An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/perimetersec/resources

Public resources on fuzzing services, methodologies, and benefits for protocol security.

echidna evm fuzzing medusa security solidity

Last synced: 14 Apr 2025

https://github.com/codingchili/enigmatic-mouse

The enigmatic mouse will keep your passwords safe - password manager on Android in Kotlin.

android android-application kotlin password-generator password-manager passwords security

Last synced: 11 Aug 2025

https://github.com/cypwnpwnsocute/RedisHoneyPot

High Interaction Honeypot Solution for Redis protocol

gev golang honeypot security

Last synced: 01 Apr 2025

https://github.com/nirmata/kyverno-policies

Curated Kyverno Policy Sets from Nirmata

kubernetes kyverno policy-as-code security

Last synced: 22 Sep 2025

https://github.com/Perufitlife/supabase-security-skill

Open-source Supabase security auditor: detects RLS-disabled tables, public buckets, exposed SECURITY DEFINER functions. Active anonymous probe confirms each leak with the anon key.

audit auditor cli devsecops leak mit-license nodejs open-source penetration-testing postgres rls scanner security security-audit supabase typescript vulnerability

Last synced: 25 Jun 2026

https://github.com/turbot/flowpipe-samples

Flowpipe sample mods, demonstrating common pipeline patterns and how to use the Flowpipe library mods. Run directly or use as examples for your own pipelines.

automation cloud devops flowpipe flowpipe-mod hacktoberfest hcl low-code orchestration security workflow

Last synced: 25 Feb 2026

https://github.com/thatsinewave/spy.pet-info

This repository serves as an index for all info the community has gathered on the Spy.pet situation and as well as my own tables and tools written for these investigations. Spy.pet was taken down by Discord on 11.08.2024, this is just an archive of what bots where in each server.

bot bots database discord discord-api discord-bot discord-data discord-py discord-token scrape scraper scraping scraping-websites scrapper security security-scanner security-tools spy-pet spypet thatsinewave

Last synced: 30 Apr 2025

https://github.com/may215/koa-protect

Security module for koa applications

koa nodejs security sql-injection xss

Last synced: 10 Jul 2025

https://github.com/goncalor/cve-ark

All published CVE and their recent changes, ready to be used by humans and machines

cve security security-vulnerability

Last synced: 12 Jul 2025

https://github.com/mainframe-renewal-project/sear

SEAR (Security API for RACF) - A unified and standardized interface to RACF callable services.

api ibmz ibmzsystems mainframe mainframe-security racf security zos

Last synced: 06 Mar 2026

https://github.com/JuliaLang/SecurityAdvisories.jl

The Julia Security Advisory Database

cve julia security

Last synced: 06 Apr 2026

https://github.com/itaynir1/brute-force

This project is a Python script for conducting a brute-force attack on a login page. It takes a target URL, a username, and a password file as inputs, attempting to find the correct password through successive login attempts.

automation brute-force-attack command-line-tool ethical-hacking http-requests login-page password-cracking password-management python-libraries python-script requests security term-colors user-authentication web-application-testing web-development web-scraping web-security

Last synced: 01 May 2025

https://github.com/kosasih/pi-sentinel

Standing watch over the Pi Network, PiSentinel is a consensus algorithm that safeguards security, decentralization, and scalability.

pi-network pi-network-ecosystem security

Last synced: 22 Jun 2025

https://github.com/carverauto/threadr

๐ŸŒŽ OSS Real-time AI Data Analysis with GraphDB integration. ๐Ÿ”

event-driven-architecture generative-ai graphdb intelligence-gathering message-broker ml property-g security social-network-analysis

Last synced: 30 Apr 2025

https://github.com/vantamnguyen/java-backend

Things I learn to become a Java backend engineer

database https java-backend restful-api security servlet spring testing

Last synced: 05 May 2025

https://github.com/privacyidea/adfs-provider

Authentication provider for Microsoft AD FS to use with privacyIDEA.

