An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/tpeczek/demo.aspnetcore.security

Demo project for demonstrating functionality of Lib.AspNetCore.Security

asp-net-core csp security

Last synced: 14 Feb 2026

https://github.com/tokido-io/tokido-core

Production-grade MFA toolkit for Java. TOTP, recovery codes, extensible factors. GraalVM native-image ready.

authentication graalvm java mfa security totp two-factor

Last synced: 28 Apr 2026

https://github.com/tijme/grand-theft-filezilla

A tiny cross-platform Python script that steals saved & cached FileZilla credentials.

credentials file-transfer filezilla login passwords security stealing

Last synced: 15 Oct 2025

https://github.com/parsiya/parsiya.fa

Source for my Farsi blog.

hugo personal-blog security

Last synced: 10 May 2026

https://github.com/c0nw0nk/javascript-block-proxy

Simple method to block proxies using javascript

blocking html javascript proxies proxy security

Last synced: 24 Jun 2026

https://github.com/tsautier/RoXX

RoXX (Radius Open eXtensible eXchange). Modern Python-based RADIUS Authentication Proxy for Linux (Docker/Systemd). Supports TOTP, Azure AD, LDAP & inWebo.

authentication azure-ad docker freeradius linux mfa python radius security totp

Last synced: 30 Jan 2026

https://github.com/vatshayan/final-year-diffie-hellman-key-algorithm-project

Diffie–Hellman Key Exchange Method (hereafter called the D-H method) allows two parties agree upon a shared secret number, a symmetric key, over an insecure communications channel

btech btechproject communication diffie-hellman diffie-hellman-algorithm diffie-hellman-key project security semester semproject

Last synced: 15 Oct 2025

https://github.com/daikon-cqrs/security-interop

Authentication, authorization, & ACL components for Daikon-CQRS projects.

acl authentication authorization interop security user

Last synced: 24 Feb 2026

https://github.com/gowww/crypto

⛓ Encryption and hashing utilities

aes aes-128 anonymity cipher encoding encryption go golang helper secure security

Last synced: 01 Mar 2026

https://github.com/ixunio/superjwt

A modern implementation of JSON Web Token (JWT) for Python. With powerful Pydantic validation features.

jwt pydantic python security

Last synced: 29 Jan 2026

https://github.com/mablanco/docker-metabigor

Docker image for Metabigor, an Intelligence Framework to do OSINT tasks without any API key

docker pentesting security

Last synced: 02 Jun 2026

https://github.com/raunplaymore/sentinel

Sentinel watches what your AI agents actually do — file access, network calls, risky commands — and alerts you when something looks wrong.

ai-agents macos monitoring security

Last synced: 04 May 2026

https://github.com/shahradelahi/timing-safe-compare

🔐 Isomorphic constant-time string and buffer comparison to prevent timing attacks.

browser constant-time cryptography isomorphic nodejs security timing-attack

Last synced: 03 Apr 2026

https://github.com/agenthackeryt/advance-discord-verification-bot

Simple yet advance discord verification bot with slash command

discord-bot discord-js security verification-bot

Last synced: 16 Mar 2026

https://github.com/jonzeolla/lab-softwaredefinedradio

A security-focused SDR lab

lab sdr security

Last synced: 27 Apr 2026

https://github.com/nunenuh/defense-kit

Defensive security toolkit — scan, harden, and monitor your OS, code, repos, and infrastructure. Claude Code skill.

claude-code defense docker gitleaks hardening lynis sast sca security semgrep trivy

Last synced: 04 Apr 2026

https://github.com/e107inc/twofactorauth

Two-Factor Authenthication (2FA) for e107

2fa e107 plugin security two-factor-auth twofactorauth

Last synced: 24 Oct 2025

https://github.com/sarvsav/devsecops-with-docker-and-k8s

This repository will contain the material for training course on devsecops with docker 🐳 and k8s ☸️

devops docker golang k8s kubernetes security

Last synced: 04 May 2026

https://github.com/sagargupta16/agent-recipes

Copy-paste AI agent workflows for real-world developer tasks — code review, testing, migrations, and more

ai-agents ai-workflows claude-code code-review cursor developer-tools devops prompts security testing

