An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/thalesgroup/security-risk-assessment-tool

The ISRA security-risk-assessment-tool project is an Electron based application used to do security risk assessments at a technical level

cvss cybersecurity engineering iso iso-27005 iso27005 risk-analysis risk-assessment security security-tools

Last synced: 17 Mar 2025

https://github.com/alexeev-prog/nadzoring

An open source tool for detecting website blocks, downdetecting, and network analysis

ai-friendly arp censorship cli dns network network-analysis network-monitoring python security security-tools utility

Last synced: 01 Apr 2026

https://github.com/quodeq/quodeq

AI-powered code quality and security scanner. Open source, MIT, runs locally. <🧭>

ai-tools cli code-analysis code-quality cwe devtools iso-25010 llm open-source python quality-assurance security static-analysis vulnerability-scanner

Last synced: 10 May 2026

https://github.com/Supersonic/Wallbreak

Exploit app for CVE-2021-39670 and CVE-2021-39690, two permanent denial-of-service vulnerabilities in Android's wallpaper system

android cve exploit security vrp

Last synced: 10 Mar 2025

https://github.com/grapheneos-archive/nginx-rotate-session-ticket-keys

Session ticket key rotation scripting / systemd units for nginx to work around the lack of built-in support. This may eventually be extended to support syncing keys across a group of servers providing the same service.

nginx privacy security

Last synced: 09 May 2025

https://github.com/wmeints/webauthn-sample

Sample demonstrating how to use FIDO2 keys with ASP.NET Core using WebAuthn

asp-net-core csharp dotnet fido2 npm nuget react security typescript webauthn

Last synced: 26 Jan 2026

https://github.com/wolfssl/arduino-wolfssl

This repository is a restructured copy of https://github.com/wolfSSL/wolfssl/ for the Arduino environment. Any Pull Requests for code changes should be opened there.

arduino-library cryptography security ssl tls tls12 tls13

Last synced: 27 Apr 2025

https://github.com/nategraf/naumachia-challenges

Open-source challenges for Naumachia

ctf ctf-challenges docker docker-compose network security

Last synced: 24 Apr 2025

https://github.com/jbergstroem/hadolint-gh-action

A hadolint linter for github actions that provides code annotations (and more)

bash containers continuous-integration docker github-actions hadolint security

Last synced: 16 Mar 2025

https://github.com/paretosecurity/aremykeyssafe

Find out if your SSH keys are safe!

public-key security ssh

Last synced: 12 Jul 2025

https://github.com/grapheneos-archive/device_google_coral

Pixel 4 and Pixel 4 XL device sources.

android grapheneos security

Last synced: 13 Apr 2025

https://github.com/iamcryptoki/passcat

:key: Generate cryptographically secure, memorable passphrases.

memorable-passphrases passphrase password python security wordlist words

Last synced: 29 Apr 2025

https://github.com/mam-dev/security-constraints

Fetches security vulnerabilities and creates pip-constraints based on them.

dependencies pip python security supply-chain-security

Last synced: 01 Jul 2025

https://github.com/leonklingele/securetemp

Secure temporary directories and files in Go (ram disk, tmpfs)

ramdisk security temporary-directories temporary-files tmpfile tmpfs

Last synced: 07 May 2025

https://github.com/socialgouv/hasura-permissions-viewer

Generate human-friendly HTML table from hasura permissions list

hasura security

Last synced: 23 Feb 2026

https://github.com/mitocgroup/www

Mitoc Group is a technology company focusing on cloud adoption in private equity. Our track record includes helping private equity portfolio companies migrate to public clouds, as well as establish devops and dataops processes using cloud native services and industry best practices.

assurance development documents legal policy process quality security software

Last synced: 26 Jan 2026

https://github.com/shaps80/abracadabra

A truly plug 'n' play solution for securing your code.

authentication code pin security touchid

Last synced: 11 Mar 2026

https://github.com/ffmancera/ping_of_death

Some scripts to do a ping of death attack.

ddos-attacks networking python3 scapy security

Last synced: 09 Oct 2025

https://github.com/simeononsecurity/saps

A collection of scripts to assist System Adminsitrators

automation documentation mitigations powershell powershell-script security

Last synced: 23 Apr 2025

https://github.com/sap-samples/cloud-nodejs-oflm

This repository demonstrates how to implement security in a business scenario using the Node.js framework. The application is secured using the SAP BTP, Cloud Foundry environment Authorization and Trust Management Service.

cloud-foundry nestjs nodejs sample sample-code sap-btp-cloud-foundry sap-cloud-sdk security xsuaa

Last synced: 13 Apr 2025

https://github.com/0x4f53/GetPerms

An Android wrapper library to quickly get app permissions and other package data.