2fa adfs authentication mfa multi-factor-authentication security

Last synced: 03 May 2025

https://github.com/hahwul/vais

SWF Vulnerability & Information Scanner

hacking scanner security swf

Last synced: 30 Apr 2025

https://github.com/the-osint-toolbox/privacy-practitioners

Want to know more about Privacy & Security, you will find mnay helpful Subject Matter Experts as-well-as the resources they use.

encryption infosec mfa obfuscation opsec privacy security vpn

Last synced: 17 Mar 2026

https://github.com/ctnkaan/postman-sentinel

Postman Sentinel (Previously Postman Student Helper) is the Discord Bot that specializes in server security. It also has some fun commands to lighten up the mood. This bot has blocked more than 900 attacks!

bot discord discord-bot discord-js discrodjs javascript nodejs postman security typescript

Last synced: 23 Jun 2025

https://github.com/tolitius/hubble

hubbling the universe nebula by nebula

clojure configuration consul security vault

Last synced: 23 Apr 2025

https://github.com/christosgalano/skaleql

sKaleQL is an opinionated template repository for managing, executing, and organizing Kusto Query Language (KQL) queries against Azure Log Analytics Workspaces.

automation azure devops devsecops github-actions kql kusto-query-language log-analytics security template-repository

Last synced: 07 Mar 2026

https://github.com/plazmaz/liquidhoney

A small, fluid, low-interaction honeypot

honeypot low-interaction monitoring security tcp udp

Last synced: 23 Apr 2025

https://github.com/jay-johnson/nerfball

Want to see how something like Internet Chemotherapy works without bricking your own vms? This is a jail to reduce the python runtime from doing bad things on the host when running untrusted code. Nerf what you do not need :space_invader: + :bug: :soccer: :football: :whale:

docker jail python reverse-engineering runtime-system security security-audit security-hardening untrusted-code

Last synced: 14 Apr 2025

https://github.com/tagomaru/truffle-sca2t

Smart contract auditing assistant tool for Truffle Framework.

auditing ethereum ethereum-contract security smartcontract solidity

Last synced: 13 May 2025

https://github.com/vietlq/smart-contract-audit

Guide to auditing EVM smart contracts using tools

cve-scanning ethereum evm security security-audit smart-contracts

Last synced: 16 Jan 2026

https://github.com/sqlsec/intranetsecurity

ๅ†…็ฝ‘ๅฎ‰ๅ…จไปŽ้›ถๅผ€ๅง‹็บข้˜Ÿๆ•™็จ‹๏ผŒ่ฟ™ๅฏ่ƒฝๆ˜ฏๅ›ฝๅ†…ๆœ€็ณป็ปŸๆœ€้€‚ๅˆๅฐ็™ฝ็š„ๅ†…็ฝ‘ๅฎ‰ๅ…จๆ•™็จ‹ใ€‚

course mkdocs-site security

Last synced: 22 Apr 2025

https://github.com/sagi/node-dns-over-tls

DNS-over-TLS API for Node.js

dns dns-over-tls dnstls nodejs privacy security tls

Last synced: 05 May 2025

https://github.com/eteissonniere/opsec-checklist

Checklist of simple and not so simple things to enhance your OPSEC.

checklist opsec security

Last synced: 27 Feb 2026

https://github.com/zekiunal/openssl-certificate-authority-guide

Bu kฤฑlavuz, OpenSSL komut satฤฑrฤฑ araรงlarฤฑnฤฑ kullanarak kendi sertifika yetkilinizi (CA) kurup nasฤฑl kullanacaฤŸฤฑnฤฑzฤฑ gรถsterir.

certificate-authority openssl security tls turkce turkish

Last synced: 28 Jan 2026

https://github.com/futurragroup/securitykit

SecurityKit is a lightweight, easy-to-use Swift library that helps protect iOS apps according to the OWASP MASVS standard, chapter v8, providing an advanced security and anti-tampering layer.

cydia encryption-decryption jailbreak jailbreaking obfuscation owasp reverse-engineering security swift vpn

