An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/alanvivona/microservices

Go Rest API with Google Auth + Nginx reverse proxy + Mysql

docker gdrive golang microservices mysql nginx security

Last synced: 03 Aug 2025

https://github.com/hahwul/buildpack-zap-daemon

zap(zed attack proxy) daemon mode buildpack of heroku

bugbounty hacking heroku-buildpack security zap

Last synced: 19 Apr 2025

https://github.com/codingchili/sidechannel-timing-tool

Small tool for measuring system latency during string comparison.

network proof-of-concept security side-channel

Last synced: 06 Apr 2025

https://github.com/jakejarvis/careful-downloader

🕵️‍♀️ Downloads a file and its checksums, validates the hash, and optionally extracts it if safe.

checksum download extract file hash javascript npm security

Last synced: 03 Jul 2025

https://github.com/bilal-belli/dictionarywifiattacktool

This repository presents a simple Python program for testing a large number of passwords (dictionary) to connect to a WiFi network.

dictionary-attack python security security-tools wifi-hacking wifi-security

Last synced: 19 Apr 2025

https://github.com/circl/odfcleaner

Python module to cleanup ODF files.

cleanup-odf-files odf odfcleaner security

Last synced: 07 Mar 2026

https://github.com/jonzeolla/lab-internetofinsecurity

An introductory lab to IOT device security.

information-security infosec iot iot-security lab security

Last synced: 09 Mar 2026

https://github.com/php-casbin/medoo-adapter

Medoo Adapter for PHP-Casbin, Casbin is a powerful and efficient open-source access control library.

abac access-control acl casbin medoo permissions rbac restful security

Last synced: 12 May 2025

https://github.com/jonzeolla/lab-securitydataanalysis

An introductory lab to Security Data Analysis (using Apache Metron (incubating)).

apache-metron data-analysis lab metron security

Last synced: 03 Jul 2025

https://github.com/turbot/flowpipe-mod-azure

Azure pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Azure to the people, systems and data that matters.

automation azure azure-cli cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 22 Jun 2025

https://github.com/rgrannell1/polonium

stateless password manager.

command-line password security stateless

Last synced: 07 May 2025

https://github.com/dalibo/selinux-pgsql-pgdg

SELinux policy module for PGDG rpms

postgresql security security-hardening selinux-policy

Last synced: 13 Apr 2025

https://github.com/iitis/autopolicy

Autopolicy proof of concept

ddos firewall iot security

Last synced: 19 Apr 2025

https://github.com/gunjan5/shift-left-security

Shift Left ⬅️ (Preventive) Security 🔐 for Containers/Kubernetes 📦

ci ci-cd cloud containers devops kubernetes security security-tools

Last synced: 17 Aug 2025

https://github.com/vdlp/oc-hashids-plugin

Allows developers to use secure hashed ID's in October CMS powered websites.

hashids hashing laravel october-cms octobercms octobercms-plugin php security

Last synced: 12 Apr 2025

https://github.com/ph-7/honeypots

:honeybee: Examples of Honeypots to create the fake admin panels :honey_pot: This honeypot can help to understand and improve the security problems of your website or web app. There is an example of fake admin area for standalone and another honeypot fake admin login page for Joomla! CMS

admin fake fake-admin-panel honeypot honeypot-fake-admin joomla security

Last synced: 13 May 2025

https://github.com/wultra/powerauth-admin

This reporitory was moved to https://github.com/wultra/powerauth-server repository

administration authentication mobile-security security

Last synced: 11 Jul 2025

https://github.com/Popsiclestick/falco-filebeat-daemonset

Easily deployable daemonset which moves logs from falco with filebeat.

containers daemonset falco filebeat kubernetes security

Last synced: 12 May 2025

https://github.com/shinjitsue/ctfd_carsu-ctf

Customized deployment of CTFd for our CTF challenge. Built on the open-source CTFd platform, this project provides an interactive and competitive environment for cybersecurity enthusiasts to test their skills.

ctf ctfd ctfd-theme cybersecurity docker education flask hacking mariadb nginx python redis security

Last synced: 06 May 2025

https://github.com/silbermm/genex_remote

Companion project to Genex

elixir-lang secrets security

Last synced: 08 Mar 2026

https://github.com/sysdiglabs/dockerfile-benchmarker

CIS Docker Benchmark for dockerfiles

cis docker dockerfile image security

Last synced: 09 Aug 2025

https://github.com/guardicode/centra-py-client

A Python client for Guardicore Centra API access.

