An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/ancat/meatball

A host monitoring proof of concept that uses python and ebpf to watch for bad behavior and optionally take action on it.

ebpf host-monitoring python security

Last synced: 06 May 2025

https://github.com/brosck/processinjection

「💉」Simple Windows Process Injection Script

hacking injection process security shellcode windows

Last synced: 06 May 2025

https://github.com/rust-ammonia/rust-content-security-policy

Parse and validate Web Content-Security-Policy level 3

crates security web

Last synced: 21 Jun 2025

https://github.com/ignis-sec/cve-details-extension

Hover over cve id's on the website to get a helpful summary.

cve infosec security

Last synced: 06 May 2025

https://github.com/univ-of-utah-marriott-library-apple/app-playpen

A python GUI application that provides framework & automation to secure macOS applications with exceptional requirements.

macadmin macos nibbler py2app python sandbox security

Last synced: 10 Apr 2025

https://github.com/ctrlaltdev/rtlo-attack

☠️ Python script and example file to test the Right-To-Left Override attack

attachments attack bash filename infosec python rlo rtlo security unicode

Last synced: 04 Apr 2025

https://github.com/yash-rajsingh/despoina

Website that lets you:- • Generate strong new passwords • Check the strength of your password and • Find the time it would take a hacker to bruteforce your password

password security security-tools

Last synced: 19 Mar 2025

https://github.com/cerbos/express-jwt-cerbos

An example application of integrating Cerbos with an Express server using JSON Web Tokens - via express-jwt - for authentication.

authorization cerbos express jwt node security

Last synced: 21 Jun 2025

https://github.com/dajiaji/pyhpke

A Python Implementation of HPKE (Hybrid Public Key Encryption)

cryptography e2ee encryption hpke security

Last synced: 17 Mar 2025

https://github.com/amboxer21/sshmonitor

Notifies you of any ssh attempts to your computer, whether the attempts are successful or not. Please fork instead of clone.

c c-programming daemon gtk2 gui linux monitor notify pytailf python python2 python3 security ssh ssh-monitor

Last synced: 30 Apr 2025

https://github.com/cloudposse/terraform-aws-ec2-admin-server

Terraform Module for providing a EC2 instance capable of running admin tasks and provisioned by Ansible

ansible aws bastion ec2 instance security ssh terraform

Last synced: 29 Apr 2025

https://github.com/manuelberrueta/bst

🏴‍☠️ BST is an ever-evolving collection of 🛠 tools to help in security and administration tasks 😉

applicationsecurity appsec azure blueteam cloud containers dfir incident-response kubernetes offensive-security offensivesecurity redteam redteam-tools redteaming security threat-hunting threathunting

Last synced: 23 Jun 2025

https://github.com/eqstlab/cve-2024-8353

GiveWP PHP Object Injection exploit

cve exploit php poc proof-of-concept security vulnerability

Last synced: 19 Jun 2025

https://gitlab.com/ignis-build/sarif-converter

Convert from [SARIF](https://sarifweb.azurewebsites.net/) to GitLab Code Quality and SAST report.

SARIF SAST gitlab go security

Last synced: 20 Mar 2025

https://github.com/polachok/seccomp-sys

low-level bindings to libseccomp

linux rust rust-library seccomp security

Last synced: 16 Jun 2025

https://github.com/germdz/andesuser

Base para otros proyectos con la parte de usuarios resuelta

base php security symfony symfony-component

Last synced: 10 Apr 2025

https://github.com/viadee/pentest4vaadin

Spider and analyze vaadin applications with OWASP ZAP - the app mediates between the two.

java penetration-testing proxy security shadow-dom vaadin

Last synced: 13 Oct 2025

https://github.com/reconmap/documentation

Product documentation including admin, user and developer manuals

cybersecurity documentation hacktoberfest infosec manual pentesting saas security vulnerability

Last synced: 04 Mar 2026

https://github.com/altcha-org/altcha-wordpress-next

ALTCHA for WordPress v2 is the professional solution for keeping your website safe from spam, bots, and abuse.

altcha captcha security spam wordpress

Last synced: 03 May 2026

https://github.com/spacewander/lua-resty-mime-sniff

Sniff the real MIME type of given data in your OpenResty app

openresty security websecurity

Last synced: 28 Feb 2026

https://github.com/mark-adams/gcp-ip-list

A CLI tool (and library) written in Go to simplify the process of retrieving IP addresses from infrastructure hosted on Google Cloud Platform (GCP).