android android-library apk demo icon java jitpack library localdatetime open-source package-manager packages permissions permissions-android phone security siem signature

Last synced: 11 Apr 2025

https://github.com/tot-ra/graphql-query-cost

Graphql query cost calculation

graphql security

Last synced: 10 Mar 2026

https://github.com/ph-7/fake-admin-honeypot-v1.1

:honey_pot: New Honeypot Version: 1.2! :honeybee: This pH7CMS module is a simple but effective honeypot fake Admin CP for the security of your website. Honeypot for the attackers!

admin admin-honeypot fake-admin-panel hacking honeypot honeypot-fake-admin honeypots ph7cms security

Last synced: 09 Apr 2025

https://github.com/heartsucker/rust-csrf

Primitives for CSRF protection.

cryptography csrf csrf-protection http rust security

Last synced: 07 Aug 2025

https://github.com/tankerhq/sdk-android

Tanker client-side encryption SDK for Android

android cryptography encryption end-to-end java kotlin privacy sdk security tanker

Last synced: 09 Apr 2025

https://github.com/fxamacker/webauthn-demo

WebAuthn server demo for registration and authentication (Go/Golang)

authentication fido2 passwordless security web-application webauthn webauthn-demo yubikey

Last synced: 28 Apr 2025

https://github.com/netguru/mobile-security-review

Security review guidelines for mobile projects

android ios owasp security

Last synced: 11 Sep 2025

https://github.com/elfenware/obliviate-web

A password manager that forgets your passwords

hacktoberfest manager passphrase password security svelte

Last synced: 14 May 2025

https://github.com/weebdatahoarder/go-away

[Mirror] Self-hosted abuse detection and rule enforcement against low-effort mass AI scraping and bots.

ai-scraping http-proxy mirror security

Last synced: 16 May 2025

https://github.com/imagemlt/easyknife

a simple app like CKnife

security

Last synced: 13 Apr 2025

https://github.com/carekit-apple/ibm-hyperprotectsdk

The IBM Hyper Protect iOS SDK for CareKit is an addon for the CareKit framework that consumes IBM Hyper Protect Services for zero-trust persistent cloud storage and bi-directional synchronization across multiple devices with just 2 lines of code

ios-swift mbaas mongodb security typescript

Last synced: 12 May 2025

https://github.com/rexs-io/blocksec2go-ethereum

Wrapper for blocksec2go allowing easy hardware-based signing of Ethereum transactions

blockchain blocksec2go ethereum hardware-wallet security

Last synced: 02 Apr 2026

https://github.com/brosck/farllen

「🚪」Port forwarding tool to gain access to internal devices

c forwarding hacking network pivot port security tool

Last synced: 06 May 2025

https://github.com/open-horizon/kubearmor-integration

KubeArmor runtime security integration with Open Horizon

docker edge horizon kubearmor security

Last synced: 19 Jan 2026

https://github.com/thotypous/operagbas

Alternative "security" module for Brazilian banks

banking-applications security

Last synced: 12 Oct 2025

https://github.com/datalux/notification-sniffer

An Android Library that implements a Notification Sniffer

android android-library notifications security sniffing

Last synced: 23 Jul 2025

https://github.com/tuxerrante/kapparmor

AppArmor profiles loader to deploy and update them through a Kubernetes daemonset

apparmor devsecops golang helm k8s kubernetes security

Last synced: 02 Mar 2026

https://github.com/lchsk/django-insecure

Example of an insecure Django application

django education security

Last synced: 25 Apr 2025

https://github.com/sercanarga/ipmap

ipmap is an open source, cross-platform and powerful network analysis tool.

ipmap linux macos security windows

Last synced: 10 Mar 2026

https://github.com/epsylon/paranoia-browser

pArAnoIA - Tiny "Secure" Browser

browser cryptography privacy security toolkit

Last synced: 29 Jun 2025

https://github.com/leonjza/go-observe

🌌 Go-Observe: A command line Mozilla Observatory client written in Go

commandline go security web

Last synced: 05 Jul 2025

https://github.com/rix4uni/tldscan

A high-performance domain scanner that discovers active domains by testing multiple Top-Level Domains (TLDs) for given domain names.

bug-bounty bugbounty bugbountytips hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance security security-tools threat-intelligence tldfinder tldscanner

Last synced: 20 Apr 2026

https://github.com/dneprdroid/chrome-poc-demo

Example for the Google Chrome cache attack to inject custom code into web pages (macOS, Linux, browser version: 124.0.6367.62 and older)

attack cache google-chrome poc proof-of-concept security

Last synced: 05 Mar 2026

https://github.com/ilya-smut/blue-book

Blue Book is an application that generates multiple-choice preparation questions for IT certifications, e.g. CompTIA A+, Network+, and Security+.