firewall python security segmentation

Last synced: 16 Jan 2026

https://github.com/clj-holmes/clj-holmes-action

Action to execute clj-holmes in Clojure/Clojurescript projects.

clojure code-scanning sast security

Last synced: 03 Jul 2026

https://github.com/biffalo/bettersecdefaults

An interactive powershell script for Azure/Entra. Creates a set of conditional access policies that will provide improved security over Microsoft's "Security Defaults". This script is primarily for less mature orgs that are perhaps still using Microsofts "Security Defaults" or only have very basic conditional access policies in place.

azure conditional-access entra-id identity-management powershell security

Last synced: 10 Apr 2025

https://github.com/andrea11/openv

openv a tool to automatically load secrets from .env files using 1password CLI under the hood

1password secrets security

Last synced: 08 Aug 2025

https://github.com/the-viper-one/invoke-vncauth

PowerShell script to enumerate for and identify VNC servers that do not require authentication. Supports Active Directory target acquisition and CIDR notations.

hacking powershell security vnc

Last synced: 16 Mar 2026

https://github.com/gqzdev/spring-boot-start

🍀🍀🍀逐步入门Spring Boot的使用,😊集成各种应用模块组件

activemq docker dubbo elasticsearch mybatis mybatis-plus rabbitmq redis schedule security spring-boot websocket zookeeper

Last synced: 08 May 2025

https://github.com/4m3rr0r/mac-changerpro

This is a bash script that can change the MAC address of either the eth0 or wlan0 network interface.

bash mac-address-changer mac-address-generator mac-cangerpro macaddress macchanger security

Last synced: 11 Apr 2025

https://github.com/thomas-dev7/finwallet

finWallet é uma aplicação fullstack desenvolvida com Laravel para gestão financeira pessoal. Inclui funcionalidades de cadastro, autenticação, depósitos, transferências e histórico de transações, com foco em segurança, validações e código limpo.

alpinejs breeze challenge cripto css deployment framework fullstack laravel mobile mysql php responsive-design security tailwindcss wallet

Last synced: 07 Mar 2026

https://github.com/fadhilthomas/nuclei-reporter

run summary report of nuclei findings

dast golang security

Last synced: 10 Mar 2026

https://github.com/BansheeTech/AgnosticWipe

AgnosticWipe is a utility function that safely removes all child nodes of a given DOM element, avoiding the use of innerHTML to clear content. It includes configurable debugging capabilities (log and warn), similar to other Agnostic modules, to assist with troubleshooting during development.

agnostic-wipe agnosticwipe clean dom dom-manipulation firstchild innerhtml javascript removechild security targetselector vanilla-javascript vanilla-js wipe xss

Last synced: 11 May 2025

https://github.com/staticdev/ansible-role-brave

Ansible role to install Brave browser.

ansible brave browser internet playbook privacy secure security

Last synced: 21 Jul 2025

https://github.com/isovalent/cilium-up-and-running

This repository contains manifests, scripts, and configurations referenced in the O'Reilly book Cilium Up and Running. These resources are intended to help readers experiment with Cilium features, reproduce demonstrations, and deepen their understanding of Kubernetes networking, security, and observability.

cilium ebpf kubernetes networking observability security

Last synced: 17 Jul 2025

https://github.com/meinto/anonymous-api-auth-provider

Prevent unauthorised access of public endpoints by for example bots or bad clients.

auth authorization public-api security session-token

Last synced: 29 Mar 2025

https://github.com/yowainwright/intrinsic-dependencies

a simple utility ensuring invisible but required node dependencies aren't removed

ci dependencies performance security

Last synced: 22 Apr 2025

https://github.com/ractstudio/essential-wp-tools

Essential WP Tools is an all-in-one solution for optimizing, securing, and enhancing your WordPress website. With a comprehensive suite of features, this plugin empowers website owners to streamline their site management, boost performance, and fortify security effortlessly. Project website: https://ewpt.ractstudio.com/

ad adsense essential essential-wp-tools ewpt perfromance security seo share tools wordpress wordpress-plugin wp