gcp gcp-security golang security security-tools

Last synced: 23 Jan 2026

https://github.com/05nelsonm/pin-authentication

An Android library that provides local PIN authentication for your application.

android android-library authentication security

Last synced: 16 Mar 2026

https://github.com/darko-mesaros/pristup

Generating AWS Credentials for temporary access

aws iam security temporary-credentials

Last synced: 26 Oct 2025

https://github.com/robertdebock/ansible-role-openssh

Install and configure openssh on your system.

ansible molecule openssh playbook security system tox

Last synced: 13 Oct 2025

https://github.com/apertureless/wiviz

Wifi client probe analyzer & visualizer

security wifi

Last synced: 27 Oct 2025

https://github.com/msune/l2radar

An eBPF L2 neighbour tracker

ebpf l2 security sniffing

Last synced: 10 Jun 2026

https://github.com/DenizParlak/heimdall

AWS Attack Path Scanner - Discover privilege escalation paths across 10+ AWS services

aws aws-security cloud security

Last synced: 31 Jan 2026

https://github.com/eustasy/authenticatron

PHP-LIB: HOTP / TOTP secrets with corresponding QR links and code verification from a simple PHP script.

2fa authentication composer-packages passwords php secret security totp two-factor-auth webauthn

Last synced: 31 Aug 2025

https://github.com/brightdigit/stealthystash

A Swifty database interface into the Keychain Services.

keychain keychain-wrapper password security swift

Last synced: 21 Apr 2025

https://github.com/wh0isdxk/Security-by-Design

Conceitos sobre Security-by-Design e alguns passos sobre como implementar isso no dia-a-dia.

information-security security security-by-design seguranca seguranca-da-informacao

Last synced: 10 Jul 2025

https://github.com/byt3n33dl3/novaoutcast

NOC is an Integration Bypasser, Change PoC Binary to quirks of working with the LLVM.

bypass bypassav docker linux macos security windows

Last synced: 20 Jul 2025

https://github.com/rezen/zap-lambda

ZAP running in a lambda?!

lambda owasp python security zap

Last synced: 13 Oct 2025

https://github.com/anunay-bhatt/secure-serverless-reference-architecture

A walkthrough of security controls for a serverless architecture via a demo application

cloud-security reference-architecture security security-architecture serverless

Last synced: 15 Apr 2025

https://github.com/sysdiglabs/sysdig-operator

Sysdig agent Operator configure Sysdig platform in your Kubernetes cluster

kubernetes monitoring security sysdig

Last synced: 13 Jul 2025

https://github.com/andresriancho/burp-proxy-search

Burp suite HTTP history advanced search

burp scanning search security statistics

Last synced: 10 Apr 2025

https://github.com/supercowpowers/scp-labs

SCP Labs (Open Source Team for SuperCowPowers)

data-analysis data-science pandas python scikit-learn security

Last synced: 06 May 2025

https://github.com/seadog007/crontab_botnet

A botnet (C&C) framework that create in bash and using crontab for periodic execute

botnet c2 command-and-control crontab security

Last synced: 27 Aug 2025

https://github.com/bytehide/securelocalstorage

SecureLocalStorage for .NET: A simple and lightweight extension that allows you to safely store data locally.

dotnet dotnet-core localstorage security security-tools storage

Last synced: 03 Jan 2026

https://github.com/hugow04/tuantivirus

Antivirus software was originally developed to detect and remove computer viruses, hence the name. However, with the proliferation of other malware, antivirus software started to protect from other computer threats. In particular, modern antivirus software can protect users from malicious browser helper objects (BHOs), browser hijackers, ransomware

anti-malware antivirus antivirus-software malware malware-analysis malware-research md5 scanner security winapi windows windows-10 windows-11

Last synced: 19 Apr 2025

https://github.com/defeo/phishing-demo

Demonstration of wifi sniffing, dns poisoning, mitm and phishing attack

security wifi

Last synced: 09 Mar 2026

https://github.com/ruisiang/pow-phalanx

Controller for PoW Shield (a layer7 DDoS filter) providing multi-instance utilities.

controller cybersecurity ddos ddos-mitigation ddos-protection koa2 machine-learning network-security nodejs security typescript

