An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/pahrohfit/sanic-beskar

Strong, Simple, and Precise, (and now async!) security for Sanic APIs

authentication authorization python python3 sanic security

Last synced: 05 May 2025

https://github.com/qkaiser/awind-research

This repository holds interesting bits and pieces related to research I performed on wireless presentation devices manufactured by Awindinc and OEM'ed to multiple manufacturers.

awind barco crestron exploits extron haworth infocus newline pentesting security teqavit

Last synced: 15 Aug 2025

https://github.com/datalux/notification-sniffer

An Android Library that implements a Notification Sniffer

android android-library notifications security sniffing

Last synced: 23 Jul 2025

https://github.com/peppelinux/django-audit-wazuh

Django middleware and signals for handling security events

django loganalysis ossec ossec-wazuh security siem wazuh

Last synced: 23 Mar 2025

https://github.com/Supersonic/Wallbreak

Exploit app for CVE-2021-39670 and CVE-2021-39690, two permanent denial-of-service vulnerabilities in Android's wallpaper system

android cve exploit security vrp

Last synced: 10 Mar 2025

https://github.com/grapheneos-archive/nginx-rotate-session-ticket-keys

Session ticket key rotation scripting / systemd units for nginx to work around the lack of built-in support. This may eventually be extended to support syncing keys across a group of servers providing the same service.

nginx privacy security

Last synced: 09 May 2025

https://github.com/mishakorzik/detectvpn

Free vpn, tor, datacenter, threat detection on IP

detect detection information ip ipv4 ipv4-address ipv6 ipv6-address security tor vpn

Last synced: 02 Jan 2026

https://github.com/mattdl/dua

Source code "Unsupervised Model Personalization while Preserving Privacy and Scalability: An Open Problem." @ CVPR2020

cvpr2020 framework importance personalization privacy scalability security unsupervised-learning

Last synced: 21 Jul 2025

https://github.com/iamcryptoki/passcat

:key: Generate cryptographically secure, memorable passphrases.

memorable-passphrases passphrase password python security wordlist words

Last synced: 29 Apr 2025

https://github.com/alexeev-prog/nadzoring

An open source tool for detecting website blocks, downdetecting, and network analysis

ai-friendly arp censorship cli dns network network-analysis network-monitoring python security security-tools utility

Last synced: 01 Apr 2026

https://github.com/ph-7/fake-admin-honeypot-v1.1

:honey_pot: New Honeypot Version: 1.2! :honeybee: This pH7CMS module is a simple but effective honeypot fake Admin CP for the security of your website. Honeypot for the attackers!

admin admin-honeypot fake-admin-panel hacking honeypot honeypot-fake-admin honeypots ph7cms security

Last synced: 09 Apr 2025

https://github.com/leonklingele/securetemp

Secure temporary directories and files in Go (ram disk, tmpfs)

ramdisk security temporary-directories temporary-files tmpfile tmpfs

Last synced: 07 May 2025

https://github.com/fxamacker/webauthn-demo

WebAuthn server demo for registration and authentication (Go/Golang)

authentication fido2 passwordless security web-application webauthn webauthn-demo yubikey

Last synced: 28 Apr 2025

https://github.com/paulveillard/cybersecurity-ctf

A collection of CTF frameworks, libraries, resources, softwares and tutorials, books, resources and cool stuff in Cybersecurity

ctf ctf-challenges ctf-platform ctf-solutions ctf-tools cybersecurity frameworks security security-tools

Last synced: 10 Apr 2025

https://github.com/mitocgroup/www

Mitoc Group is a technology company focusing on cloud adoption in private equity. Our track record includes helping private equity portfolio companies migrate to public clouds, as well as establish devops and dataops processes using cloud native services and industry best practices.

