An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/rucas/shh

:see_no_evil: :hear_no_evil: :speak_no_evil: - AWS KMS Express Middleware

aws aws-kms express express-middleware security

Last synced: 17 Jan 2026

https://github.com/robertdebock/ansible-role-upgrade

Upgrade a package only if it is installed otherwise do nothing.

ansible molecule playbook security tox upgrade

Last synced: 02 Apr 2026

https://github.com/gordonzhang2024/xss-shield

A Python library to prevent your website from being attacked

python python-3 python-package python3 security web xss xss-attacks xss-scanner

Last synced: 24 Apr 2025

https://github.com/dina-heidar/saml2-authentication

A dotnet tool used to authenticate and logout using SAML2. It implements SAML Web SSO (HTTPGet, HTTPPost, Artifact), Logout (HTTPGet, HTTPost) profile message flows and bindings.

aspnetcore authentication dotnet identity netcore netstandard saml2 security slo sso

Last synced: 14 Jan 2026

https://github.com/dajiaji/mkkey

Application-layer Key Generator supporting JWK (JSON Web Key) and PASERK (Platform-Agnostic Serialized Keys).

cryptography jose jwk jwt paserk paseto python security

Last synced: 14 Jan 2026

https://github.com/birddevelper/gomologin

Gomologin is Golang (Go) login manager working with RDBMS Databases

authentication authorization go golang gomologin login login-manager login-system role security session sql

Last synced: 28 Apr 2025

https://github.com/benjaminxscott/awesome-threats

A curated list of security threats and how to mitigate them

infosec security security-professionals

Last synced: 08 Jan 2026

https://github.com/suzuki-shunsuke/trivy-config-action

GitHub Actions for trivy config

github-actions oss security

Last synced: 06 Jul 2025

https://github.com/geeklearningio/gl-ionic-secure-file-storage

A service using two encryption plugins to encrypt data on iOS and Android

cordova cryptography ionic security storage

Last synced: 28 Apr 2025

https://github.com/equk/ffox_profile_tools

🦊 linux firefox profiles with security presets & userchrome styles

firefox firefox-profiles mozilla mozilla-firefox namespaces prefs preset privacy security security-hardening userchrome

Last synced: 10 Apr 2025

https://github.com/vt-alt/ipt-so

Селектор меток безопасности для iptables

cipso ipso iptables kernel-module rfc1108 security

Last synced: 05 Oct 2025

https://github.com/dariomonopoli-dev/codegate-cli

Zero Trust Runtime for AI Agents. Isolates pip install in Firecracker MicroVMs to prevent slopsquatting and hallucinated package attacks.

devsecops llm malware-detection python security supply-chain

Last synced: 14 Jan 2026

https://github.com/nikogura/keymaster

A tool for configuring Hashicorp Vault for Managed Secrets

security

Last synced: 14 Jan 2026

https://github.com/okikio/broadcast-channel-security-vulnerablility

Vulnerability in Broadcast Channel allowing for Arbitrary Code Execution when using Eval (In-direct and with "use strict")

security

Last synced: 18 Jan 2026

https://github.com/divinemonk/hackers_n_devs

Collective resources for HACKERS and DEVELOPERS

dev developer github github-repos hackers repo security

Last synced: 09 Oct 2025

https://github.com/hhruszka/secrethunter

secretshunter is a penetration testing tool that uses regular expressions to search a filesystem for secrets (logins, passwords, API keys, hashes, ssh keys etc.).

scaning secrets secrets-detection security

Last synced: 14 Jan 2026

https://github.com/winterpuma/bmstu_security

bmstu, IU7-7, Защита Информации (2020)

7term bmstu data-protection information-security iu7 security

Last synced: 10 Oct 2025

https://github.com/edunatalec/encrypt-env

Generate encrypted files to secure sensitive configuration data. Encrypt YAML files and streamline the protection of sensitive information in Flutter applications.