Last synced: 03 May 2026

https://github.com/moolen/neuwerk

🛡️ cloud-native eBPF network egress firewall

cloud-native ebpf firewall kubernetes security

Last synced: 27 Jan 2026

https://github.com/smouj/captcha-shield

CAPTCHA Shield v3.0 - Advanced Anti-Bot/AI CAPTCHA with 14 behavioral signals, 7 challenge types, QR mobile verification. 100% client-side.

anti-ai anti-bot behavioral-analysis bot-detection canvas captcha framer-motion human-verification nextjs prisma react security shadcn-ui tailwindcss typescript

Last synced: 12 Jun 2026

https://github.com/muchiny/mcp-ssh-bridge

MCP server for secure SSH remote management — 337 tools across 74 groups for DevOps, Docker, Kubernetes, databases, systemd, Windows, cloud, compliance & more. Built in Rust.

ai-tools air-gapped automation claude claude-code compliance devops docker infrastructure kubernetes mcp mcp-server model-context-protocol monitoring multi-protocol remote-management rust security ssh windows

Last synced: 26 Apr 2026

https://github.com/jp1337/easywall

Easy-to-use web interface for nftables firewall management on Linux — written in Go

debian easy-to-use firewall go golang linux nftables security self-hosted webinterface

Last synced: 26 Apr 2026

https://github.com/quenchworks/charts

Clean-room Helm charts for the QuenchWorks catalog: each pinned to a signed, 0-CVE image digest, published as OCI to GHCR and listed on ArtifactHub.

artifacthub cosign devsecops digest-pinned hardened helm helm-charts k8s kubernetes oci security sigstore

Last synced: 22 Jun 2026

https://github.com/alessiomaffeis/scanx

ScanX (Scanner for OS X) is a Cocoa framework for automating static analysis and evaluation workflows

analysis assessment automated-analysis evaluation framework macos scanning security

Last synced: 03 May 2026

https://github.com/sharember/javayoushouldknow

some knowledge for java. include jdk, jvm, spring,juc and so on

java security spring springboot

Last synced: 02 May 2026

https://github.com/ctkqiang/sqlfang

🚀 SQLFang 是一款用 Erlang 实现的轻量级 SQL 注入检测工具,专注于快速扫描网页参数,探测潜在的注入风险和数据库类型。适合想用 Erlang 玩安全检测的你,稳、准、狠。

china chinese ctkqiang erlang security sql sqlfang sqlinjection

Last synced: 02 Mar 2026

https://github.com/hubtou/pysec2vuxml

Mass checking FreeBSD Python packages ports for PYSEC vulnerabilities and reporting in FreeBSD VuXML

freebsd freebsd-ports package-management python python-script security security-automation

Last synced: 13 Oct 2025

https://github.com/arumes31/blocklist

Hardened Go-based IP Blocklist manager with GeoIP (ASN/Country), real-time WebSocket dashboard, RBAC, and automated webhooks.

blocklist docker-hardened firewall-automation geoip golang prometheus rbac security websockets

Last synced: 12 Jun 2026

https://github.com/pirate-emperor/enigma

Enigma is a Java-based cryptographic system that integrates symmetric (AES, DES, Blowfish), asymmetric (Diffie-Hellman, RSA, DSA), and hashing algorithms (MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512). It ensures data confidentiality, integrity, and authentication with modern cryptographic standards.

aes asymmetric-algorithm authentication blowfish cryptography data-integrity diffie-hellman encryption encryption-decryption enigma hashing java md5 rsa security sha-256 symmetric-algorithms

Last synced: 27 Jan 2026

https://github.com/mpdenisov/laravel_admin_module

Rhinoda Admin Module. Role management and creating CRUD controllers

admin-panel auth crud laravel-5-package laravel-framework permissions security

Last synced: 12 Feb 2026

https://github.com/protdos/zyphor

Zyphor: A quantum-safe, fully anonymous chat protocol ensuring complete security and metadata protection.

anonymity chat cryptography e2ee encryption messaging metadata perfect-forward-secrecy post-quantum-cryptography privacy protocol security zero-knowledge zero-trust

Last synced: 02 Mar 2026

https://github.com/abdellatif-temsamani/cryptjs

`cryptjs` is a JavaScript/TypeScript library that brings cryptographic functionality from Dart to the web

crypt-lib cryptography hash javascript password-hashing security sha-256 sha-512 sha512 typescript