assurance development documents legal policy process quality security software

Last synced: 26 Jan 2026

https://github.com/jbergstroem/hadolint-gh-action

A hadolint linter for github actions that provides code annotations (and more)

bash containers continuous-integration docker github-actions hadolint security

Last synced: 16 Mar 2025

https://github.com/open-horizon/kubearmor-integration

KubeArmor runtime security integration with Open Horizon

docker edge horizon kubearmor security

Last synced: 19 Jan 2026

https://github.com/simeononsecurity/saps

A collection of scripts to assist System Adminsitrators

automation documentation mitigations powershell powershell-script security

Last synced: 23 Apr 2025

https://github.com/tankerhq/sdk-android

Tanker client-side encryption SDK for Android

android cryptography encryption end-to-end java kotlin privacy sdk security tanker

Last synced: 09 Apr 2025

https://github.com/socialgouv/hasura-permissions-viewer

Generate human-friendly HTML table from hasura permissions list

hasura security

Last synced: 23 Feb 2026

https://github.com/lchsk/django-insecure

Example of an insecure Django application

django education security

Last synced: 25 Apr 2025

https://github.com/charlesjones-dev/claude-code-plugins-dev

Automate developer busy work with AI-powered plugins for Claude Code.

ai claude claude-code developer-tools git git-tools llm performance performance-tools security security-tools

Last synced: 01 Apr 2026

https://github.com/thotypous/operagbas

Alternative "security" module for Brazilian banks

banking-applications security

Last synced: 12 Oct 2025

https://github.com/rix4uni/tldscan

A high-performance domain scanner that discovers active domains by testing multiple Top-Level Domains (TLDs) for given domain names.

bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence tldfinder tldscanner

Last synced: 20 Apr 2026

https://github.com/ffmancera/ping_of_death

Some scripts to do a ping of death attack.

ddos-attacks networking python3 scapy security

Last synced: 09 Oct 2025

https://github.com/lithnet/ad-password-protection-lists

Banned word lists for use with Lithnet Password Protection for Active Directory

active-directory lithnet-password-protection lpp password security

Last synced: 07 Feb 2026

https://github.com/shaps80/abracadabra

A truly plug 'n' play solution for securing your code.

authentication code pin security touchid

Last synced: 11 Mar 2026

https://github.com/shadowjonathan/dustls

Pure-Rust DTLS

dtls rust rustls security tls

Last synced: 14 Oct 2025

https://github.com/imagemlt/easyknife

a simple app like CKnife

security

Last synced: 13 Apr 2025

https://github.com/bbva/masquerade

High-performance, real-time, multi-location data obfuscation tool

encrypted-data masquerade security tokenizer

Last synced: 21 Jun 2025

https://github.com/sercanarga/ipmap

ipmap is an open source, cross-platform and powerful network analysis tool.

ipmap linux macos security windows

Last synced: 10 Mar 2026

https://github.com/carekit-apple/ibm-hyperprotectsdk

The IBM Hyper Protect iOS SDK for CareKit is an addon for the CareKit framework that consumes IBM Hyper Protect Services for zero-trust persistent cloud storage and bi-directional synchronization across multiple devices with just 2 lines of code

ios-swift mbaas mongodb security typescript

Last synced: 12 May 2025

https://github.com/netguru/mobile-security-review

Security review guidelines for mobile projects

android ios owasp security

Last synced: 11 Sep 2025

https://github.com/zuazo/dradis-docker

A Docker image with Dradis: A collaboration and reporting platform for IT security experts.

devops docker dradis minimal repository security

Last synced: 13 Apr 2025

https://github.com/elfenware/obliviate-web

A password manager that forgets your passwords

hacktoberfest manager passphrase password security svelte

Last synced: 14 May 2025

https://github.com/aiven-open/pghostile

Pghostile is a tool to automate the exploitation of PostgreSQLยฎ specific vulnerabilities that could lead to privilege escalation. It can be used to identify security issues in PostgreSQL extensions, to test system hardening and for security research in general.