Last synced: 12 Oct 2025

https://github.com/joaomilho/vault-desktop

🔑 [really] safe password management desktop UI

electron password security stateless vault

Last synced: 15 Jul 2025

https://github.com/MonaxGT/gosddl

GoSDDL converter

go rights sddl security sid windows

Last synced: 11 May 2025

https://github.com/cerberauth/openapi-oathkeeper

openapi-oathkeeper is a CLI for generating Ory Oathkeeper rules from an OpenAPI 3 contract and save a lot of time and effort, especially for larger projects with many endpoints or many services.

api-rest authorization cybersecurity golang oathkeeper openapi openapi3 ory ory-oathkeeper security swagger

Last synced: 14 Apr 2026

https://github.com/foxcpp/audit_pretty

Linux Auditing System logs pretty printer

linux-audit linux-security security

Last synced: 30 Oct 2025

https://github.com/f-froehlich/nmap-scan

Nmap wrapper for python with full Nmap DTD support, parallel scans and threaded callback methods support for faster analytics.

network-scanner nmap os-identifier portscan portscanner portscanning scanner scanning security security-tools serverstatus service-detection service-discovery

Last synced: 26 Dec 2025

https://github.com/betagouv/sillon

A knowledge base and recommendations in the choices of implementation of a digital product within a French administration (but not only)

cicd devops dsfr figma french guide guidelines javascript nextjs nodejs postgresql prisma product project react security storybook testing trpc typescript

Last synced: 27 Jul 2025

https://github.com/cityssm/pdfflattener

PDF Flattener - Secure PDF documents by making floating redactions and form entries permanent.

flatten java pdf pdf-flattener pdf-forms pdfbox redaction security

Last synced: 26 Jun 2025

https://github.com/wp-cli/super-admin-command

Lists, adds, or removes super admin users on a multisite installation.

admin cli hacktoberfest security superadmin wordpress wp-cli wp-cli-package

Last synced: 12 Jun 2025

https://github.com/lorddashme/php-simple-captcha

A simple captcha package that fit to any type of web application built on php.

anti-spam captcha free php security simple

Last synced: 13 Apr 2025

https://github.com/plazmaz/cvestack

Scan products in your stack for known vulnerabilities

cve cve-scanning infosec nvd python security security-tools vulnerability

Last synced: 23 Apr 2025

https://github.com/t0mer/safeurl

SafeUrl is a small and lite [FastAPI]( https://fastapi.tiangolo.com/) based web application intended to help us validate any URL safely before clicking it.

docker fastapi ipinfo python security spam virustotal

Last synced: 15 Apr 2025

https://github.com/mhausenblas/aws-container-security-survey-2019

Questions and results of the AWS container security survey 2019

2019 aws containers security survey

Last synced: 20 May 2026

https://github.com/damienbod/bff-aspnetcore-angular-downstream-api

BFF using downstream API and OAuth client credentials

angular aspnetcore bff iam nx oauth openidconnect security

Last synced: 19 Apr 2025

https://github.com/antgroup/yasa-engine

YASA is an open-source static program analysis project. Its core innovation lies in a unified intermediate representation called UAST, designed to support multiple programming languages. Built on top of UAST, YASA provides a highly accurate static analysis framework.

antgroup program-analysis security taint-analysis

Last synced: 14 Sep 2025

https://github.com/stateloom/stateloom

The control plane for AI agents. Track, secure, and optimize every agent run.

ai-agents anthropic cost-tracking developer-tools gateway gemini guardrails llm middleware observability openai pii-detection python security

Last synced: 12 Apr 2026

https://github.com/tomatophp/filament-developer-gate

Secure your selected route by using a middleware with static password for developers only

developer-access developer-tools filamentphp filamentphp-plugin gate security

Last synced: 10 Oct 2025

https://github.com/deerborg/veterinarymanagementapi

VetApp is a veterinary management system built on Java with Spring Boot. It streamlines clinic operations, offering essential features like appointment scheduling, animal records, and vaccine tracking through RESTful APIs.

crud css frontend fullstack javascript management project rest-api security spring-boot veterinary

Last synced: 14 Feb 2026

https://github.com/gonative-cc/contributig

Guidelines and resources for Native org contributions

blockchain contributors security

Last synced: 01 Mar 2026

https://github.com/piecioshka/brute-force-generator

🔨 Build a dictionary by permuting passed letters (using ES2015+)

cli security

Last synced: 17 Jun 2026

https://github.com/otto-aa/solid-security-basics

Basic security considerations for solid applications

security solid

Last synced: 09 Feb 2026

https://github.com/oven-sh/security-scanner-template

Template for authoring Bun install security scanners

bun install security

Last synced: 26 Feb 2026

https://github.com/egida-kassandra/egida

Automatically deploying highly secure infraestructures with early error detection

ansible ansible-playbook ansible-role automation cis cis-benchmark dsl egida harden hardening network-security security