Last synced: 22 Jan 2026

https://github.com/hobbyquaker/passwd-file

Node.js Password File CLI Tool and Lib :closed_lock_with_key:

cli cryptography file hash login nodejs password pbkdf2 salt security sha512

Last synced: 24 Apr 2026

https://github.com/seisollc/windows-sandbox

A very simple windows-based sandbox

experiments sandbox security seiso windows windows-sandbox

Last synced: 01 May 2026

https://github.com/ashlrai/binshield

Snyk for binaries. Ghidra-backed decompile + AI classification + YARA for npm supply-chain threats. MIT.

ai ghidra malware-detection npm security supply-chain yara

Last synced: 21 Jun 2026

https://github.com/ishanoshada/spiral-cipher

A spiral cipher implementation for text encryption and decryption

cipher crypto cryptography encryption pypi python security spiral spiral-cipher

Last synced: 18 Feb 2026

https://github.com/barestripehq/primer

Pre-install security interceptor for package managers.

cve mcp osv package-manager sbom scanner security vulnerability

Last synced: 01 Jun 2026

https://github.com/target/strelka-docs

Autodocumentation for the Strelka System

cfc detection mkdocs mkdocs-material security target-cfc

Last synced: 28 Feb 2026

https://github.com/innosoft-company/innocaptcha

A professional, pluggable CAPTCHA library with image, math, and custom challenge types, token-based security, and multiple storage backends.

bot-protection captcha innocaptcha math-captcha security text-captcha

Last synced: 17 Apr 2026

https://github.com/azure/aks-secure-tls-bootstrap

Holds the client implementation and proto definitions of the AKS Secure TLS Bootstrapping protocol.

aks azure k8s security tls

Last synced: 20 Oct 2025

https://github.com/circle-rd/upki-ca

A small PKI dedicated to be used in internal infrastructures and Docker deployment using Traefik

certificate certificates docker mcp mcp-server openssl pki python security traefik

Last synced: 23 Apr 2026

https://github.com/ntdls/talkster

Secure chat instant messaging server and client, offering multi-layered peer-to-peer encryption.

communication cryptography privacy security

Last synced: 21 Apr 2026

https://github.com/jahlives/openssl_encrypt

Post-quantum hybrid encryption with chained KDF architecture. Supports ML-KEM, Kyber, Argon2, Balloon, RandomX. CLI + GUI included.

cryptography encryption hash-chaining kdf-chaining post-quantum python security steganography

Last synced: 01 Apr 2026

https://github.com/seeden/granter

Composable, type-safe authorization for TypeScript. ⭐️ Star to support my work

abac access-control async authorization authz better-auth express permissions rbac security typescript

Last synced: 14 Oct 2025

https://github.com/pradumnasaraf/soss-scout-demo

The repository demonstrates the use of Docker Scout in a CI/CD pipeline to examine vulnerabilities in container images. This demo was presented at Secure Open Source Software (SOSS) Community Days India 2024.

container-security docker docker-scout image-security security

Last synced: 19 Feb 2026

https://github.com/rajtilak-2020/stegoweb

StegoWeb is a web-based tool to hide secret messages inside images using client-side steganography. It uses the LSB (Least Significant Bit) technique to encode and decode text without uploading files to a server.

cybersecurity privacy security steganography webdevelopment

Last synced: 14 Oct 2025

https://github.com/matanryngler/deployshield

Claude Code plugin — production safety guardrails that block write/mutating operations on cloud, database, IaC, and deployment CLIs

aws claude-code claude-code-plugin cloud-safety guardrails kubernetes security terraform

Last synced: 17 Feb 2026

https://github.com/turbot/flowpipe-mod-reallyfreegeoip

Really Free Geo IP pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Really Free Geo IP to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code orchestration pipelines reallyfreegeoip security workflow workflow-automation workflow-engine