Last synced: 04 Mar 2026

https://github.com/ctc-oss/fapolicy-analyzer

Tools to assist with the configuration and management of fapolicyd.

fapolicyd fedora pyo3 python rhel rust security whitelisting

Last synced: 01 Feb 2026

https://github.com/mk-fg/acme-cert-tool

Simple one-stop tool to manage X.509/TLS certs and all the ACME CA authorization stuff

acme-client certificates cryptography letsencrypt python security sysadmin tls tool web-pki x509

Last synced: 23 Apr 2025

https://github.com/didinj/spring-boot-security-rest

Securing RESTful API with Spring Boot, Security, and Data MongoDB

api data example mongodb rest restful security spring springboot tutorial

Last synced: 05 Aug 2025

https://github.com/alajusticia/laravel-logins

๐Ÿ”‘ Sessions and Sanctum tokens tracking in Laravel apps. User notifications on new login, multiple remember tokens, IP geolocation, User-Agent parser.

authentication geolocation guard ip laravel login remember security session user-agent

Last synced: 10 Mar 2026

https://github.com/seemoo-lab/wisec2017_nexmon_jammer_demo_app

This project contains source code of our Nexmon-based jammer app presented as a demo at WiSec 2017.

android-application jamming nexmon security wireless

Last synced: 05 Apr 2025

https://github.com/jasondrawdy/shellgen

Dynamic and extensible shell code generator with multiple output types which can be formatted in binary, hexadecimal, and the typical shellcode output standard.

cryptography dotnet dynamic generator library security shellcode utilities

Last synced: 22 Apr 2025

https://github.com/fkie-cad/ipal_transcriber

Industrial protocol transcriber - a common representation of industrial communication as input for protocol-independent industrial intrusion detection systems.

cip ids iec-60870-5-104 iec-61162-450 industry ipal modbus network nmea0183 protocols s7 security

Last synced: 06 May 2025

https://github.com/hardenedlinux/lego-hardening

Hardening your OS/Profile is like building with LEGO, incorporating a couple of Grsecurity features and implementing aggressive security settings

apparmor hardening linux nixos nixos-config security

Last synced: 22 Apr 2025

https://github.com/grapheneos-archive/kernel_msm-coral

Kernel sources for the Pixel 4, Pixel 4 XL and Pixel 4a.

android grapheneos privacy security

Last synced: 13 Apr 2025

https://github.com/yojiwatanabe/networkalarm

A tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent in-the-clear, and shellshock attacks. Currently supports live monitoring and network capture (pcap) scanning.

hack-detection network-capture network-monitoring networking pcap scanning security security-automation security-scanner security-vulnerability

Last synced: 11 May 2025

https://github.com/realorangeone/django-sri

Subresource Integrity for Django

django security sri subresource-integrity

Last synced: 08 May 2025

https://github.com/reinershir/lui-auth

ไธ€ไธชไฝฟ็”จ็ฎ€ๅ•็š„ๅฎ‰ๅ…จ้˜ฒๆŠคใ€ๆƒ้™้ชŒ่ฏใ€่บซไปฝ้ชŒ่ฏๅทฅๅ…ท๏ผŒๆ— ๅคๆ‚้…็ฝฎ๏ผŒๅช้œ€ไพ่ต–jarๅนถ็ฎ€ๅ•้…็ฝฎๅณๅฏไฝฟ็”จ๏ผŒ็›ฎๅ‰ๆ‹ฅๆœ‰ๅŠŸ่ƒฝ๏ผš่ง’่‰ฒใ€่œๅ•ใ€ๆƒ้™้›†ๆˆ็ฎก็†๏ผŒIP้™ๆต๏ผŒๅ†…้ƒจๆœๅŠกๅŒๅ‘้ชŒ่ฏใ€่‡ชๅŠจๆ‰“ๅฐ่ฏทๆฑ‚ๆ—ฅๅฟ—็ญ‰ใ€‚ A simple and secure protection tool that is easy to use, with permission verification and identity authentication. No complex configuration is required, just rely on the jar file and simple configuration to use it.

