An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/standardnotes/brakeman-action

Runs Brakeman against a repository's source code to find security vulnerabilities, using GitHub actions.

brakeman rails review ruby security static-code-analysis

Last synced: 25 Aug 2025

https://github.com/fadhilthomas/zap-reporter

run summary report of owasp zap findings

dast golang security

Last synced: 10 Mar 2026

https://github.com/guardrailsio/docker-security-checker

Dockerized version of security-checker

devsecops php security security-tools

Last synced: 19 Apr 2025

https://github.com/levicook/arch-valops

🏗️ Infrastructure-as-Code toolkit for secure Arch Network validator operations with hybrid development architecture and comprehensive monitoring dashboard

arch-network blockchain devops infrastructure-as-code monitoring security validator

Last synced: 11 Oct 2025

https://github.com/jenkinsci/42crunch-security-audit-plugin

Jenkins plugin 42Crunch API Contract Security Audit

analysis security test

Last synced: 22 Apr 2025

https://github.com/ofabiodev/resafe

🛡️ Detects ReDoS vulnerabilities in regexes using Thompson NFA construction and spectral radius analysis.

analyzer backtracking javascript library lightweight npm-package package performance redos regex regexp security typescript validation vulnerability

Last synced: 22 Jan 2026

https://github.com/rootsami/ratkiez

A CLI tool to rat on all AWS keys with creation date, last used date, and attached policies.

aws awscli keys scan security

Last synced: 01 Aug 2025

https://github.com/vdlp/oc-hashids-plugin

Allows developers to use secure hashed ID's in October CMS powered websites.

hashids hashing laravel october-cms octobercms octobercms-plugin php security

Last synced: 12 Apr 2025

https://github.com/Popsiclestick/falco-filebeat-daemonset

Easily deployable daemonset which moves logs from falco with filebeat.

containers daemonset falco filebeat kubernetes security

Last synced: 12 May 2025

https://github.com/anchore/engine-operator

Helm based anchore engine operator

kubernetes-operator operator operator-hub security

Last synced: 24 Feb 2025

https://github.com/dalibo/selinux-pgsql-pgdg

SELinux policy module for PGDG rpms

postgresql security security-hardening selinux-policy

Last synced: 13 Apr 2025

https://github.com/v-checha/openiframe

Build Iframe. Ignore X-Frame-Options, Content-Security-Policy, X-Content-Type-Options, X-Xss-Protection etc.

content-security-policy iframe iframe-api protection security security-policy x-content-security-policy x-content-type-options x-frame-options

Last synced: 13 Oct 2025

https://github.com/pavanvaranasi02/ecommerce-website

"An e-commerce web app with user registration, login, responsive product listing, and a 'Buy Later' feature. Built using Java, Servlets, JSP, JDBC, and styled with CSS. Enhance your online shopping experience!"

java jdbc jsp security servlets

Last synced: 08 Oct 2025

https://github.com/msdousti/owasp-java

A seriously flawed Java project for teaching "OWASP Top 10 - 2017" concepts.

css intellij-idea java javascript jsp maven mysql owasp-top-10 payara-server security servlet web

Last synced: 07 Oct 2025

https://github.com/rockballslab/vps-secure

🛡️ Sécurise ton VPS en 15 min - honeypot, pare-feu, IPS, integrity monitoring. Une commande. Zéro compétence requise. 🚀⚡

aide auditd bash cis-benchmark crowdsec devops docker endlessh hardening homelab linux rkhunter security selfhosted server-security stig sysadmin ubuntu vps vps-hardening

Last synced: 11 May 2026

https://github.com/lemonyte/safe-exec

Deobfuscate and inspect code passed into exec() and eval()

cybersecurity deobfuscation deobfuscator eval exec malware-detection python security

Last synced: 12 Oct 2025

https://github.com/kghandour/kgpassgen

Generate passwords using different algorithms. https://kghandour.github.io/KGPassGen

password-generator security

Last synced: 14 Apr 2025

https://github.com/alanvivona/microservices

Go Rest API with Google Auth + Nginx reverse proxy + Mysql

docker gdrive golang microservices mysql nginx security

Last synced: 03 Aug 2025

https://github.com/co-browser/vibe

The Secure Browser for Programmable AI Agents

a2a agent ai ai-agents browser chatbot llm mcp memory rag security

Last synced: 24 Jun 2025

https://github.com/tigera-solutions/azure-virtual-wan-calico-networking

[Azure Blueprint] Learn how to deploy Azure Managed Hub-Spoke using Virtual WAN and Calico Networking

aks azure egress-filtering egress-gateway security

Last synced: 13 Apr 2025

https://github.com/severityc/discord-2fa-receiver

This script receives Discord 2FA codes and outputs it via terminal. It refreshes the available codes for people to use for their Discord account.