Last synced: 02 Feb 2026

https://github.com/turbot/flowpipe-mod-gcp

GCP pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect GCP to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod gcloud gcloud-cli gcp hacktoberfest integrations low-code orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 25 Feb 2026

https://github.com/sydseter/dungeons-and-daemons

This repository contains OWASP Dungeons & Daemons a collection of LRP games. It's purpose is to promote security awareness and OWASP Cornucopia

appsec gamification security

Last synced: 01 Feb 2026

https://github.com/tinywaf/tinywaf

The self-hosted lightweight Web Application Firewall

firewall go security self-hosted waf

Last synced: 24 Feb 2026

https://github.com/tldr-it-stepankutaj/openvpn-client

A Go-based client for integrating OpenVPN server with OpenVPN Manager API

client golang openvpn openvpn-management openvpn-server security

Last synced: 15 Feb 2026

https://github.com/sezaakgun/yolonot

Smart auto-mode for Claude Code. The safe alternative to --dangerously-skip-permissions.

claude-code cli developer-tools go llm security

Last synced: 07 May 2026

https://github.com/riklewis/better-passwords

Stop use of a bad passwords, including those in the Have I Been Pwned breached password database

pwned-passwords security wordpress wordpress-plugin

Last synced: 13 May 2026

https://github.com/noahbass/iwars-data-spring-2020

Raw time series data collected from the iWars Spring 2020 Contest

data-science jupyter-notebook pandas plotly-python security security-vulnerability

Last synced: 15 Apr 2026

https://github.com/0xyg3n/claude-c2

AI-Powered Command & Control Framework using Claude's Model Context Protocol (MCP)

c2 claude command-and-control implant mcp offensive-security penetration-testing rat red-team security

Last synced: 16 Apr 2026

https://github.com/aws-security-ug-argentina/public

Repositorio para compartir información con la comunidad

aws cloud security

Last synced: 27 Jan 2026

https://github.com/viadee/deichefuerdieinseln

Companion repo for an upcoming articel on microservice security

java notes oauth oauth2 security

Last synced: 28 Feb 2026

https://github.com/csharper63/pihole_dnscrypt_config

This repository contains a working docker configuration for pihole and dnscrypt that support DoH.

dns-over-https dnscrypt pihole pihole-dnscrypt pihole-over-doh pihole-over-https privacy security

Last synced: 11 Feb 2026

https://github.com/ppiankov/pastewatch

Detects and obfuscates sensitive data before it reaches AI systems — clipboard, CLI, and MCP server

ancc cli macos mcp obfuscation pre-commit-hook sarif secret-detection security sensitive-data swift

Last synced: 02 Apr 2026

https://github.com/wzrdtales/secure-passwords

An authtentication strategy that finally stops exposing user passwords on the wire.

password secure-password security

Last synced: 31 Jan 2026

https://github.com/satanaelcode/pyssword

A simple Password Generator based on Python.

password python security

Last synced: 17 Apr 2025

https://github.com/01tek/npm-security-score

World-class security standard for npm packages. Automated threat detection, supply chain analysis, and 0-100 security scores. Because in 2025, we can do better than the Wild West

ci-cd devsecops npm package-security security security-tools supply-chain vulnerability-scanner

Last synced: 13 Jan 2026

https://github.com/rahadbhuiya/cnsl

Intent-driven security correlation for Linux servers. Detects coordinated attacks across SSH, web, and database logs — catches what Fail2ban misses.

brute-force cybersecurity fail2ban-alternative honeypot ids intrusion-detection linux python security self-hosted siem ssh

Last synced: 26 May 2026

https://github.com/reoring/botbox

Kubernetes sidecar that sandboxes container egress. Deny-by-default allowlist + automatic credential injection via iptables — no proxy config needed. Built for confining AI agents.

ai-agents clawdbot kubernetes moltbot openclaw sandbox security

Last synced: 26 May 2026

https://github.com/mmartinez/postern

Credential-brokering HTTPS proxy for AI agents — brokers 1Password & Bitwarden secrets at request time, so agents call authenticated APIs without ever holding the credentials.