ai certification comptia cybersecurity it mock-tests security

Last synced: 12 Feb 2026

https://github.com/docker-secret-operator/dso

Zero-persistence secret injection for Docker. CNCF Sandbox project. AWS, Azure, Vault support.

cncf cncf-sandbox devops docker docker-plugin kubernetes secret-management security

Last synced: 02 Jun 2026

https://github.com/parasoft/run-cpptest-action

A GitHub Action for running Parasoft C/C++test analysis

analysis c code compliance cpp cpptest lint parasoft quality security static test testing

Last synced: 11 Jul 2025

https://github.com/lorddashme/php-simple-captcha

A simple captcha package that fit to any type of web application built on php.

anti-spam captcha free php security simple

Last synced: 13 Apr 2025

https://github.com/byt3n33dl3/novaoutcast

NOC is an Integration Bypasser, Change PoC Binary to quirks of working with the LLVM.

bypass bypassav docker linux macos security windows

Last synced: 20 Jul 2025

https://github.com/spences10/nopeek

CLI for LLM agent secret safety — load env secrets without exposing values

agents cli coding-agents env llm redaction secrets security

Last synced: 04 Jul 2026

https://github.com/cityssm/pdfflattener

PDF Flattener - Secure PDF documents by making floating redactions and form entries permanent.

flatten java pdf pdf-flattener pdf-forms pdfbox redaction security

Last synced: 26 Jun 2025

https://github.com/ramborogers/cyberpamnow

CyberPAM Instant PAM Solution

pam security zerotrust

Last synced: 22 Mar 2025

https://github.com/tarzan/leaked_passwords

Checking for leaked passwords through haveibeenpwned v2 API using the hash-range checker

elixir haveibeenpwned leaks password security

Last synced: 24 Jul 2025

https://github.com/f-froehlich/nmap-scan

Nmap wrapper for python with full Nmap DTD support, parallel scans and threaded callback methods support for faster analytics.

network-scanner nmap os-identifier portscan portscanner portscanning scanner scanning security security-tools serverstatus service-detection service-discovery

Last synced: 26 Dec 2025

https://github.com/wp-cli/super-admin-command

Lists, adds, or removes super admin users on a multisite installation.

admin cli hacktoberfest security superadmin wordpress wp-cli wp-cli-package

Last synced: 12 Jun 2025

https://github.com/betagouv/sillon

A knowledge base and recommendations in the choices of implementation of a digital product within a French administration (but not only)

cicd devops dsfr figma french guide guidelines javascript nextjs nodejs postgresql prisma product project react security storybook testing trpc typescript

Last synced: 27 Jul 2025

https://github.com/mhausenblas/aws-container-security-survey-2020

AWS container security survey 2020

2020 aws containers security survey

Last synced: 12 Apr 2025

https://github.com/cdimascio/express-openapi-validator-example

simple openapi validation examplewith express-openapi-validator

api express file-upload openapi request-validation response-validation security validation

Last synced: 28 Apr 2025

https://github.com/robertdebock/ansible-role-openssh

Install and configure openssh on your system.

ansible molecule openssh playbook security system tox

Last synced: 13 Oct 2025

https://github.com/ruisiang/pow-phalanx

Controller for PoW Shield (a layer7 DDoS filter) providing multi-instance utilities.

controller cybersecurity ddos ddos-mitigation ddos-protection koa2 machine-learning network-security nodejs security typescript

Last synced: 12 Oct 2025

https://github.com/05nelsonm/pin-authentication

An Android library that provides local PIN authentication for your application.

android android-library authentication security

Last synced: 16 Mar 2026

https://github.com/DenizParlak/heimdall

AWS Attack Path Scanner - Discover privilege escalation paths across 10+ AWS services

aws aws-security cloud security

Last synced: 31 Jan 2026

https://github.com/apertureless/wiviz

Wifi client probe analyzer & visualizer

security wifi

Last synced: 27 Oct 2025

https://github.com/darko-mesaros/pristup

Generating AWS Credentials for temporary access

aws iam security temporary-credentials

Last synced: 26 Oct 2025

https://github.com/mark-adams/gcp-ip-list

A CLI tool (and library) written in Go to simplify the process of retrieving IP addresses from infrastructure hosted on Google Cloud Platform (GCP).

gcp gcp-security golang security security-tools

Last synced: 23 Jan 2026

https://github.com/gonative-cc/contributig

Guidelines and resources for Native org contributions

blockchain contributors security

Last synced: 01 Mar 2026

https://github.com/jonlabelle/docker-nmap

Minimal Docker image with Nmap Network Security Scanner pre-installed.

