Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/grapheneos-archive/device_google_bonito-sepolicy

Pixel 3a and Pixel 3a XL SELinux policy extensions.

android grapheneos security

Last synced: 11 Jan 2026

https://github.com/eclipse-theia/security-audit

Automated Security Audit for Theia framework dependencies

audit eclipse-theia security theia theia-ide

Last synced: 11 Apr 2025

https://github.com/mfreeman451/trivy-streamlit

A streamlit-based app for trivy scanner results 🔒

k8s scanner security streamlit-application trivy

Last synced: 23 Oct 2025

https://github.com/illdefined/sensitive

Simple Rust memory allocator for sensitive information

memory-allocator security

Last synced: 13 Apr 2025

https://github.com/volkansah/ransy-edu

This JavaScript code provides a simplified example of a ransomware attack and its underlying techniques. It is intended for educational and ethical hacking purposes only, and should not be used for any illegal or unethical activities. It is important to always abide by the law and use technology responsibly and ethically to promote positive outcome

cybersecurity-education example-code malware offensive-security ransomeware-javascript ransomware ransomware-detection ransomware-prevention ransomware-source-code ransomware-summary redteam-tools security security-tools

Last synced: 02 Sep 2025

https://github.com/mitre/chef-stig-windows-server-2016-v1r4-hardening

(WIP) chef recipe to harden a Windows 2016 server to the DISA STIGs

chef hardening inspec mitre-corporation security windows windows-2016

Last synced: 12 Jul 2025

https://github.com/cerbos/demo-python

Demo of using Cerbos with Python to check access to a holiday request system.

access-control cerbos policy python security

Last synced: 12 Apr 2025

https://github.com/abdullahkhawer/find-and-report-secrets-in-code

Security solution to find secrets in a git repository and report about them. It uses Gitleaks and some custom scripts to generate a JSON report for secrets found with only relevant information along with commit ids and commit authors. It can be used to update an Atlassian Confluence page and send an alert on Slack based on the findings.

atlassian-confluence bash confluence docker git github github-actions gitlab gitlab-ci gitleaks json linux macos python python3 secrets secrets-detection security shell slack

Last synced: 29 Oct 2025

https://github.com/l4rm4nd/invoke-cis-benchmark-iis10

PowerShell Script to Automate CIS Benchmark Auditing for Microsoft IIS 10

auditing benchmark cis cis-benchmark controls hardening iis iis-server microsoft powershell security

Last synced: 01 Sep 2025

https://github.com/JerryLinLinLin/Huorong-HIPS-Rule-Schema

The project includes two json schemas of Huorong Host-based Intrusion Prevention System (HIPS) custom rule files (json). They can be used to validate Huorong HIPS rules and speed up editing.

anti-malware antivirus antivirus-software hips huorong security security-tools

Last synced: 11 Jul 2025

https://github.com/thetallprogrammer/password-manager

Falkenberg's Password Manager is a secure, offline tool for managing and storing passwords locally. With strong encryption and customizable password generation, it ensures your data remains private and protected.

cpp cyber-security cybersecurity data-encryption gui-application local-storage offline-password-manager password-generator password-generator-cpp password-management password-manager password-security privacy qt qtcreator security software-security

Last synced: 29 Oct 2025

https://github.com/sami-bre/botnet

A botnet, hacking tool allowing a hacker to control multiple zombie computers from a central command script

botnet flask hacking python security sqlite3 terminal-based zombies

Last synced: 10 Apr 2025

https://github.com/turbot/flowpipe-mod-azure

Azure pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Azure to the people, systems and data that matters.

automation azure azure-cli cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 22 Jun 2025

https://github.com/paloaltonetworks/aws-traffic-mirroring

Detect and respond to attacks in AWS by sending packets to VM-Series without putting the firewall inline

aws mirroring paloaltonetworks prisma security span traffic visibility vm-series vpc vtap

Last synced: 03 May 2025

https://github.com/chizhg/secureim

A secure Instant Message System.

python security socket

Last synced: 04 Apr 2025

https://github.com/xxczaki/ing-autofill

[Works in 2024] Make password managers autofill work on the ING bank's website.

