An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/definitelyme/secureme

Secureme Cross-platform application

mobile-app secureme security

Last synced: 31 Jan 2026

https://github.com/adudley78/mcp-audit

Security scanner for MCP (Model Context Protocol) server configurations. Detects prompt injection, credential exposure, supply chain risks, and more.

ai-security claude cli cursor devsecops llm-security mcp model-context-protocol prompt-injection python security static-analysis supply-chain-security vulnerability-scanner

Last synced: 14 Jun 2026

https://github.com/tokido-io/tokido-core

Production-grade MFA toolkit for Java. TOTP, recovery codes, extensible factors. GraalVM native-image ready.

authentication graalvm java mfa security totp two-factor

Last synced: 28 Apr 2026

https://github.com/penguintechinc/elder

Elder is an enterprise-grade assest, entity and relationship tracking system for modern infrastructure teams. Built with Python 3.13, Flask, PyDAL, and React + TypeScript, Elder provides powerful visualization and management of complex organizational hierarchies, infrastructure dependencies, and project workflows.

asset-management identity-management project-management python reactjs relationships security security-tools services-platform software-inventory

Last synced: 07 Apr 2026

https://github.com/iuliandita/skills

Hand-crafted Agent Skills for DevOps, infrastructure, security, and software engineering. Production-tested, context-optimized, built on the Agent Skills standard.

ai-coding ansible claude-code claude-code-skills devops docker infrastructure kubernetes security terraform

Last synced: 19 May 2026

https://github.com/riklewis/better-passwords

Stop use of a bad passwords, including those in the Have I Been Pwned breached password database

pwned-passwords security wordpress wordpress-plugin

Last synced: 13 May 2026

https://github.com/go-to-k/image-scanner-with-dockle

The AWS CDK Construct library to allow you to scan a container image during CDK deployment layer with Dockle.

aws aws-cdk aws-cdk-construct cdk container dockle security

Last synced: 10 Feb 2026

https://github.com/bhdicaire/applesecurity

Apple Security Guides

apple ios mac macos osx security

Last synced: 30 Jan 2026

https://github.com/turbot/flowpipe-mod-reallyfreegeoip

Really Free Geo IP pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Really Free Geo IP to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code orchestration pipelines reallyfreegeoip security workflow workflow-automation workflow-engine

Last synced: 02 Feb 2026

https://github.com/destan0098/xssscanner

this tool scan XSS (Cros site scripting ) and show if website vulnerability

security security-tools vulnerability-scanners

Last synced: 14 May 2026

https://github.com/authzed/multi-app-demo

A demo of a distributed centralized authorization system powered by SpiceDB across 3 apps: Email, Docs and Groups

authorization distributed-systems security spicedb zanzibar

Last synced: 23 Oct 2025

https://github.com/mchmarny/kpush

Demo of signed message push from PubSub to Knative service

gcp golang knative pubsub security

Last synced: 23 Mar 2026

https://github.com/tata-fs4/data_governance

Data governance framework with cataloging, access control, lineage tracking and data quality pipelines for medallion lakehouses

best-practices compliance data-catalog data-governance data-lineage data-quality dbt lgpd master-data-management medallion-architecture privacy python security

Last synced: 10 Jun 2026

https://github.com/sum-catnip/foundry-rnghax

foundryvtt admin authentication bypass POC exploit

authentication-bypass exploit foundry-vtt poc security

Last synced: 03 Apr 2026

https://github.com/kaiyou/acm

Agnostic/acentric cloud messaging - free alternative to GCM/FCM

broker notifications protocol security

Last synced: 12 Oct 2025

https://github.com/agentbouncr/agentbouncr

Not on the list, not getting in. — Governance layer for AI agents.

agents ai audit-trail eu-ai-act governance policy-engine security typescript

Last synced: 23 Feb 2026

https://github.com/mauricelambert/cr0wl3r

Full and discreet web crawler for pentest, red-teaming or hacking discovery using simple HTTP request or selemium.