2024 2fa 2fa-bypass 2fa-client-python 2fa-codes 2fa-receiver 2fabypass 2factor beta codes cybersecurity discord discord-2fa discord-script online-safety python safety security topt

Last synced: 09 Apr 2025

https://github.com/0xjjpa/deniable-website

👀 deniable.website / An usage example of Web Cryptography API

cryptography security web

Last synced: 23 Feb 2026

https://github.com/coding-hui/iam

IAM - Identity and access management system, cloud native friendly, multiple authentication methods

cloud gin golang iam oauth2 security

Last synced: 12 Apr 2025

https://github.com/j4n-e4t/deletr

Delete your online accounts with one click!

account-management hacktoberfest help-wanted privacy security

Last synced: 17 Jul 2025

https://github.com/gqzdev/spring-boot-start

🍀🍀🍀逐步入门Spring Boot的使用,😊集成各种应用模块组件

activemq docker dubbo elasticsearch mybatis mybatis-plus rabbitmq redis schedule security spring-boot websocket zookeeper

Last synced: 08 May 2025

https://github.com/tink-crypto/tink-java-awskms

Extension to Tink Java that provides AWS-KMS integration

aws-kms crypto cryptography java security

Last synced: 27 Jan 2026

https://github.com/johnshajiang/pyssldemo

Simple demonstrations on Python ssl module

certificate python security ssl tls

Last synced: 02 Jul 2025

https://github.com/pedroac/nonce4php

A nonce manager PHP library useful for preventing CSRF and replay attacks.

csrf-tokens nonces nonces-generator php php-library replay-attack security

Last synced: 08 Apr 2026

https://github.com/tijme/blog-v2

My blog about cyber security, hacking, software engineering and much more.

blog cyber hacking jekyll programming redteam security tiber

Last synced: 12 Aug 2025

https://github.com/greycloudss/sabaton

Sabaton is a WIP offline password cracker and wordlist engine in C. It generates exhaustive keyspaces and evaluates them against mainstream hash functions via a simple API. Built for air-gapped environments and high-throughput use, with a roadmap including CLI, multithreading, streaming mode, and GPU acceleration.

armourer c cracking cryptography security

Last synced: 07 Oct 2025

https://github.com/elongl/ac

A game I researched, got arbitrary code execution on the game server.

code-execution exploitation security vulnerability

Last synced: 17 Oct 2025

https://github.com/shopstack-projects/shopstack-security-hmac

Authenticate Shopify requests using the provided HMAC.

authentication hmac security shopify shopify-apps

Last synced: 08 Oct 2025

https://github.com/dryewo/fahrscheine-bitte

Clojure library for checking OAuth2 access tokens

access-token api clojure compojure oauth2 security swagger1st

Last synced: 22 Apr 2025

https://github.com/e-zk/page

password manager using age for encryption

age encryption go password-manager secrets security

Last synced: 14 Jan 2026

https://github.com/erbsland-dev/fast-file-encryption

Fast, secure, and minimal file encryption for large files using RSA and AES.

asymetric-cryptography decryption encryption large-files security signature verification

Last synced: 14 Jan 2026

https://github.com/multiform-validator/typescript-javascript

Javascript / Typescript library made for validation, various form fields, such as: email, telephone, password, cpf, cnpj, credit card, magic numbers for image mimetype validation and much more.

javascript javascript-library library multiform-validator npm security security-tools typescript typescript-library validate-js validation validation-library validator

Last synced: 22 Jan 2026

https://github.com/marhcouto/feup-fsi-logbooks

:mortar_board: Logbook solutions for SEED Labs and CTFs - FSI -> L.EIC - FEUP

crypto ctf feup-fsi feup-leic feup-meic fsi leic-fsi meic-fsi security seed-labs

Last synced: 04 Jan 2026

https://github.com/ph-7/honeypots

:honeybee: Examples of Honeypots to create the fake admin panels :honey_pot: This honeypot can help to understand and improve the security problems of your website or web app. There is an example of fake admin area for standalone and another honeypot fake admin login page for Joomla! CMS

admin fake fake-admin-panel honeypot honeypot-fake-admin joomla security

Last synced: 13 May 2025

https://github.com/maldevel/misc

Miscellaneous scripts, code and other random stuff

hardening it linux miscellaneous security

Last synced: 16 Mar 2026

https://github.com/practicalparticle/sandblox

**EXPERIMENTAL SOFTWARE** SandBlox: A secure blockchain development platform using pre-built components called Blox & Particle's State Abstraction. Build dApps quickly and safely with React & TypeScript.

account-abstraction blockchain security smart-contracts web3

Last synced: 10 Oct 2025

https://github.com/computer-lab/ctf

Computer Lab CTF

ctf hacking security wargame

Last synced: 11 Mar 2025

https://github.com/thefrosty/wp-login-locker

Disable direct access to your sites /wp-login.php script, plus user notifications based on actions.