1password autofill bitwarden browser-extension chrome chrome-extension ing ing-bank masked-password password-manager security

Last synced: 11 Apr 2025

https://github.com/kevcui/password-meter

:lock_with_ink_pen: A password meter evaluates the strength of passwords

password password-meter password-safety password-strength security security-tools

Last synced: 12 Apr 2025

https://github.com/turbot/steampipe-mod-oci-compliance

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS across all of your Oracle Cloud Infrastructure accounts using Powerpipe and Steampipe.

cis cis-benchmark compliance hacktoberfest oci oracle-cloud oracle-cloud-infrastructure powerpipe powerpipe-mod security sql steampipe steampipe-mod

Last synced: 06 Mar 2026

https://github.com/f5devcentral/f5-agility-labs-ddos

F5 Agility Labs for Distributed Denial of Service Protection Use Cases

ddos-protection documentation f5-afm f5-agility-labs f5-asm f5-ltm security training-labs

Last synced: 11 Apr 2025

https://github.com/anderseknert/opa-sign-verify

Demo of OPA bundle signature creation and verification

bundle-signing bundle-verification bundles opa open-policy-agent security

Last synced: 07 Sep 2025

https://github.com/firehed/jwt

JSON Web Tokens for PHP

jwt php php-jwt php-security security

Last synced: 13 Jul 2025

https://github.com/makenowjust-labs/memo-regex

ReDoS-less Regex Implementation Using Memoization

redos regex regexp security

Last synced: 10 Apr 2025

https://github.com/trishankatdatadog/tuf-on-a-plane

Allegedly, a minimal, Pythonic TUF client can be written on a long flight. This was written after that flight, but hey, it's a shot.

security tuf updates

Last synced: 14 Apr 2025

https://github.com/guardicode/centra-py-client

A Python client for Guardicore Centra API access.

firewall python security segmentation

Last synced: 16 Jan 2026

https://github.com/monke443/CVE-2023-40028

Arbitrary file read in Ghost-CMS allows an attacker to upload a malicious ZIP file with a symlink.

cve cve-2023-40028 exploit ghost-cms github pentesting security vulnerability

Last synced: 30 Aug 2025

https://github.com/hiwepy/security-cas-spring-boot-starter

Spring Security 整合 Cas 登录

cas security spring-boot

Last synced: 16 Aug 2025

https://github.com/atrox/tower-helmet

tower-helmet helps you secure your tower server by setting various HTTP headers. It's not a silver bullet, but it can help!

helmet http-headers middleware rust rust-tower security tower

Last synced: 23 Aug 2025

https://github.com/jkawamoto/ambassadors

Yet another Ambassador pattern over SSH

ambassador connection docker secure security

Last synced: 15 Apr 2025

https://github.com/zapalm/auto-indexer

PHP auto indexer: the tool against directory traversal security vulnerability. It recursively adds a index.php file in all given directories.

cli-utility directory-traversal-vulnerability hacktoberfest php-library security vulnerability

Last synced: 24 Apr 2025

https://github.com/maxdcb/nimaescrypt

Nim file-encryption module that uses AES256-CBC to encrypt/decrypt files.

aes aes-256 aes-decryption aes-encryption nim security

Last synced: 09 Apr 2025

https://github.com/severityc/discord-2fa-receiver

This script receives Discord 2FA codes and outputs it via terminal. It refreshes the available codes for people to use for their Discord account.