encryption environment security

Last synced: 23 Feb 2026

https://github.com/aquasecurity/katacoda-scenarios

Katacoda scenarios for Aqua's open source projects

examples kubernetes security starbuard tracee trivy

Last synced: 13 Oct 2025

https://github.com/robertdebock/ansible-role-vault_agent

Install and configure HashiCorp Vault Agent on your system.

ansible application cloud infrastructure linux molecule playbook security system tools tox vaultagent

Last synced: 13 Mar 2026

https://github.com/alexander-naumov/pam2control

Easily configurable authentication provider

linux login pam pam-authentication protection security

Last synced: 22 Jan 2026

https://github.com/kucau0901/frigem

A Home Assistant custom component that enhances your Frigate NVR experience with Google's Gemini 2.0 AI model. This integration analyzes video clips from Frigate events and provides natural language descriptions of what's happening in the scene.

cctv-detection frigate frigate-nvr gemini gemini-api hacs-integration home-assistant python security vision-language

Last synced: 14 Oct 2025

https://github.com/praveensirvi1212/jenkins_sonarqube_basic_project

DevSecOps Project using git, GitHub, Jenkins and sonarqube

cicd codequality jenkins-pipeline security sonarqube

Last synced: 16 Oct 2025

https://github.com/saed-gpr/file-deleter

this tool can delete all file (or just .psd file or another)!! you can open the "file deleter.py" with vscode and edit it how you like!

file-deleter python python-virus python3 saed-gpr security security-tools simple-virus tools virus

Last synced: 24 Feb 2026

https://github.com/k1low/oshka

oshka is a tool for extracting nested CI/CD supply chains and executing commands.

github-actions security supply-chain

Last synced: 18 Oct 2025

https://github.com/adamyordan/go-die

Go-DIE is a go wrapper module for Detect-It-Easy (https://github.com/horsicq/Detect-It-Easy/)

detect detect-it-easy detector disassembler go golang packer reverse-engineering security signature unpacker wrapper

Last synced: 18 Oct 2025

https://github.com/akotov-dev/sstp-connector

Simple SSTP (Secure Socket Tunneling Protocol) VPN connector

anonimity anticensorship gui mageia-linux security sstp vpn-client

Last synced: 23 Jan 2026

https://github.com/furritos/flask-simple-crypt

Flask extension based on simple-crypt that allows simple, secure encryption and decryption for Python.

cryptography decryption encryption flask python security symmetric symmetric-cryptography

Last synced: 24 Oct 2025

https://github.com/marthijn/sidio.web.security

Helper functions and middleware to secure ASP.NET Core applications

asp-net-core content-security-policy http security web-security

Last synced: 26 Oct 2025

https://github.com/petemcw/ansible-role-security-updates

Automatic Security Updates Role for Ansible

ansible ansible-role security unattended-upgrades yum-cron

Last synced: 26 Oct 2025

https://github.com/kedi/jwt-attacker

tool to test and exploit common JWT security issues such as weak signing keys, alg:none bypasses, and RS/HS confusion attacks.

jwt jwt-attacks security

Last synced: 26 Oct 2025

https://github.com/wbnns/meng

Analyzes the security and potential risks of Ethereum tokens using the GoPlus Token Security API and Rug Pull Detection API

analysis base cryptocurrency due-diligence ethereum evm goplus op-stack risk security token tokenomics

Last synced: 27 Oct 2025

https://github.com/cossacklabs/dockerfiles

Repository with docker containers, useful for running Themis and Acra

docker security themis

Last synced: 16 Mar 2026

https://github.com/javiorfo/go-microservice-mongo

Go, MongoDB, Tracing, Auditory, Swagger and Keycloak

api-rest fiber go golang keycloak mongodb security web

Last synced: 24 Jan 2026

https://github.com/paratron/next-server-session

Functions to handle serverside session data and csrf tokens

csrf-tokens nextjs react security serverside-sessions session-lifetime

Last synced: 26 Feb 2026

https://github.com/fxboy/fanxing-security-spring-boot-starter

fanxing-security-spring-boot-starter 是 一个精简版的安全框架。它专注于权限校验与安全方面,并不考虑用户的登录状态,支持多角色多权限的权限校验,多个接口实现开发者自定义操作