exploitation postgresql security security-audit security-tools

Last synced: 29 Apr 2025

https://github.com/mam-dev/security-constraints

Fetches security vulnerabilities and creates pip-constraints based on them.

dependencies pip python security supply-chain-security

Last synced: 01 Jul 2025

https://github.com/ansible/ansible-sign

The `ansible-sign` utility for signing and verifying Ansible project directory contents.

ansible ansible-dev-tools awx cryptography gpg security

Last synced: 01 Aug 2025

https://github.com/grapheneos-archive/device_google_coral

Pixel 4 and Pixel 4 XL device sources.

android grapheneos security

Last synced: 13 Apr 2025

https://github.com/fi5t/nimbussrp-android

Classic NimbusSRP library is optimized for Android

android android-library nimbusds security srp-6a

Last synced: 09 May 2025

https://github.com/nategraf/naumachia-challenges

Open-source challenges for Naumachia

ctf ctf-challenges docker docker-compose network security

Last synced: 24 Apr 2025

https://github.com/ilya-smut/blue-book

Blue Book is an application that generates multiple-choice preparation questions for IT certifications, e.g. CompTIA A+, Network+, and Security+.

ai certification comptia cybersecurity it mock-tests security

Last synced: 12 Feb 2026

https://github.com/dneprdroid/chrome-poc-demo

Example for the Google Chrome cache attack to inject custom code into web pages (macOS, Linux, browser version: 124.0.6367.62 and older)

attack cache google-chrome poc proof-of-concept security

Last synced: 05 Mar 2026

https://github.com/rennf93/flaskapi-guard

A security library for Flask that provides an extension to control IPs, log requests, and detect penetration attempts. It integrates seamlessly with Flask to offer robust protection against various security threats.

api extension flask ip python rest security

Last synced: 03 Jun 2026

https://github.com/daggerok/csrf-spring-webflux-mustache

This repository is contains example application using spring boot 2.0, webflux, spring security 5, reactive mongodb and mustache template engine: spring security 5, CSRF protection with mustache, spring webflux functional routes security, method security, authorization decision, etc

controller-advice csrf csrf-protection csrf-tokens css-grid css-grid-layout maven mongodb mustache reactive reactive-mongo reactive-programming security spring-boot spring-mvc spring-security spring-web spring-webflux webflux

Last synced: 20 Oct 2025

https://github.com/wmeints/webauthn-sample

Sample demonstrating how to use FIDO2 keys with ASP.NET Core using WebAuthn

asp-net-core csharp dotnet fido2 npm nuget react security typescript webauthn

Last synced: 26 Jan 2026

https://github.com/groupe-edf/watchdog

Watchdog allows to define custom hooks in YAML format. When attached to the official repository, some of these can serve as a way to enforce policy by rejecting certain commits or branches.

ci devops devsecops git gitea gitguardian gitlab go gogs golang secrets security

Last synced: 14 Jan 2026

https://github.com/rezen/zap-lambda

ZAP running in a lambda?!

lambda owasp python security zap

Last synced: 13 Oct 2025

https://github.com/msune/l2radar

An eBPF L2 neighbour tracker

ebpf l2 security sniffing

Last synced: 10 Jun 2026

https://github.com/quarkiverse/quarkus-antivirus

Virus scan files using ClamAV or VirusTotal

antivirus clamav file quarkus-extension security virustotal

Last synced: 24 Apr 2025

https://github.com/cerberauth/openapi-oathkeeper

openapi-oathkeeper is a CLI for generating Ory Oathkeeper rules from an OpenAPI 3 contract and save a lot of time and effort, especially for larger projects with many endpoints or many services.

api-rest authorization cybersecurity golang oathkeeper openapi openapi3 ory ory-oathkeeper security swagger