2024 2fa 2fa-bypass 2fa-client-python 2fa-codes 2fa-receiver 2fabypass 2factor beta codes cybersecurity discord discord-2fa discord-script online-safety python safety security topt

Last synced: 09 Apr 2025

https://github.com/kghandour/kgpassgen

Generate passwords using different algorithms. https://kghandour.github.io/KGPassGen

password-generator security

Last synced: 14 Apr 2025

https://github.com/filiprokita/cracksha256

This Python program, called CRACKSHA256, is a simple SHA256 hash cracker that takes a SHA256 hash and a wordlist as inputs. It attempts to crack the hash by iterating over each word in the wordlist, encoding it, and hashing it using SHA256. If successful, it prints the word that was used to generate the hash.

bruteforce cracking hack hacking hacking-tool password-crack password-cracker password-cracking-and-hash-cracking password-decryption password-decryptor password-hash programming python security sha256

Last synced: 29 Aug 2025

https://github.com/pgilad/csp-builder

A builder tool to help generate Content Security Policies in a type-safe way

builder content-security-policy csp generator hacktoberfest pika security typescript web

Last synced: 08 Mar 2026

https://github.com/jasondrawdy/krypta

An advanced cryptography suite packaged with a file manager, password manager, and a swiss army knife of crypto tools.

application cryptography data encryption filemanager generators hashing notepad password-manager security software windows

Last synced: 08 Jan 2026

https://github.com/cpulvermacher/secret-scanner

Browser extension to scan web pages for API keys or passwords

browser-extension chrome-extension firefox-extension secret security security-tools web-development

Last synced: 17 May 2026

https://github.com/multiform-validator/typescript-javascript

Javascript / Typescript library made for validation, various form fields, such as: email, telephone, password, cpf, cnpj, credit card, magic numbers for image mimetype validation and much more.

javascript javascript-library library multiform-validator npm security security-tools typescript typescript-library validate-js validation validation-library validator

Last synced: 22 Jan 2026

https://github.com/marhcouto/feup-fsi-logbooks

:mortar_board: Logbook solutions for SEED Labs and CTFs - FSI -> L.EIC - FEUP

crypto ctf feup-fsi feup-leic feup-meic fsi leic-fsi meic-fsi security seed-labs

Last synced: 04 Jan 2026

https://github.com/swillner/regban

Lightweight alternative to fail2ban using nftables (banning IPs with failed login attempts)

fail2ban ip-blacklist ip-blocking nftables security

Last synced: 25 Mar 2025

https://github.com/j4n-e4t/deletr

Delete your online accounts with one click!

account-management hacktoberfest help-wanted privacy security

Last synced: 17 Jul 2025

https://github.com/dryewo/fahrscheine-bitte

Clojure library for checking OAuth2 access tokens

access-token api clojure compojure oauth2 security swagger1st

Last synced: 22 Apr 2025

https://github.com/atalii/adage

ada privilege escalation

ada security spark sudo

Last synced: 14 Mar 2025

https://github.com/jaayperez/keysoft

Crypto Js secure, dynamic password creator application that uses cryptographic algorithms with Node.js, Express 4, and Heroku cloud deployment.

crypto cryptographic-algorithms expressjs generator heroku nodejs password password-generator random-password security tool tools

Last synced: 23 Mar 2025

https://github.com/perpetualintelligence/shared

The shared components for cross-platform frameworks, and developer tools.

licensing oneimlx oneterminal pi-cli saas security

Last synced: 16 Jan 2026

https://github.com/moolen/secco

:shield: auto-generate seccomp profiles for Kubernetes

ebpf kubernetes seccomp security

Last synced: 04 Feb 2026

https://github.com/fadhilthomas/zap-reporter

run summary report of owasp zap findings

dast golang security

Last synced: 10 Mar 2026

https://github.com/center-key/bookstore

Grails 3.0 sample application

grails groovy sample security starter-template

Last synced: 07 May 2025

https://github.com/coding-hui/iam

IAM - Identity and access management system, cloud native friendly, multiple authentication methods

cloud gin golang iam oauth2 security

Last synced: 12 Apr 2025

https://github.com/mikebionic/smart-iot

An IoT system tools with remote control rest-api and automation

arduino automation image-processing iot master-slave-architecture orangepi python raspberrypi rest-api security