crawler discovery links pentest scan scraper security selenium uri url web web-links

Last synced: 11 Jun 2026

https://github.com/hcl-tech-software/appscan-gocd-plugin

Plugin for integrating HCL AppScan on Cloud (ASoC) scanning into GoCD pipelines

appscan security

Last synced: 28 Jan 2026

https://github.com/pradumnasaraf/soss-scout-demo

The repository demonstrates the use of Docker Scout in a CI/CD pipeline to examine vulnerabilities in container images. This demo was presented at Secure Open Source Software (SOSS) Community Days India 2024.

container-security docker docker-scout image-security security

Last synced: 19 Feb 2026

https://github.com/jerry-felipe/integrated-physical-security

Un Sistema de Seguridad Física Integral combina medidas como control de accesos, videovigilancia, alarmas, protección contra incendios, y personal de seguridad para proteger personas, bienes e instalaciones. Su objetivo es prevenir intrusiones y garantizar una respuesta rápida ante emergencias.

integrated physical security

Last synced: 11 Feb 2026

https://github.com/ohemilyy/lunarshell

A modern, elegant, and secure shell environment that transforms your Linux terminal experience with smart configurations, enhanced security, and beautiful customizations. Powered by Starship prompt and compatible with Ubuntu, Enterprise Linux, and Arch Linux.

linux optimized optimized-shell security shell shell-script shelll starship

Last synced: 28 Apr 2026

https://github.com/0xyg3n/claude-c2

AI-Powered Command & Control Framework using Claude's Model Context Protocol (MCP)

c2 claude command-and-control implant mcp offensive-security penetration-testing rat red-team security

Last synced: 16 Apr 2026

https://github.com/openchargingcloud/pki

The public key infrastructure of the Open Charging Cloud

emobility pki security

Last synced: 28 Jan 2026

https://github.com/brunopadz/mammoth

Audit-logging postgres proxy and jumpbox

auditing jumpbox postgres proxy security

Last synced: 14 Jan 2026

https://github.com/3qnrpdwd/juststone

[ JustStoneTransferProtocol&Backdoor ] This project stems from my interest in protocols and security, leading to the creation of a small backdoor and a proprietary protocol.

api backdoor eternalblue exploit protocol rust secure security socket socket-io

Last synced: 25 Apr 2026

https://github.com/alessiomaffeis/scanx

ScanX (Scanner for OS X) is a Cocoa framework for automating static analysis and evaluation workflows

analysis assessment automated-analysis evaluation framework macos scanning security

Last synced: 03 May 2026

https://github.com/jairtorres1003/eslint-plugin-sensitive-env

ESLint plugin to prevent sensitive values from being hardcoded in the codebase

environment eslint eslint-plugin npm secrets security sensitive

Last synced: 12 Feb 2026

https://github.com/turbot/flowpipe-mod-ip2locationio

ip2location.io pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect ip2location.io to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations ip2location ip2location-api ip2locationio low-code orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 06 Feb 2026

https://github.com/s44wn/the-watcher

A wep-app uses tensorflow to monitor a person presence.

ai nextjs nextjs14 security tailwindcss tensorflow typescript webcam

Last synced: 17 Apr 2026

https://github.com/lana-20/api-gateway-sdet

API Gateway from SDET Perspective

api-gateway load-balancer microservices security

Last synced: 19 Mar 2026

https://github.com/gusdcoder/leitor_contactless

Leitor Contactless is a high-performance system designed for handling large volumes of data with robust, contactless technology. Optimized for scalability and real-time processing, this project is ideal for applications requiring rapid data throughput and seamless user interactions in environments such as access control, ticketing,

authentication contactless iot mobile-payments nfc relay-attack replay-attack security vulnerability