Last synced: 29 May 2026

https://github.com/yhs0602/android-capstone-example

Example of capstone disassrmbly engine java bindings on android, using jna.

android capstone example-project java java-native-access jna reverse-engineering security tool tutorial

Last synced: 18 May 2026

https://github.com/nozaq/terraform-aws-parked-domain-baseline

A terraform module to set up DNS records to harden the parked(unused) domain using AWS Route53.

aws devops dns domain email-security hardening security security-hardening terraform terraform-module

Last synced: 17 Jul 2025

https://github.com/Zeerg/modsecurity-layer

A ModSecurity Lambda Layer for AWS

aws lambda modsecurity security serverless-framework

Last synced: 31 Mar 2025

https://github.com/mugomes/miantivirus

MiAntivirus is a graphical interface for ClamAV that allows you to scan your computer for viruses and easily update the virus definition database through a user-friendly interface.

antivirus clamav frontend fyne go golang linux security ubuntu

Last synced: 14 Feb 2026

https://github.com/geolffreym/jwtauth

Django JWT auth middleware

api django jwt jwt-authentication python python-3 security

Last synced: 17 May 2026

https://github.com/jonzeolla/lab-smartcontractsecurity

A lab that focuses on smart contract security

ethereum lab security smart-contract

Last synced: 18 Oct 2025

https://github.com/mbrn/dbmixer

A project that mask database columns by several algorithms

data database mask security

Last synced: 19 Jul 2025

https://github.com/mendel5/security

Overview of cyber security topics and links

cybersecurity infosec security

Last synced: 03 Feb 2026

https://github.com/monke443/cve-2023-40028

Arbitrary file read in Ghost-CMS allows an attacker to upload a malicious ZIP file with a symlink.

cve cve-2023-40028 exploit ghost-cms github pentesting security vulnerability

Last synced: 07 May 2025

https://github.com/silinternational/ssp-base

Base Docker image for simpleSAMLphp

hub idp security simplesamlphp

Last synced: 05 Jul 2025

https://github.com/macmod/nsrip

A fast and simple batch DNS resolver for A/AAAA/CNAME records from multiple nameservers.

bug-bounty cloud dns go golang infosec security waf-bypass

Last synced: 15 Mar 2025

https://github.com/eriksjolund/empty-argv-segfault-check

Test if an executable segfaults when started with an empty argv. The script may be used as a vulnerability-scanner to find setuid executables having buggy code (but it will probably not find any direct security vulnerabilities).

security segfault setuid vulnerability-scanners

Last synced: 06 Apr 2025

https://github.com/marcjulian/pyoram

Crypto tool written in python which stores files on a cloud storage and disguises the access of the files

cloud-storage oram privacy python security

Last synced: 31 Mar 2025

https://github.com/faryon93/ocfw

openconnect server firewall script

access firewall openconnect security

Last synced: 26 Jun 2025

https://github.com/bnomei/kirby3-htmlpurifier

Static class method, Uniform-Guard and Field-Method to filter your "dirty" HTML inputs to "clean" HTML.

filter form headless html htmlawed input kirby3 kirby3-cms kirby3-plugin kql kses safe sanitize security striptags submit uniform xss

Last synced: 13 Mar 2025

https://github.com/visible/noro

one-time secret sharing for env vars

cli encryption env env-vars one-time one-time-secret secrets security sharing

Last synced: 29 Jan 2026

https://github.com/ladjs/store-ip-address

Stores a user's IP address in the background for Lad

address ip ipv4 ipv6 koa lad mongoose passport security store

Last synced: 15 Apr 2025

https://github.com/valoran-m/keylogger

it is a keylogger with two different clients one for linux and the other for windows and a server that compiles under linux only

c explain keylogger schema security socket

Last synced: 27 Aug 2025

https://github.com/thefrosty/wp-login-locker

Disable direct access to your sites /wp-login.php script, plus user notifications based on actions.

login-auth packagist php php81 security wordpress wordpress-plugin wp-login

Last synced: 30 Oct 2025

https://github.com/r3li4nt/aescrypter

Encrypt and Decrypt files with Advanced Encryption Standard.

aes aes-128 aes-192 aes-256 aes-encryption cryptography decrypt encrypt linux python security