alpine docker docker-image linux network nmap security

Last synced: 21 Mar 2025

https://github.com/plazmaz/cvestack

Scan products in your stack for known vulnerabilities

cve cve-scanning infosec nvd python security security-tools vulnerability

Last synced: 23 Apr 2025

https://github.com/nitrokey/openpgp-card

Sample code of the OpenPGP Card

cryptography security smartcard

Last synced: 06 Jan 2026

https://github.com/kremilly/linkscraper

Plunge into the depths of the web with Linkscraper! Uncover links, images, emails, and more swiftly, catering to researchers, developers, and curious explorers alike.

cli linkscraper python scraper security security-tools utils

Last synced: 31 Jul 2025

https://github.com/wh0isdxk/Security-by-Design

Conceitos sobre Security-by-Design e alguns passos sobre como implementar isso no dia-a-dia.

information-security security security-by-design seguranca seguranca-da-informacao

Last synced: 10 Jul 2025

https://github.com/GeekMasher/quibble

A container security tool written in Rust focusing on making security easy for compose based configurations

containers docker docker-compose podman podman-compose security

Last synced: 18 Jul 2025

https://github.com/mhausenblas/aws-container-security-survey-2019

Questions and results of the AWS container security survey 2019

2019 aws containers security survey

Last synced: 20 May 2026

https://github.com/airgap-it/airgap-raspberry-apk-signer

Modified Raspberry Pi Image to sign your APK in the most secure way (airgapped).

android apk google-play security signing

Last synced: 15 Apr 2025

https://github.com/sleventyeleven/kubernetes-harvester

Credential and sensitive information harvester for kubernetes environments.

devops devops-tools kubernetes kubernetes-harvester oscp security

Last synced: 12 Apr 2025

https://github.com/davidjbrossard/java-json-pep-sdk

This project provides a Policy Enforcement Point (PEP) SDK in Java that generates a XACML 3.0 authorization request and response in accordance with the JSON Profile of XACML 1.1.

abac access-control authorization java pbac security xacml

Last synced: 28 Jun 2025

https://github.com/federicoceratto/nim-seccomp

Seccomp (libseccomp2) adapter for the Nim language

nim nim-lang seccomp security

Last synced: 09 Apr 2025

https://github.com/t0mer/SafeUrl

SafeUrl is a small and lite [FastAPI]( https://fastapi.tiangolo.com/) based web application intended to help us validate any URL safely before clicking it.

docker fastapi ipinfo python security spam virustotal

Last synced: 16 Apr 2025

https://github.com/morenes/AutoCC

Methodology that leverages FPV to automatically discover covert channels in hardware that is time-shared between processes. AutoCC operates at RTL to exhaustively examine any machine state left by a process after a context switch that creates an execution difference.

covert-channel formal-verification fpv hardware security

Last synced: 11 May 2025

https://github.com/andresriancho/burp-proxy-search

Burp suite HTTP history advanced search

burp scanning search security statistics

Last synced: 10 Apr 2025

https://github.com/gardener/diki

Diki is a compliance checker that aims to enhance the security posture of your Kubernetes clusters.

compliance compliance-checklist hardening kubernetes kubernetes-hardening reporting security stig stig-compliant

Last synced: 12 Apr 2025

https://github.com/manuelberrueta/bst

🏴‍☠️ BST is an ever-evolving collection of 🛠 tools to help in security and administration tasks 😉

applicationsecurity appsec azure blueteam cloud containers dfir incident-response kubernetes offensive-security offensivesecurity redteam redteam-tools redteaming security threat-hunting threathunting

Last synced: 23 Jun 2025

https://github.com/cerbos/cerbos-sdk-java

Java SDK for interacting with the Cerbos PDP.

access-control cerbos policy security

Last synced: 02 Sep 2025

https://github.com/matricali/php-edge-auth

PHP Library that generates authorization token used by Akamai Auth Token 2.0.

akamai composer edge-auth php php-library security signature token

Last synced: 31 Aug 2025

https://github.com/abhisheknaiidu/arm

Management for users, to upload,download and manage important documents of a particular discipline. We'll be maintaining our Database on CRUD Functionalities.

bootstrap4 css3 dbms dbms-project documents hacktoberfest hacktoberfest2020 html5 js php security ui ux

Last synced: 02 Apr 2026

https://github.com/eustasy/authenticatron

PHP-LIB: HOTP / TOTP secrets with corresponding QR links and code verification from a simple PHP script.

2fa authentication composer-packages passwords php secret security totp two-factor-auth webauthn

Last synced: 31 Aug 2025

https://github.com/bytehide/securelocalstorage

SecureLocalStorage for .NET: A simple and lightweight extension that allows you to safely store data locally.

dotnet dotnet-core localstorage security security-tools storage

Last synced: 03 Jan 2026