Last synced: 28 Jan 2026

https://github.com/dtsivkovski/springjava

Java spring boot backend for the DADY-Academy website for calculations and tools in Physics, Biology, Statistics, and Chemistry.

api html java jwt mvc security spring-boot

Last synced: 08 May 2026

https://github.com/pforret/wpharden

Harden your Wordpress installation (bash script)

bash bash-script bashew hardening security security-tools wordpress

Last synced: 08 May 2026

https://github.com/azure/aks-secure-tls-bootstrap

Holds the client implementation and proto definitions of the AKS Secure TLS Bootstrapping protocol.

aks azure k8s security tls

Last synced: 20 Oct 2025

https://github.com/njgibbon/sek

Live Cloud Resource Security Configuration Scanning.

automation aws cli cloud eks k8s kubernetes scan security test tools

Last synced: 18 Feb 2026

https://github.com/turbot/flowpipe-mod-pagerduty

PagerDuty pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect PagerDuty to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code orchestration pagerduty pagerduty-api pipelines security workflow workflow-automation workflow-engine

Last synced: 26 Feb 2026

https://github.com/crocs-muni/scrutiny-fabric

Decentralized security metadata protocol built on Nostr for binding certifications, test results, and vulnerability data to products.

decentralized metadata nostr protocol security svelte verification

Last synced: 31 Jan 2026

https://github.com/harrystaley/tamusa_csci4349_week8_livepentest

This repository contains a college project for CSCI 4349, focusing on live penetration testing of the Globitek website in three versions: blue, green, and red. It involves identifying and exploiting six potential vulnerabilities, including SQL Injection and Cross-Site Scripting, using automated scripts and CLI tools to enhance cybersecurity skills.

cli command-line cybersecurity infosec network-security scripting security shell sql terminal

Last synced: 17 Mar 2026

https://github.com/kenatsf/basic_solidity_hacks

Write safe code in your smart contracts.

ethereum security smart-contracts solidity

Last synced: 06 May 2026

https://github.com/eaceto/swiftysimplekeychain

A wrapper (written only in Swift) to make it really easy to deal with iOS, macOS, watchOS and Linux Keychain and store your user's credentials securely.

ios linux macos security swift swift5 watchos

Last synced: 03 May 2026

https://github.com/seisollc/windows-sandbox

A very simple windows-based sandbox

experiments sandbox security seiso windows windows-sandbox

Last synced: 01 May 2026

https://github.com/smouj/captcha-shield

CAPTCHA Shield v3.0 - Advanced Anti-Bot/AI CAPTCHA with 14 behavioral signals, 7 challenge types, QR mobile verification. 100% client-side.

anti-ai anti-bot behavioral-analysis bot-detection canvas captcha framer-motion human-verification nextjs prisma react security shadcn-ui tailwindcss typescript

Last synced: 12 Jun 2026

https://github.com/marc-shade/dos-detector-mcp

DoS/DDoS Attack Detection - Log analysis, traffic patterns, and anomaly detection

ai-tools anomaly-detection anthropic claude ddos mcp model-context-protocol security

Last synced: 05 Apr 2026

https://github.com/jabedude/fail2ban-plot

Takes Fail2Ban log files and generates a Google Maps scatter plot of banned IP addresses.

fail2ban python python3 security

Last synced: 09 Oct 2025

https://github.com/staticdev/cleancontacts

Cleanup your phone contacts to prevent apps for having access to all details of your contacts.

android contacts go golang ios privacy security vcard

Last synced: 07 Oct 2025

https://github.com/wzrdtales/secure-passwords

An authtentication strategy that finally stops exposing user passwords on the wire.

password secure-password security

Last synced: 31 Jan 2026

https://github.com/seeden/granter

Composable, type-safe authorization for TypeScript. ⭐️ Star to support my work

abac access-control async authorization authz better-auth express permissions rbac security typescript