Last synced: 09 Mar 2026

https://github.com/Otsmane-Ahmed/KEIP

Kernel-Enforced Install-Time Policies (KEIP): An eBPF/LSM based security tool that detects and blocks malicious network activity during pip install.Kernel-Enforced Install-Time Policies (KEIP): An eBPF/LSM based security tool that detects and blocks malicious network activity during pip install

cybersecurity ebpf linux lsm malware-analysis python security supply-chain-security

Last synced: 07 Apr 2026

https://github.com/sug0/git-signify

Harness the power of signify(1) to sign arbitrary git objects

cryptography git openbsd rust security signature signify

Last synced: 07 May 2025

https://github.com/chonkie-inc/littrs

🏖️🛡️ Keep your LLM's 💩 code where it belongs — in a sandbox.

ai-agents bytecode llm pyo3 python rust sandbox security tool-use wasm

Last synced: 10 Mar 2026

https://github.com/dknauss/ai-assisted-docs

Methodology and process documentation for AI-assisted technical writing and review — a practical exploration.

ai ai-assisted-editing bdd-framework behavior-driven-development claude-code-skill documentation editorial security technical-writing wordpress wordpress-security

Last synced: 28 May 2026

https://github.com/bodadotsh/npm-security-best-practices

A list to stay safe from NPM supply chain attacks

deno javascript list nodejs npm pnpm security yarn

Last synced: 27 Sep 2025

https://github.com/jwilk/detsan

determinism sanitizer

fuzzing qa security

Last synced: 08 May 2025

https://github.com/adhit-r/aran

Aran API Sentinel: Your AI-Powered API Security & Governance Platform

ai api cybersecurity ml security

Last synced: 09 Apr 2026

https://github.com/pelock/stringencrypt-vscode-extension

Encrypt and hide plain text strings & file contents within your source code in a secure & encrypted form with the help of a polymorphic engine, generating random-looking decryption code every time.

cryptography encryption file-encryption polymorphic-engine security string-encoding string-encryption string-generator

Last synced: 30 Jul 2025

https://github.com/sap/vs-code-extension-for-project-credential-digger

VS Code extension for project Credential Digger https://github.com/SAP/credential-digger

api-key code-scan credential-digger github-scan github-security password secret secret-scan security

Last synced: 22 Jun 2025

https://github.com/grapheneos-archive/kernel_google_crosshatch_techpack_audio

Pixel 3, Pixel 3 XL, Pixel 3a and Pixel 3a XL audio driver sources.

android grapheneos security

Last synced: 04 Oct 2025

https://github.com/kicksecure/apparmor-profile-thunderbird

AppArmor profile for Thunderbird - https://www.kicksecure.com/wiki/AppArmor - for better security (hardening).

apparmor debian security thunderbird

Last synced: 19 Apr 2025

https://github.com/usk6666/yorishiro-proxy

AI-native MITM proxy — MCP server for traffic interception, recording & replay

mcp-server mitm-proxy penetration-testing proxy security vulnerability-assessment

Last synced: 23 May 2026

https://github.com/jfagoagas/kms-helper

Tool to encrypt/decrypt using AWS KMS with ease

aws hacktoberfest kms security

Last synced: 17 May 2026

https://github.com/ladjs/mongoose-omit-common-fields

Array of common fields to emit for Mongoose toObject/toJSON (helpful for security)

common fields helper koa lad mongo mongodb mongoose omit security select

Last synced: 15 Apr 2025

https://github.com/ludo-technologies/codescan

Scan any GitHub repo for security issues — risky code, exposed keys, outdated packages

dependency-scanning devsecops gitleaks golang nextjs sast secrets-detection security security-tools semgrep static-analysis trivy

Last synced: 03 Jul 2026

https://github.com/logicalhacking/securebpmn

SecureBPMN is a domain-specific modeling language that allows to model security aspects (e.g., access control, separation of duty, confidentiality).

analysis bpmn compliance modelling modelling-framework project securebpmn security

Last synced: 10 May 2025

https://github.com/pgilad/security-keys-ftw

My list of congrats and call-outs for services supporting (or not) security keys

2fa security security-key yubikey

Last synced: 11 Jan 2026

https://github.com/instantwebp2p/scoap

Securing COAP with UDP without DTLS

coap iot mqtt security

Last synced: 10 Jun 2025