login-auth packagist php php81 security wordpress wordpress-plugin wp-login

Last synced: 30 Oct 2025

https://github.com/glowyphp/csrf

Csrf Package provides Cross Site Request Forgery protection by comparing provided token with session token to ensure request validity.

csrf glowy glowyphp package php php-package security

Last synced: 02 May 2025

https://github.com/finleap-connect/vaultoperator

VaultOperator provides a CRD to interact securely and indirectly with secrets stored in Hashicorp Vault.

devops kubernetes secrets security vault

Last synced: 07 Oct 2025

https://github.com/jwilk/detsan

determinism sanitizer

fuzzing qa security

Last synced: 08 May 2025

https://github.com/nikogura/keymaster

A tool for configuring Hashicorp Vault for Managed Secrets

security

Last synced: 14 Jan 2026

https://github.com/influxdata/sedg

Tools for tracking security issues flexibly in version control

cve-tracking cve-triage security vulnerability-tracking

Last synced: 03 Feb 2026

https://github.com/teezzan/ohtp

A secured and extensible authentication service with support for multiple media and integration forms.

open-source otp-generator otp-verification security

Last synced: 12 Jun 2025

https://github.com/benjaminxscott/awesome-threats

A curated list of security threats and how to mitigate them

infosec security security-professionals

Last synced: 08 Jan 2026

https://github.com/paratron/next-server-session

Functions to handle serverside session data and csrf tokens

csrf-tokens nextjs react security serverside-sessions session-lifetime

Last synced: 26 Feb 2026

https://github.com/kaiiyer/emailrep

This is a go library for interacting with the EmailRep service

api email emailrep golang json-api security

Last synced: 16 Jan 2026

https://github.com/sofianehamlaoui/cybersecuritycare

CyberSecCare : A python Twitter that retweets all Security-Related tweets

bot cyber-security cybersecurity cysecbot-user hacking python python-twitter security sofianehamlaoui twitter-bot

Last synced: 06 Oct 2025

https://github.com/arpihomesecurity/arpi_webapplication

ArPI home security system - webapplication

angular home-security raspberrypi security

Last synced: 10 Feb 2026

https://github.com/dariomonopoli-dev/codegate-cli

Zero Trust Runtime for AI Agents. Isolates pip install in Firecracker MicroVMs to prevent slopsquatting and hallucinated package attacks.

devsecops llm malware-detection python security supply-chain

Last synced: 14 Jan 2026

https://github.com/chonkie-inc/littrs

🏖️🛡️ Keep your LLM's 💩 code where it belongs — in a sandbox.

ai-agents bytecode llm pyo3 python rust sandbox security tool-use wasm

Last synced: 10 Mar 2026

https://github.com/fevra-dev/gitexpose

Exposure intelligence for AI and dev infrastructure. Detects exposed credentials, AI-tool configs, supply-chain risk, framework vulns, and invisible Unicode attacks. OWASP LLM + MITRE ATLAS tagged.

ai-security asyncio cli credential-scanner git-security llm-security mcp mitre-atlas ml-security offensive-security owasp-llm pentesting python react2shell secret-detection security security-scanner supply-chain-security vulnerability-scanner

Last synced: 31 May 2026

https://github.com/stackitcloud/certbot-dns-stackit

The Certbot DNS-Stackit Authenticator Plugin is an advanced utility designed to streamline the acquisition of SSL/TLS certificates from Let's Encrypt with Certbot. This plugin facilitates automated certificate issuance and rejuvenation by employing the DNS-01 challenge protocol.

automation certbot-plugin cloud-services devops dns-01-challenge lets-encrypt python security ssl-certificates stackit

Last synced: 11 Feb 2026

https://github.com/kedi/jwt-attacker

tool to test and exploit common JWT security issues such as weak signing keys, alg:none bypasses, and RS/HS confusion attacks.

jwt jwt-attacks security

Last synced: 26 Oct 2025

https://github.com/gitanat/securepickle

Secure pickling. Arbitrary code execution be gone

authentication encryption pickle pickled-data python security unpickle

Last synced: 26 Jun 2025

https://github.com/giosil/saml-idp

Boilerplate for SAML Identity Provider implementation.

authentication java javaee saml saml-authentication saml-identity-provider saml-idp saml2 security

Last synced: 05 Nov 2025

https://github.com/equk/ffox_profile_tools

🦊 linux firefox profiles with security presets & userchrome styles

firefox firefox-profiles mozilla mozilla-firefox namespaces prefs preset privacy security security-hardening userchrome