Last synced: 09 Apr 2025

https://github.com/nyxnor/onionwash

Parse tor configuration files and edit the torrc in a safe manner

configuration open-source security tor torrc

Last synced: 03 Sep 2025

https://github.com/lirantal/serverless-goof-azure

Oreilly's Serverless security example application - serverless-goof todo app

owasp security serverless snyk

Last synced: 23 Apr 2025

https://github.com/jonzeolla/lab-securitydataanalysis

An introductory lab to Security Data Analysis (using Apache Metron (incubating)).

apache-metron data-analysis lab metron security

Last synced: 03 Jul 2025

https://github.com/biffalo/bettersecdefaults

An interactive powershell script for Azure/Entra. Creates a set of conditional access policies that will provide improved security over Microsoft's "Security Defaults". This script is primarily for less mature orgs that are perhaps still using Microsofts "Security Defaults" or only have very basic conditional access policies in place.

azure conditional-access entra-id identity-management powershell security

Last synced: 10 Apr 2025

https://github.com/shinjitsue/ctfd_carsu-ctf

Customized deployment of CTFd for our CTF challenge. Built on the open-source CTFd platform, this project provides an interactive and competitive environment for cybersecurity enthusiasts to test their skills.

ctf ctfd ctfd-theme cybersecurity docker education flask hacking mariadb nginx python redis security

Last synced: 06 May 2025

https://github.com/johnshajiang/pyssldemo

Simple demonstrations on Python ssl module

certificate python security ssl tls

Last synced: 02 Jul 2025

https://github.com/h4fan/bpext

burpsuite python extention / burp python插件

burp-extensions favscan jsonscan log2db refxsscan security security-tools shriofinder springscan

Last synced: 12 Jul 2025

https://github.com/wultra/powerauth-admin

This reporitory was moved to https://github.com/wultra/powerauth-server repository

administration authentication mobile-security security

Last synced: 11 Jul 2025

https://github.com/0x48piraj/barely-windows

Barely Windows is a user-friendly web-based GUI editor that enhances your Windows experience. Easily remove pre-installed apps, disable telemetry, and eliminate Bing from search. Boost gaming performance with FPS optimization. Compatible with Windows 10 and 11, it helps you declutter and optimize your system in just a few clicks.

bloatware-removal debloat debloater fps gaming open-source performance privacy security tweaks webapp windows windows-10 windows-11 windows-debloat

Last synced: 15 Apr 2025

https://github.com/ligoj/plugin-security

Ligoj service plugin for security

ligoj ligoj-plugin security

Last synced: 13 Apr 2025

https://github.com/jcsec-security/smart-contract-audits

List of some of the published smart contract audits in which I have participated in the past.

audit security smart-contracts

Last synced: 07 Apr 2025

https://github.com/doucol/clyde

Project Calico Observability Tools

calico k8s kubernetes networking observability projectcalico security tigera

Last synced: 02 Feb 2026

https://github.com/fsmaxb/correcthorsebatterystaple

Create easy to remember passwords from a list of words. See XKCD 936.

correcthorsebatterystaple html javascript password-generator security

Last synced: 11 Apr 2025

https://github.com/sgofferj/sipblocklist

List of IP addresses which attacked my SIP IP PBX in the last 30 days

blocklist blocklist-data firewall-rules security

Last synced: 09 Mar 2026

https://github.com/Popsiclestick/falco-filebeat-daemonset

Easily deployable daemonset which moves logs from falco with filebeat.

containers daemonset falco filebeat kubernetes security

Last synced: 12 May 2025

https://github.com/reasonsoftware/security-group-manager

:closed_lock_with_key: AWS Security Group Management Lambda :closed_lock_with_key:

aws devops firewall lambda security whitelist

Last synced: 08 May 2025

https://github.com/anchore/engine-operator

Helm based anchore engine operator

kubernetes-operator operator operator-hub security

Last synced: 24 Feb 2025

https://github.com/jonzeolla/lab-internetofinsecurity

An introductory lab to IOT device security.