authentication-backend lui-auth modified-preorder-tree-traversal permission security

Last synced: 14 Jan 2026

https://github.com/plackemacher/secure_compare

A secure compare for Elixir.

elixir library package security

Last synced: 12 Apr 2025

https://github.com/xi/ximatrix

filter net requests according to source, destination and type

ad-block firefox-extension security umatrix webextension

Last synced: 29 Jul 2025

https://github.com/yallxe/hogg

Common vulnerability scanning on steroids โ˜„๏ธ

dns exploit network proxy rust rust-lang scanner secrets security sniffer vulnerabilities webscanner

Last synced: 19 Jul 2025

https://github.com/luizbizzio/siteguard

๐Ÿ›ก๏ธ A JavaScript utility that detects when developer tools are opened in web browsers. It blocks right-click actions, drag events, and certain keyboard shortcuts to enhance the protection of web content from unauthorized inspection or tampering.

blocker content-protection copy detector devtools iot javascript legacy library lock open-source prevent privacy safety script security siteguard web web-tools website

Last synced: 27 Apr 2025

https://github.com/joshuaquek/quickencrypt

Easily generate RSA Public-Private Keypairs and use them for secure asymmetric one-way encryption and decryption! - npmjs.com/package/quick-encrypt

asymmetric-cryptography cryptography decrypt decryption encrypt encryption javascript nodejs npm-package rsa security

Last synced: 05 May 2025

https://github.com/ctxz/mkauthdocs

A tool made to implement simple authentication on top of mkdocs builds.

auth authentication credentials login mkdocs security

Last synced: 21 Mar 2025

https://github.com/chadmcox/azure_ad_conditional_access_policies

Tools to help implement Conditional Access Policies in Azure AD

azuread azuread-b2b azuread-reporting conditional-access mfa security

Last synced: 28 Jun 2025

https://github.com/mikaelvesavuori/better-apis-workshop

Workshop and demo for improving API quality, stability, and observability.

apis aws demo learning observability quality security serverless stability workshop

Last synced: 21 Mar 2025

https://tersesystems.github.io/ocaps/

Object capability (ocap) tools and macros for Scala.

access capabilities capability ocap scala security

Last synced: 23 Sep 2025

https://github.com/vincd/savoir

Savoir is a tool to perform tasks during internal security assessment

kerberos pentesting security windows

Last synced: 20 Jan 2026

https://github.com/guiofsaints/backup-anything

Scripts to create a backup of anything.

backup bash bucket database mongodb mysql postgresql s3 script security tools

Last synced: 21 Nov 2025

https://github.com/FrozenAssassine/EasePass

A powerful but simple, password manager that stores all your passwords locally and offline. Written in C# WinUI3

2fa-client 2factor app csharp password password-manager passwordmanager security totp windows winui3

Last synced: 31 Mar 2025

https://github.com/jpcertcc/toolanalysisresultsheet_jp

ๅˆ†ๆžใƒ„ใƒผใƒซ็ตๆžœใ‚ทใƒผใƒˆ

security

Last synced: 09 Apr 2025

https://github.com/fphammerle/docker-onion-service

hidden tor .onion service ๐Ÿณ

docker network onion-service podman security tor

Last synced: 04 May 2025

https://github.com/yosaiproject/yosai_alchemystore

SQLAlchemy-enabled Account Store for Yosai that features a flat Role-Based Access Control (RBAC) data model

security sqlalchemy yosai

Last synced: 14 Jan 2026

https://github.com/airlock/microgateway

Artifacts for Airlock Microgateway, a Kubernetes native WAAP (Web Application and API Protection) solution to protect microservices.

airlock cilium ergon gateway-api istio k8s kubernetes kubernetes-operator microgateway openshift security waap waf web-application-security