Last synced: 10 Apr 2025

https://github.com/geeklearningio/gl-ionic-secure-file-storage

A service using two encryption plugins to encrypt data on iOS and Android

cordova cryptography ionic security storage

Last synced: 28 Apr 2025

https://github.com/skyf0l/sveltekit-helmet

Important security headers for SvelteKit

csp headers helmet hsts http-headers security sveltekit

Last synced: 11 Apr 2025

https://github.com/malikmaky/keemanager

KeeManager is a secure password and data management desktop application designed to help users securely store, manage, and access sensitive information.

encryption-decryption hash javascript key-der rust security svelte tailwindcss tauri tauri-app

Last synced: 11 Apr 2026

https://github.com/logicalhacking/securebpmn

SecureBPMN is a domain-specific modeling language that allows to model security aspects (e.g., access control, separation of duty, confidentiality).

analysis bpmn compliance modelling modelling-framework project securebpmn security

Last synced: 10 May 2025

https://github.com/furritos/flask-simple-crypt

Flask extension based on simple-crypt that allows simple, secure encryption and decryption for Python.

cryptography decryption encryption flask python security symmetric symmetric-cryptography

Last synced: 24 Oct 2025

https://github.com/ayemunhossain/secure-session-based-jwt-authentication

🔒 Introducing an authentication project crafted with Node.js, featuring session-based JWT token authentication and fortified with CSRF protection. Elevate your security measures while enjoying the seamless user experience provided by this robust solution.

ayemunhossain csrf-protection jwt jwt-token jwt-vs-session security session session-management token

Last synced: 24 Mar 2025

https://github.com/oqullcan/berry-privacy

BERRY-privacy is a PowerShell script designed to enhance your privacy by blocking telemetry fields and IP addresses.

automation firewall hosts network-security powershell privacy privacy-protection script security telemetry-blocking windows

Last synced: 15 Apr 2025

https://github.com/solentlabs/har-capture

Capture and sanitize HAR (HTTP Archive) files with deep PII removal. Perfect for support diagnostics, security reviews, and test fixtures.

bug-reports devtools har http-archive pii playwright privacy python sanitization security support-tools zero-dependencies

Last synced: 02 Apr 2026

https://github.com/vt-alt/tripso

Трансляция меток безопасности CIPSO и ГОСТ Р 58256-2018 (RFC 1108 Astra)

cipso gost-58256-2018 ipso iptables kernel-module rfc1108 security

Last synced: 07 Apr 2025

https://github.com/foxcpp/secutils

Random security-related scripts for Linux systems

linux-security security

Last synced: 24 Mar 2025

https://github.com/isabellaalstrom/nd-motionsnapshot

Takes snapshots of your cameras and sends to discord

automation camera cameras discord hacs home-assistant netdaemon security snapshot

Last synced: 15 Apr 2026

https://github.com/bxavaby/caligra

Linux CLI utility for sanitizing, analysing, and subverting file metadata

anonymization cli golang linux metadata opsec privacy security

Last synced: 19 Jul 2025

https://github.com/bewakerai/bewaker

Guardrails for agentic coding

ai githooks guardrails merkle security vscode

Last synced: 21 Feb 2026

https://github.com/amirhnajafiz-university/s3et01

English as Technical language final project.

air-gap research security

Last synced: 17 Feb 2026

https://github.com/yowainwright/intrinsic-dependencies

a simple utility ensuring invisible but required node dependencies aren't removed

ci dependencies performance security

Last synced: 22 Apr 2025

https://github.com/thomas-dev7/finwallet

finWallet é uma aplicação fullstack desenvolvida com Laravel para gestão financeira pessoal. Inclui funcionalidades de cadastro, autenticação, depósitos, transferências e histórico de transações, com foco em segurança, validações e código limpo.

alpinejs breeze challenge cripto css deployment framework fullstack laravel mobile mysql php responsive-design security tailwindcss wallet

Last synced: 07 Mar 2026

https://github.com/om-mishra7/krmu-os-expo_2023

This repository contains code for a Certificate Management System implemented using Flask and Polygon blockchain based on Etereum. The system allows users to create, view, and verify certificates securely on the blockchain.

blockchain certsecure ethereum flask python security solidity

Last synced: 10 Apr 2026

https://github.com/skipmcgee/host_security

Red Hat Enterprise Linux 6 & 7 security tool for enumerating security and IT operations-relevant information on a host and forwarding to a SIEM or enterprise syslog server in key='value' format.

cyber cybersecurity linux python3 rhel6 rhel7 security security-tools syslog

Last synced: 12 Jul 2025

https://github.com/sjinks/ww-hide-wplogin

A WordPress plugin to hide wp-login.php and use a custom URL for logging in.

login plugin security wordpress wordpress-plugin

Last synced: 15 Oct 2025

https://github.com/qtsolv/laravel-auditors

Record created by, updated by and deleted by on Eloquent models automatically.

eloquent laravel php security

Last synced: 12 Apr 2025