information-security infosec iot iot-security lab security

Last synced: 09 Mar 2026

https://github.com/jenkinsci/42crunch-security-audit-plugin

Jenkins plugin 42Crunch API Contract Security Audit

analysis security test

Last synced: 22 Apr 2025

https://github.com/azure/vscode-osconfig

This extension provides a rich authoring experience for Azure Device OS Configuration documents.

azure azure-iot azure-osconfig desired-state-configuration edge-security security vscode vscode-extension

Last synced: 04 Sep 2025

https://github.com/kasuken/passwordify

Generate secure password on the fly

blazor-webassembly hacktoberfest password-generator security

Last synced: 02 Jan 2026

https://github.com/maandree/passcheck

Passphrase strength evaluator

password-checker security

Last synced: 24 Feb 2025

https://github.com/federicoceratto/nim-libu2f

FIDO U2F server-side and client-side library for Nim

authentication fido nim nim-lang security u2f

Last synced: 03 Oct 2025

https://github.com/imagemlt/php_extension_backdoor

php拓展后门

php security

Last synced: 16 Jun 2025

https://github.com/ph-7/honeypots

:honeybee: Examples of Honeypots to create the fake admin panels :honey_pot: This honeypot can help to understand and improve the security problems of your website or web app. There is an example of fake admin area for standalone and another honeypot fake admin login page for Joomla! CMS

admin fake fake-admin-panel honeypot honeypot-fake-admin joomla security

Last synced: 13 May 2025

https://github.com/andrea11/openv

openv a tool to automatically load secrets from .env files using 1password CLI under the hood

1password secrets security

Last synced: 08 Aug 2025

https://github.com/authress/authress-sdk.rs

The Authress SDK for Rust provides authorization as a service with fully compatible REST apis.

api authentication authentication-middleware authorization authorization-framework authorization-server credentials keys security user-identity user-management

Last synced: 13 May 2025

Security Awesome Lists
the-book-of-secret-knowledge 74 Awesome-Hacking 83 awesome-security 330 awesome-web-security 424 awesome-ctf 220 awesome-hacker-search-engines 566 awesome-privacy 641 android-security-awesome 230 awesome-incident-response 221 Awesome-WAF 175 awesome-web-hacking 31 DevSecOps 187 awesome-security-hardening 207 awesome-infosec 215 awesome-cybersecurity-blueteam 252 WebHackersWeapons 431 backend-cheats 961 awesome-vehicle-security 227 awesome-sec-talks 265 awesome-game-security 92 awesome-nodejs-security 221 awesome-cloud-security 154 awesome-iot-hacks 70 awesome-embedded-and-iot-security 131 alternative-frontends 119 DevSecOps 48 Awesome-FL 4,069 Awesome-Cybersecurity-Datasets 54 awesome-golang-security 34 awesome-windows-domain-hardening 70 Crypto-OpSec-SelfGuard-RoadMap 473 awesome-azure-architecture 311 awesome-lists 737 osx-and-ios-security-awesome 59 awesome-llm-security 101 awesome-executable-packing 756 awesome-aws-security 173 awesome-ethereum-security 81 awesome-vulnerable-apps 100 Awesome-Jailbreak-on-LLMs 427 awesome-he 90 MobileHackersWeapons 73 npm-security-best-practices 33 awesome-security-GRC 81 awesome-anti-forensic 143 security-apis 114 awesome-python-security 35 awesome-opa 226 awesome-runners 38 graph-adversarial-learning-literature 314
Security Categories
Uncategorized 3,555 fl in top-tier journal 3,255 :books: Literature 2,575 fl in top ml conference and journal 1,564 Tools 1,414 Pentesting 1,143 Operating Systems 1,136 Attack 1,071 Other Lists 797 fl in top ai conference and journal 759 カテゴリ 720 fl in top cv conference and journal 673 Papers 602 Weapons 515 Resources 507 Official 497 Threat Hunting: 480 **Мероприятия** 465 Defense 449 Malware Analysis 434