1password ai-agents bitwarden credential-management devsecops forward-proxy golang llm prompt-injection proxy secrets-management security

Last synced: 13 Jun 2026

https://github.com/0x48piraj/collider-ng

Collider-ng: A simple, fast tool for hash collisions and exploitation, featuring a built-in hash identifier, ideal for CTFs and pentesting.

ctf ctf-tools exploitation hacking hash hash-collision hash-functions hash-identification hashing infosec pentesting security security-tools

Last synced: 04 Jan 2026

https://github.com/maruki00/gofd

gofd is a command-line utility written in Go for securely deleting files and directories

cli files golang security

Last synced: 29 Jun 2026

https://github.com/jjlibra/badusb

badUSB learning.

security usb-devices

Last synced: 04 Jan 2026

https://github.com/NeuraLegion/sectester-net

SecTester is a new tool that integrates our enterprise-grade scan engine directly into your unit tests.

appsec brightsec c-sharp e2e pentesting qa security test testing

Last synced: 16 Nov 2025

https://github.com/nlqthinh/vigision-nvr

Vigision is our capstone project, developed as an innovative Network Video Recorder (NVR) and AI Computer Vision software. It transforms traditional home camera systems into proactive guardians by leveraging advanced Deep Learning technologies for features like object detection, pose estimation, and intelligent motion alerts.

camera deep-learning docker nvr object-detection pose-estimation python realtime security

Last synced: 13 May 2025

https://github.com/hpgrahsl/rhd-csflc-kafka-connect-demos

Demo Scenarios discussed in my Red Hat Developers article series

apachekafka cryptography encryption-decryption kafka kafka-connect security

Last synced: 18 Feb 2026

https://github.com/volkansah/x201-batconsole

🔧 Turn an old Lenovo X201 into a full-featured, hardened, AI-ready home server — or use it as a deep server guide for your $20,000 rig. This isn’t just a setup – it’s a statement for real devs, tinkerers & privacy freaks. 🦇

ai apache2 darknet development do-it-yourself guide hardening hidden-services how-to how-to-setup huggingface lamp pandas security security-tools server tor torch ubuntu-server wifi

Last synced: 31 Aug 2025

https://github.com/maxpat78/cryptopad

A simple Notepad supporting ZIP AES-256 encrypted documents, coded in Python

aes cryptography encryption notepad security text-editor zip zipfile

Last synced: 12 Apr 2025

https://github.com/escan-dnmz/basic-portscanner

You can port scanning and find server ip address with this tool

ipscan ipscanner portscan portscanner python security security-tools

Last synced: 18 Mar 2025

https://github.com/parzibyte/cifrar-descifrar-archivos-php

Cifrado de archivos completos con PHP y php-encryption

decrypt decrypt-file encrypt encrypt-file php php-encryption php-files security

Last synced: 12 May 2025

https://github.com/dnv-opensource/asva

Elegant interface for displaying ASVA JSON files

asvs owasp security

Last synced: 25 Jul 2025

https://github.com/callumbwhyte/secret-store

Securely manage and store secrets in the Umbraco backoffice

dotnet secrets security umbraco

Last synced: 08 Jul 2025

https://github.com/er28-0652/py-invoke-obfuscation

Python implementation of (just a part of) Invoke-Obfuscation for PowerShell

obfuscation powershell python3 redteam security

Last synced: 18 May 2026

https://github.com/the-viper-one/invoke-powerstrings

Extract strings from binary files with PowerShell

powershell security strings windows

Last synced: 18 May 2026

https://github.com/pirate-emperor/cipherx

CipherX is a verification project for Advanced Encryption Standard (AES-128) using Universal Verification Methodology (UVM). It leverages Verilog, SystemVerilog, and Python to ensure robust encryption algorithm validation, integrating comprehensive UVM components and tests.

aes-128 cryptography cryptography-algorithms dataencryption dataencryptionstandards digitaldesign encrytption hardwareverification python security testing-framework uvm verification verilog

Last synced: 26 Jan 2026

https://github.com/practicalparticle/particle-core

**EXPERIMENTAL SOFTWARE** The particle-core GitHub repository houses the MultiPhaseSecureOperation library and Guardian Account Abstraction implementation, which together offer a novel approach to blockchain security by decoupling asset authority and introducing time-delayed operations.

account-abstraction blockchain cryptography ethereum meta-transactions role-based-access-control security smart-contracts solidity timelock typescript

Last synced: 23 Mar 2025

https://github.com/dreadnode/capabilities

Public source of the Dreadnode capabilities in app.dreadnode.io — agents, tools, skills, MCP servers, and workers.

agents ai-agents capabilities dreadnode mcp security skills

Last synced: 25 May 2026