Last synced: 13 May 2026

https://github.com/advanced-security/probot-security-alerts

Sample GitHub App which monitors and enforces rules for code scanning, Dependabot, and secret scanning alerts

ghas nodejs probot sample security security-alerts typescript

Last synced: 23 Oct 2025

https://github.com/lirantal/express-security-txt

A Node.js middleware for Express that implements Security.txt - A Method for Web Security Policies

express hacktoberfest nodejs security

Last synced: 05 May 2025

https://github.com/grapheneos/device_common

Common device sources.

android grapheneos security

Last synced: 07 Jul 2025

https://github.com/systemli/mail-tls-helper

Postfix helper for mandatory TLS

postfix postfix-helper python security tls

Last synced: 12 Jul 2025

https://github.com/akshatvg/vulnerability-testing-solutions

Website for testing and preventing different attacks like XSS, SQL Injection & Spoofing for Nasscom (ISAA) Project.

audit cyber-security security spoofing sql-injection testing vulnerability website xss

Last synced: 11 Apr 2025

https://github.com/xi/xiMatrix

filter net requests according to source, destination and type

ad-block firefox-extension security umatrix webextension

Last synced: 26 Mar 2025

https://github.com/danieljustus/symaira-vault

๐Ÿ” The password manager for terminal users and AI agents. Age-encrypted, keyring-cached, MCP-ready. Zero telemetry.

age-encryption agent-skills ai-agents claude-code cli codex-cli golang hermes-agent hermes-skill mcp mcp-server openclaw openclaw-skill opencode own-your-data password-manager security

Last synced: 11 Jun 2026

https://github.com/t2minator/mbp-tails

How to get Tails working on T2 Apple device (e.g. 2019 MacBook Pro) without needing external keyboard/mouse.

anonymity anonymous apple apple-t2 chroot debian debian-linux kernel linux linux-kernel macbook macbookpro macbooks mpb privacy security t2 t2tails tails tor

Last synced: 09 Jul 2025

https://github.com/ko-ko-ko/php-assert

Fast flexible php assert

assert php security validation

Last synced: 11 Jan 2026

https://github.com/hackeralert/heavypin

A lightweight HTTPS-based proxy for bypassing firewalls.

censorship circumvention firewall freedom https networking privacy proxy security vpn

Last synced: 17 Jun 2025

https://github.com/orbitale/permissionsbundle

Use expression based permissions instead of roles or voters to simplify your security in Symfony. Feel free to contribute ! :+1: Project was initiated after this discussion: https://github.com/symfony/symfony/issues/21029

bundle permissions security symfony symfony-bundle

Last synced: 13 Apr 2025

https://github.com/frozenassassine/easepass

A powerful but simple, password manager that stores all your passwords locally and offline. Written in C# WinUI3

2fa-client 2factor app csharp password password-manager passwordmanager security totp windows winui3

Last synced: 23 Aug 2025

https://github.com/MindPatch/pmg

Extract parameters/paths from urls

bugbounty bugbounty-tool bughunting python regex security

Last synced: 11 Jul 2025

https://github.com/dutchcoders/identify

Identify web application versions

fingerprint security

Last synced: 11 Apr 2025

https://github.com/mohammad-taheri1/youtube-jwtauthaspnet7webapi

In this repository, we implement authentication and authorization using JWT in a new Asp.NET 7 WebAPI project.

asp-net-core jwt security webapi

Last synced: 11 Jul 2025

https://github.com/agent-receipts/obsigna

Agent Receipts โ€” cryptographically signed audit trails for AI agent actions. Protocol spec, SDKs (Go, TypeScript, Python), and MCP proxy.

agent-receipts ai ai-agents audit cryptography ed25519 golang mcp model-context-protocol python receipts security typescript verifiable-credentials w3c-vc

Last synced: 12 Jun 2026

https://github.com/monish-khatri/security-headers

Package provides a minimal and simple integration to attach OWASP security headers for building a secure Laravel application.

composer-package laravel owasp-top-10 php8 security security-headers

Last synced: 10 Apr 2025