Last synced: 14 Apr 2026

https://github.com/voku/anti-xss-twig

AntiXSS for Twig

hacktoberfest html php php7 security xss

Last synced: 09 Apr 2025

https://github.com/sciguy16/jwt-explorer

Decode, explore, and sign JWTs

jwt jwt-token security security-tools

Last synced: 11 Oct 2025

https://github.com/altcha-org/altcha-wordpress-next

ALTCHA for WordPress v2 is the professional solution for keeping your website safe from spam, bots, and abuse.

altcha captcha security spam wordpress

Last synced: 03 May 2026

https://github.com/minio/kms-go

MinIO Key Managment SDK

golang kes kms sdk security

Last synced: 06 Oct 2025

https://github.com/airgap-it/airgap-raspberry-apk-signer

Modified Raspberry Pi Image to sign your APK in the most secure way (airgapped).

android apk google-play security signing

Last synced: 15 Apr 2025

https://github.com/spences10/nopeek

CLI for LLM agent secret safety โ€” load env secrets without exposing values

agents cli coding-agents env llm redaction secrets security

Last synced: 04 Jul 2026

https://github.com/parasoft/run-cpptest-action

A GitHub Action for running Parasoft C/C++test analysis

analysis c code compliance cpp cpptest lint parasoft quality security static test testing

Last synced: 11 Jul 2025

https://github.com/t0mer/safeurl

SafeUrl is a small and lite [FastAPI]( https://fastapi.tiangolo.com/) based web application intended to help us validate any URL safely before clicking it.

docker fastapi ipinfo python security spam virustotal

Last synced: 15 Apr 2025

https://github.com/joaomilho/vault-desktop

๐Ÿ”‘ [really] safe password management desktop UI

electron password security stateless vault

Last synced: 15 Jul 2025

https://github.com/peter-juhasz/aspnetcoresecurity

Security extensions for ASP.NET Core

asp-net content-security-policy dotnet security

Last synced: 22 Mar 2025

https://github.com/wh0isdxk/Security-by-Design

Conceitos sobre Security-by-Design e alguns passos sobre como implementar isso no dia-a-dia.

information-security security security-by-design seguranca seguranca-da-informacao

Last synced: 10 Jul 2025

https://github.com/damienbod/bff-aspnetcore-angular-downstream-api

BFF using downstream API and OAuth client credentials

angular aspnetcore bff iam nx oauth openidconnect security

Last synced: 19 Apr 2025

https://github.com/MonaxGT/gosddl

GoSDDL converter

go rights sddl security sid windows

Last synced: 11 May 2025

https://github.com/sleventyeleven/kubernetes-harvester

Credential and sensitive information harvester for kubernetes environments.

devops devops-tools kubernetes kubernetes-harvester oscp security

Last synced: 12 Apr 2025

https://github.com/nitrokey/openpgp-card

Sample code of the OpenPGP Card

cryptography security smartcard

Last synced: 06 Jan 2026

https://github.com/eqstlab/cve-2024-8353

GiveWP PHP Object Injection exploit

cve exploit php poc proof-of-concept security vulnerability

Last synced: 19 Jun 2025

https://github.com/federicoceratto/nim-seccomp

Seccomp (libseccomp2) adapter for the Nim language

nim nim-lang seccomp security

Last synced: 09 Apr 2025

https://github.com/gardener/diki

Diki is a compliance checker that aims to enhance the security posture of your Kubernetes clusters.

compliance compliance-checklist hardening kubernetes kubernetes-hardening reporting security stig stig-compliant

Last synced: 12 Apr 2025

https://github.com/experience-monks/adviser

Jam3 quality advisor. Integrates checking for best practices at Jam3

accessibility best-practices performance security

Last synced: 14 May 2025

https://github.com/shellrow/nrev

Simple and Fast Network Scanner/Mapper. Written in Rust.

network rust scanner security

Last synced: 04 Apr 2026

https://github.com/cityssm/pdfflattener

PDF Flattener - Secure PDF documents by making floating redactions and form entries permanent.