Last synced: 14 Oct 2025

https://github.com/nir3x/fxms.cpp

FNV-XOR-Mask-Shuffle Symmetric Encryption Algorithm

algorithm c-plus-plus cpp crypto encryption fnv fxms mask security shuffle symmetric xor

Last synced: 09 Jun 2026

https://github.com/maia-aedo/tp-final-backend

Trabajo final para prog. backend - con crud de usuarios y productos + paginación, guards y autenticación con jwt

crud guards jwt-authentication nestjs paginator prisma-orm security

Last synced: 27 Jan 2026

https://github.com/tusharnankani/commandlinepaytm

PaytmLite - A command line version of Paytm built with Java.

command-line command-line-tool java jdk payment paytm paytmlite security

Last synced: 06 Oct 2025

https://github.com/jwilk/unfaithful-less

less (without -U) is not a faithful pager

security

Last synced: 14 Feb 2026

https://github.com/stagas/safe-npm

safe npm time travel installs

npm security time-travel

Last synced: 25 Apr 2026

https://github.com/turbot/steampipe-mod-ibm-compliance

Run individual controls or full compliance benchmarks for CIS across all of your IBM Cloud accounts using Powerpipe and Steampipe.

cis cis-benchmark compliance hacktoberfest ibm-cloud powerpipe powerpipe-mod security sql steampipe steampipe-mod

Last synced: 24 Jan 2026

https://github.com/antosser/base94-rs

Base94 Encoding Library: Convert binary data to a compact text-based format using Base94 encoding. Effortlessly encode and decode data for a wide range of use cases. 🔐🔍

algorithm base94 binary-to-text cryptography development encoding rust rust-library security text-format utility

Last synced: 24 Oct 2025

https://github.com/gouthamofthenp/securitycamera

A project for security cameras involving Flask, OpenCV, SQLite, and PyQt6

camera home intruders motion security

Last synced: 27 Apr 2026

https://github.com/turbot/flowpipe-mod-openai

OpenAI pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect OpenAI to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code openai openai-api openai-chatgpt orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 14 Feb 2026

https://github.com/gnh1201/binarypub

BinaryPub - Check the file reputation on the social timeline

activitypub file-extension filetype imphash infosec ioc magic mastodon security social windows

Last synced: 02 Jan 2026

https://github.com/cossacklabs/security-guides

Tips, tricks, useful links on building and breaking secure systems

appsec hardware risks security ssdlc

Last synced: 14 Feb 2026

https://github.com/chocholl/xdp_furpf

Pretty fast XDP-based URPF implementation that leverages hierarchical data structures to perform high-speed packet filtering with rate limiting support.

arp-poisoning arp-spoofing cloud-networking ebpf kernel ndp-poisoning ndp-spoofing network-policy networking rate-limiting security spoofing-attack urpf virtual-machine xdp

Last synced: 01 Apr 2026

https://github.com/copyleftdev/copyleftdev

Systems-level software engineer building security tools, developer infrastructure, and AI-native systems in Rust, Go, and Zig. 560+ open source repositories.

ai-tools cli developer-tools devtools distributed-systems golang mcp model-context-protocol nim offensive-security open-source osint python red-team rust security systems-programming typescript web-fuzzer zig

Last synced: 04 Mar 2026

https://github.com/r3li4nt/awsecure

Herramienta de seguridad para entornos AWS, diseñada para analizar la infraestructura.

aws cloud hacking scanner security vulnerabilities

Last synced: 29 Apr 2026

https://github.com/slashexx/sentinel

A VSCode extension for intelligent code analysis and security monitoring. Security is not an afterthought anymore :)

extension security typescript vscode vscode-extension

Last synced: 16 May 2026

https://github.com/kadirsenturk/integrityvault

Protects file integrity with a custom hash generator. Perfect for security enthusiasts.

hash hashing integrity python python3 security

Last synced: 30 Jan 2026

https://github.com/tijme/grand-theft-filezilla

A tiny cross-platform Python script that steals saved & cached FileZilla credentials.