authentication-tokenauthentication permission-verification security verification

Last synced: 24 Jan 2026

https://github.com/osiris-unnefer/advanced_mac_spoofer_for_windows

mac spoofer with a lot of OUI, mac computer spoofing, asus spoofing, printings spoofing and other for windows only

address cybersecurity mac oui security spoofing windows

Last synced: 31 Jan 2026

https://github.com/samuelquinones/password-generator

Generate secure, hard to guess passwords with the click of a button!

cra create-react-app password progressive-web-app pwa react react-hook-form reactjs security tailwindcss typescript

Last synced: 15 Apr 2026

https://github.com/erwinkramer/running-a-container-securely-in-azure

Considerations for choosing an Azure container service for secure use cases.

azure container-apps container-instances security web-app-for-containers

Last synced: 09 Feb 2026

https://github.com/localzet/lwt

Localzet LWT is a library for working with Localzet Web Tokens, which are based on JWT (JSON Web Tokens). It provides functionality for creating, verifying, and handling tokens using modern technologies and standards.

library security

Last synced: 09 Feb 2026

https://github.com/wravoc/harden-ghostbsd

Implements a broad, cohesive group of hardening settings for GhostBSD. Any directive can be set, re-set, for administering, tuning, and jails. Zenbleed workaround, Downfall info.

bsd cybersecurity downfall ghostbsd hardening security security-automation security-tools vulnerability-assessment vulnerability-detection zenbleed

Last synced: 10 Feb 2026

https://github.com/tallyto/algafood

Treinamento em java com springboot

java jpa openapi security spring-boot

Last synced: 11 Feb 2026

https://github.com/micchickenburger/cryptotools

A versatile cryptographic tool for data hashing, encryption, decryption, digital signing, password security, and secure random number generation, entirely in the browser.

aes argon2 bcrypt crypto cryptography cryptography-tools cybersecurity digest encryption encryption-decryption hashing pake pki rsa security security-tools sha

Last synced: 13 Feb 2026

https://github.com/ddspringle/pwnedpasswords_cfml

I implement the Have I Been Pwned Passwords API in CFML (ColdFusion)

cfml coldfusion coldfusion-library security security-hardening security-vulnerability

Last synced: 13 Feb 2026

https://github.com/kyrcha/secure-mern-app

A secure web application using the MERN stack

express-js heroku mongodb mongoose nodejs reactjs security

Last synced: 28 Feb 2026

https://github.com/netcode/oauthgoat

Vulnerable dockerized environment designed to test OAuth vulnerabilities

oauth-client oauth2 oauth2-server security security-labs vulnerability

Last synced: 14 Feb 2026

https://github.com/mablanco/ansible-osint

Ansible role to install several OSINT tools on a Linux system

ansible-role osint security

Last synced: 02 Jun 2026

https://github.com/timgrossmann/securitycat

Conent and PoC of my security testing automation thesis

policy security security-rat security-tools thesis

Last synced: 16 Feb 2026

https://github.com/isaacpeel/solesonic-mcp-server

An enterprise-grade MCP server with built-in federated identity support for SSO across providers and secure, scalable access management.

ai identity java mcp mcp-security mcp-server mcp-tools security spring-boot-ai

Last synced: 01 Mar 2026

https://github.com/turbot/flowpipe-mod-entra

Microsoft Entra ID pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Microsoft Entra ID to the people, systems and data that matters.

automation cloud devops entra flowpipe flowpipe-mod hacktoberfest integrations low-code microsoft-entra orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 01 Mar 2026

https://github.com/viadee/secdevops

Security DevOps: Vollautomatisches Securitytesting in der Build Pipeline

ci do docker gradle java jenkins pipeline security security-devops security-tools

Last synced: 19 Apr 2026

https://github.com/edoverflow/slides

Slides from my past talks.