flatten java pdf pdf-flattener pdf-forms pdfbox redaction security

Last synced: 26 Jun 2025

https://github.com/defeo/phishing-demo

Demonstration of wifi sniffing, dns poisoning, mitm and phishing attack

security wifi

Last synced: 09 Mar 2026

https://github.com/supercowpowers/scp-labs

SCP Labs (Open Source Team for SuperCowPowers)

data-analysis data-science pandas python scikit-learn security

Last synced: 06 May 2025

https://github.com/manuelberrueta/bst

๐Ÿดโ€โ˜ ๏ธ BST is an ever-evolving collection of ๐Ÿ›  tools to help in security and administration tasks ๐Ÿ˜‰

applicationsecurity appsec azure blueteam cloud containers dfir incident-response kubernetes offensive-security offensivesecurity redteam redteam-tools redteaming security threat-hunting threathunting

Last synced: 23 Jun 2025

https://github.com/seadog007/crontab_botnet

A botnet (C&C) framework that create in bash and using crontab for periodic execute

botnet c2 command-and-control crontab security

Last synced: 27 Aug 2025

https://github.com/GeekMasher/quibble

A container security tool written in Rust focusing on making security easy for compose based configurations

containers docker docker-compose podman podman-compose security

Last synced: 18 Jul 2025

https://github.com/stateloom/stateloom

The control plane for AI agents. Track, secure, and optimize every agent run.

ai-agents anthropic cost-tracking developer-tools gateway gemini guardrails llm middleware observability openai pii-detection python security

Last synced: 12 Apr 2026

https://github.com/jonlabelle/docker-nmap

Minimal Docker image with Nmap Network Security Scanner pre-installed.

alpine docker docker-image linux network nmap security

Last synced: 21 Mar 2025

https://github.com/DenizParlak/heimdall

AWS Attack Path Scanner - Discover privilege escalation paths across 10+ AWS services

aws aws-security cloud security

Last synced: 31 Jan 2026

https://github.com/apertureless/wiviz

Wifi client probe analyzer & visualizer

security wifi

Last synced: 27 Oct 2025

https://github.com/darko-mesaros/pristup

Generating AWS Credentials for temporary access

aws iam security temporary-credentials

Last synced: 26 Oct 2025

https://github.com/piecioshka/brute-force-generator

๐Ÿ”จ Build a dictionary by permuting passed letters (using ES2015+)

cli security

Last synced: 17 Jun 2026

https://github.com/robertdebock/ansible-role-openssh

Install and configure openssh on your system.

ansible molecule openssh playbook security system tox

Last synced: 13 Oct 2025

https://github.com/spacewander/lua-resty-mime-sniff

Sniff the real MIME type of given data in your OpenResty app

openresty security websecurity

Last synced: 28 Feb 2026

https://github.com/ruisiang/pow-phalanx

Controller for PoW Shield (a layer7 DDoS filter) providing multi-instance utilities.

controller cybersecurity ddos ddos-mitigation ddos-protection koa2 machine-learning network-security nodejs security typescript

Last synced: 12 Oct 2025

https://github.com/hugow04/tuantivirus

Antivirus software was originally developed to detect and remove computer viruses, hence the name. However, with the proliferation of other malware, antivirus software started to protect from other computer threats. In particular, modern antivirus software can protect users from malicious browser helper objects (BHOs), browser hijackers, ransomware

anti-malware antivirus antivirus-software malware malware-analysis malware-research md5 scanner security winapi windows windows-10 windows-11

Last synced: 19 Apr 2025

https://github.com/cerbos/express-jwt-cerbos

An example application of integrating Cerbos with an Express server using JSON Web Tokens - via express-jwt - for authentication.

authorization cerbos express jwt node security

Last synced: 21 Jun 2025

https://github.com/rust-ammonia/rust-content-security-policy

Parse and validate Web Content-Security-Policy level 3

crates security web

Last synced: 21 Jun 2025