source Android security scanner and endpoint detection (EDR). Detects spyware, stalkerware, and malware entirely on-device.

android edr malware-scanner mobile-security open-source privacy security sigma-rules spyware-detection stalkerware

Last synced: 25 May 2026

https://github.com/r1c0n/blacksmith

Blacksmith generates only the most secure passwords.

generator password password-generator security vue

Last synced: 04 Apr 2026

https://github.com/copyleftdev/copyleftdev

Systems-level software engineer building security tools, developer infrastructure, and AI-native systems in Rust, Go, and Zig. 560+ open source repositories.

ai-tools cli developer-tools devtools distributed-systems golang mcp model-context-protocol nim offensive-security open-source osint python red-team rust security systems-programming typescript web-fuzzer zig

Last synced: 04 Mar 2026

https://github.com/yashbarot/security-scanner

A fast, zero-config CLI tool that scans your project dependencies and Dockerfiles for known security vulnerabilities — across 8 ecosystems, powered by free public vulnerability databases, with AI-powered analysis and scheduled scanning.

cli-tool cve dependency-check devsecops npm-audit open-source-security osv pip-audit python sca security supply-chain-security vulnerability-scanner

Last synced: 07 Apr 2026

https://github.com/turbot/flowpipe-mod-vault

Hashicorp Vault pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Hashicorp Vault to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest hashicorp hashicorp-vault integrations low-code orchestration pipelines security vault workflow workflow-automation workflow-engine

Last synced: 28 Feb 2026

https://github.com/nunenuh/defense-kit

Defensive security toolkit — scan, harden, and monitor your OS, code, repos, and infrastructure. Claude Code skill.

claude-code defense docker gitleaks hardening lynis sast sca security semgrep trivy

Last synced: 04 Apr 2026

https://github.com/chocholl/xdp_furpf

Pretty fast XDP-based URPF implementation that leverages hierarchical data structures to perform high-speed packet filtering with rate limiting support.

arp-poisoning arp-spoofing cloud-networking ebpf kernel ndp-poisoning ndp-spoofing network-policy networking rate-limiting security spoofing-attack urpf virtual-machine xdp

Last synced: 01 Apr 2026

https://github.com/cburmeister/qr-code-wifi

Generate a QR code containing WIFI credentials.

cli network qrcode qrcode-generator security

Last synced: 17 Aug 2025

https://github.com/aws-security-ug-argentina/public

Repositorio para compartir información con la comunidad

aws cloud security

Last synced: 27 Jan 2026

https://github.com/supriyo-biswas/honeypot

A multi-protocol network honeypot

honeypot security smtp ssh

Last synced: 04 Apr 2025

https://github.com/jaegeral/misp-chrome-plugin

MISP Chrome plugin for adding and looking up indicators

broswer chrome cyber misp plugin security security-tools threat-intelligence threatintel

Last synced: 13 May 2026

https://github.com/barestripehq/primer

Pre-install security interceptor for package managers.

cve mcp osv package-manager sbom scanner security vulnerability

Last synced: 01 Jun 2026

https://github.com/leifrogers/php-copilot

A comprehensive GitHub Copilot configuration that transforms your coding assistant into a Senior PHP Architect and Security Specialist

github-copilot laravel php php-development prompt-engineering security symfony

Last synced: 08 May 2026

https://github.com/abnerpersio/bedrock-api

Studying security on NodeJS APIs

docker nodejs security typescript

Last synced: 12 Apr 2026

https://github.com/destan0098/xssscanner

this tool scan XSS (Cros site scripting ) and show if website vulnerability

security security-tools vulnerability-scanners

Last synced: 14 May 2026

https://github.com/m3dzik/libcrypto

Cryptographic utilities for Java and JavaScript

aes aes-gcm argon2 crypto cryptography curve25519 encryption hashing security x25519

Last synced: 09 Apr 2025

https://github.com/springtimesoft/silverstripe-csp-suite

A set of tools for managing CSP in Silverstripe CMS projects

csp security silverstripe

Last synced: 24 Feb 2026

https://github.com/grote/qubes-gpg-search-keys

A small utility for importing GPG keys from keyservers in a Qubes Split GPG setup

gnupg pgp pgp-keyserver qubes-os security

Last synced: 24 Mar 2025

https://github.com/satanaelcode/pyssword

A simple Password Generator based on Python.