Last synced: 04 Apr 2026

https://github.com/synchro/wordhash

A PHP package for generating human-readable hashes

cryptography hacktoberfest hash php privacy security

Last synced: 27 Feb 2026

https://github.com/brannondorsey/cve

A collection of vulnerabilities found through independent security research.

cve disclosure security

Last synced: 06 Mar 2026

https://github.com/oplik0/solo2-desktop

A GUI application for managing Solo v2 security keys

fido2 hacktoberfest security solokeys tauri u2f

Last synced: 24 Oct 2025

https://github.com/kubearmor/kvm-service

Kubearmor Virtual Machine Service allows orchestrating policies to VMs and Bare-Metal environments using either k8s or non-k8s control plane.

bare-metal k8s kubearmor runtime security vm

Last synced: 23 Oct 2025

https://github.com/alifanov/scopegate

AI Access Proxy Layer — granular permission gateway for AI agents. Connect services, define scopes, get an MCP endpoint.

ai-agents llm llm-ops scope security

Last synced: 04 Apr 2026

https://github.com/novusvetus/action-phpinsights

GitHub phpinsights action. This workflow check the PHP files for the wanted coding standards and security issues.

codechecker codequality codereview github github-action github-actions hacktoberfest insights marketplace marketplace-released php php7 php8 phpinsights security workflow workflows

Last synced: 25 Jul 2025

https://github.com/youichi-uda/sbomhub

日本市場向けオープンソースSBOM管理ダッシュボード / Open-source SBOM management dashboard with NVD/JVN vulnerability correlation, Japanese UI, and METI guidelines compliance

compliance cyclonedx cyclonedx-sbom devsecops docker sbom sbom-management security self-hosted software-bill-of-materials spdx spdx-sbom vex vulnerability-management

Last synced: 05 Jul 2026

https://github.com/robertdebock/ansible-role-certbot

Install and configure certbot on your system.

acme ansible certbot letsencrypt molecule playbook security tox

Last synced: 14 Jul 2025

https://github.com/whomrx666/x-toolkit

Advanced Reconnaissance tool to enumerate attacking surface of the target

information-gathering kali-linux linux scanner security security-tools termux vulnerability x-toolkit

Last synced: 30 Jun 2025

https://github.com/quarkslab/starlink-tools

A collection of tools for security research on Starlink's User Terminal

fuzzing reverse-engineering security starlink

Last synced: 03 Feb 2026

https://github.com/dopplerhq/secrets-fetch-action

Securely inject Doppler secrets into your GitHub Actions.

secret-management secrets secrets-management secrets-manager security

Last synced: 15 Jul 2025

https://github.com/TuxCoding/SecureMyAccount

Second authentication for bukkit minecraft servers.

2fa authentication minecraft plugin qrcode security spigot

Last synced: 23 Mar 2025

https://github.com/austinheap/laravel-security-txt

A package for serving `security.txt` in Laravel 5.5+, based on configuration settings. https://securitytext.org/

composer composer-package laravel laravel-5-package laravel5 laravel55 php php7 php70 php71 php72 security security-txt

Last synced: 02 Oct 2025

https://github.com/rezmoss/sbomlyze

SBOM diff & analysis tool for software supply-chain security, integrity drift detection, and CI/CD enforcement

compliance cyclonedx dependency-graph devsecops diff drift-detection go sbom sbom-tool security software-supply-chain spdx supply-chain-security syft tools

Last synced: 18 Feb 2026

https://github.com/anqorithm/fastapi-keycloak

This project demonstrates how to integrate Keycloak with a FastAPI application using Docker and Docker Compose for authentication.

authentication fastapi keycloak python security

Last synced: 31 Oct 2025

https://github.com/snyk/teamcity-snyk-security-plugin

Allow TeamCity users to test their applications against the Snyk vulnerability database

security snyk teamcity

Last synced: 28 Jun 2025

https://github.com/niluxv/secmem-proc

Process hardening in rust

rust security

Last synced: 05 Sep 2025

https://github.com/neuralegion/sslscan.cr

Crystal shard wrapping the rbsec/sslscan utility

crystal detection scanner security shard ssl tls vulnerabilities

Last synced: 19 Jul 2025