credentials file-transfer filezilla login passwords security stealing

Last synced: 15 Oct 2025

https://github.com/vatshayan/final-year-diffie-hellman-key-algorithm-project

Diffie–Hellman Key Exchange Method (hereafter called the D-H method) allows two parties agree upon a shared secret number, a symmetric key, over an insecure communications channel

btech btechproject communication diffie-hellman diffie-hellman-algorithm diffie-hellman-key project security semester semproject

Last synced: 15 Oct 2025

https://github.com/turbot/flowpipe-mod-uptimerobot

UptimeRobot pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect UptimeRobot to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code orchestration pipelines security uptimerobot uptimerobot-api workflow workflow-automation workflow-engine

Last synced: 28 Feb 2026

https://github.com/0x48piraj/fastapi-appattest

FastAPI extension for device request verification on iOS devices using Apple’s DeviceCheck service.

apple authorization device-attestation fastapi fastapi-appattest fastapi-extension ios jwt plugin python3 request-origin-validation security security-automation

Last synced: 07 Oct 2025

https://github.com/viooh/kafka-ssl-helper

Temporary trust/keystores for your kafka apps

data-engineering kafka security

Last synced: 24 Feb 2026

https://github.com/guibranco/github-infisical-secrets-check-action

🚨 :octocat: A GitHub action to check and report secrets leaks in the repository using Infisical CLI

gh-actions github-actions hacktoberfest hacktoberfest2024 infisical secrets security security-analysis validation

Last synced: 11 May 2026

https://github.com/miroslav-reiter/znalec

⭐ Znalec/Expert SW, HW, Security, Multimedia

electro expert hw ikt multimedia reiter security sw znalec

Last synced: 19 Mar 2026

https://github.com/alazndy/r-ai-os

Universal AI Agent Kernel & Terminal Control Center. Rust-based hardened kernel with Vigils security, real-time observability, and tamper-evident audit ledger.

agent-kernel ai-os async-rust audit-ledger hardened-kernel mcp-server observability ratatui redaction-engine rust security sentry sha256-hashing sqlite status-alpha t-ecosystem tamper-evident tokio vigils

Last synced: 09 Jul 2026

https://github.com/mattias-fjellstrom/hashitalks-secure-2024

HashiTalks Secure 2024: Unlocking Privileged Access Management: HCP Boundary with Terraform

aws boundary hashicorp security vault

Last synced: 18 Feb 2026

https://github.com/aegisjsproject/sanitizer

Sanitizer API polyfill & config

aegis sanitizer sanitizer-api security

Last synced: 13 Apr 2025

https://github.com/lorddashme/php-cryptor

A PHP package wrapper for cryptography functions.

cryptography-functions encryption hash php php-library security

Last synced: 13 Apr 2025

https://github.com/0x48piraj/wapparalyser

Fuzzing and fooling Wappalyzer. Released at BSides Delhi 2019.

blue-team research-tool security tool

Last synced: 17 May 2026

https://github.com/brittonhayes/zero

Find zero-days related to your code, deployments, and projects. 🔍 🐞

cli golang rss security zeroday

Last synced: 18 Jun 2025

https://github.com/muetze42/virus-total-php

This package is a wrapper for the VirusTotal.com API V3.

laravel php php8 security virusscan virustotal

Last synced: 12 Apr 2025

https://github.com/robertdebock/ansible-role-vault_auditdevice

Install and configure vault_auditdevice on your system.

ansible infrastructure molecule playbook security tox vaultauditdevice

Last synced: 20 Jan 2026

https://github.com/kareimgazer/des

Implementation of the Data Encryption Standard algorithm using C++

cipher-algorithm cryptography data-encryption-standard security

Last synced: 29 Mar 2025

https://github.com/fadhilthomas/repository-audit

run github repository access audit and send report to notion and slack

golang security

Last synced: 10 Mar 2026