password python security

Last synced: 17 Apr 2025

https://github.com/vdlp/oc-securitytxt-plugin

October CMS plugin which adds routes for a security.txt.

laravel octobercms octobercms-plugin php security securitytxt

Last synced: 12 Apr 2025

https://github.com/untreu2/aircommit

Verifiable Data Transmission Protocol for Offline Environments

crytography decoding encoding security

Last synced: 17 Feb 2026

https://github.com/muhammadmuazen/thagarat

Thagarat (ثغرات) which literally means (vulnerabilities) in Arabic is a simple rust automation tool for the CVE DB Shodan API

automation cves-finder cybersecurity hacking-tool information-gathering inno-setup open-source pentesting-tool pentesting-tools rust rust-lang security shodan shodan-api threat-intelligence

Last synced: 13 Apr 2025

https://github.com/tigera-solutions/cc-eks-container-security-workshop

This repo intends to guide you step-by-step on creating an AWS EKS cluster, registering the cluster on Calico Cloud and securing your cloud-native applications. Although Calico Cloud has many functionalities and security components, this workshop will explore only a few security features used to protect your workload in runtime and deployment time.

aws cc eks regismartins security workshop

Last synced: 13 Apr 2025

https://github.com/bocaletto-luca/win-sec-defender

win-sec-defender - Defender-Service is a .NET 6 Windows security daemon that auto-installs as a Windows Service under LocalService. It schedules security checks (processes, Event Log), stores SMTP creds securely in Credential Manager, exposes `/healthz` and Prometheus `/metrics`, logs to file & Event Log, and sends alert emails with auto-restart ..

admin administration bocaletto-luca defender opensource security tools windows

Last synced: 20 Jun 2025

https://github.com/henriquetourinho/batedor

Monitoramento profissional de sistemas Linux em Go. Interface TUI, dashboard web, histórico persistente e gestão de processos em tempo real.

dashboard desempenho devops go linux monitoramento monitoring observability open-source painel painel-web performance process-management processos realtime security sqlite sysadmin terminal tui

Last synced: 28 Jun 2025

https://github.com/benderthecrime/passport-rapid-api-auth

Provides an additional layer of security for RapidAPI APIs built on Node.js.

authentication passport rapidapi security

Last synced: 21 Jun 2025

https://github.com/mikong/anshou

A text-based UI (TUI) application for generating passwords.

rust security terminal

Last synced: 17 May 2026

https://github.com/fujiwarachoki/forceurself

Bruteforcing Tool written in Python.

bruteforce pentesting python3 security

Last synced: 20 Jul 2025

https://github.com/teymurgahramanov/scripts

Set of useful scripts for system administrators 👽

automation monitoring security sysadmin

Last synced: 13 Mar 2025

https://github.com/sqreen/sqreen-monitoring-wordpress

Automatically monitor Wordpress with Sqreen PHP agent

security wordpress

Last synced: 17 May 2026

https://github.com/jenkinsci/xygeni-sensor-plugin

Jenkins plugin for Xygeni - End to end software development and delivery security

ci-cd-security iac-security secrets-scan security software-attestation software-supply-chain-security

Last synced: 11 Apr 2025

https://github.com/maxpat78/cryptopad

A simple Notepad supporting ZIP AES-256 encrypted documents, coded in Python

aes cryptography encryption notepad security text-editor zip zipfile

Last synced: 12 Apr 2025

https://github.com/phoenixnap/drive-encryption-bmc

BMC drive encryption using EMP

encryption security

Last synced: 20 Jul 2025

https://github.com/s3rgeym/telegram-cleaner

Delete all your messages of any type in Telegram

anonymity cleaner deleter eraser messages security telegram

Last synced: 05 Apr 2025

https://github.com/a3ro-dev/password_generator

Python program that generates a random password with the specified length, inserts it into a database, and then checks if the generated password already exists in the database. If it does, the program generates a new password and repeats the process until it generates a unique password.

database generator password password-generator password-manager project-python security

Last synced: 11 Sep 2025