infosec security slides talks

Last synced: 02 Mar 2026

https://github.com/jaegertracing/security-audits

Jaeger security audits

cncf security

Last synced: 02 Mar 2026

https://github.com/clagentic/clagentic-lite

A personal coding harness with serious gates. POSIX shell, two SQLite files, no server.

ai-tooling claude-code code-review developer-tools posix-shell security

Last synced: 02 Jun 2026

https://github.com/atani/mysh

MySQL connection manager with SSH tunnel support. Auto-masks sensitive data for AI/non-TTY environments. Supports MySQL 4.x+.

ai-safety cli connection-manager data-masking database golang mysql mysql-client security ssh-tunnel

Last synced: 03 Jun 2026

https://github.com/grimdork/awsec

Store secrets in AWS Parameter Store.

aws cli cross-platform secrets security security-tools

Last synced: 01 Apr 2026

https://github.com/falc0ntech/sarifcourier

A GitHub Action to render SARIF Security Reports right into your Pull Requests. Without the need for GHAS support!

cli github-actions sarif security

Last synced: 18 Apr 2026

https://github.com/rohansx/nullbox

immutable, minimal Linux OS purpose-built for AI agents. No SSH, no shell, no systemd - just microVMs, default-deny networking, and shared agent memory

agent-os ai-agent immutable-infrastucture immutable-os libkrun linux microvms os rust security

Last synced: 04 Apr 2026

https://github.com/ree-verse/rexor

Cross-platform Rust library with CLI app implementing XOR encryption/decryption

cli decryption encryption security xor

Last synced: 04 Apr 2026

https://github.com/vhscom/birdcage

Secure remote access for personal AI

acme go remote-access reverse-proxy security self-hosted single-user wireguard

Last synced: 04 Jun 2026

https://github.com/camjac251/tool-gates

Intelligent tool permission gate for AI coding assistants. Bash AST parsing, file guards, configurable tool blocking

ai-tools claude-code cli gemini-cli hooks permissions rust security tree-sitter

Last synced: 30 Apr 2026

https://github.com/jwplayer/github-vul

:octocat: Enable GitHub vulnerability alerts for all repositories

github security security-fix vulnerability-alerts vulnerability-management

Last synced: 24 Apr 2026

https://github.com/aeksco/autolock

:lock: A USB device that locks your computer when it detects you've left your seat

arduino lockscreen security teensy usb

Last synced: 29 Apr 2026

https://github.com/e-t-y-b/etyb-skills

ETYB — virtual engineering company for AI coding agents. 31 skills: CTO + 20 specialists + 9 engineering disciplines. Claude Code, Codex, Antigravity.

agentskills ai-agent architecture claude-code code-review devops engineering google-antigravity openai-codex quality-gates sdlc security tdd verification virtual-team

Last synced: 16 May 2026

https://github.com/fiware/tutorials.securing-access-openid-connect

:closed_book: FIWARE 407: Authenticating Identities with OpenID-Connect

fiware fiware-keyrock identity-management openid-connect security tutorial

Last synced: 30 Apr 2025

https://github.com/rsrdesarrollo/auto-ysoserial

Generate all ysoserial payloads with burp collaborator (or similar)

burp burpsuite exploit java python security security-tools ysoserial

Last synced: 15 May 2026

https://github.com/dominicbreuker/iprecon

CLI tool that retrieves WHOIS data for IP addresses

bug-bounty ip recon security whois

Last synced: 28 Oct 2025

https://github.com/irfaardy/lockout-account

Laravel Lockout Account. Lock user account automaticaly if login fails with json.

block json kunci laravel laravel-5-package laravel-framework laravel-package lock-account lockouts penguncian security

Last synced: 15 Jun 2025

https://github.com/lpndev/wpis

Windows Post Install Scripts

debloat privacy security windows

Last synced: 07 Sep 2025

https://github.com/obfusk/gradle-wrapper-verify

gradle-wrapper-verify - verify gradle-wrapper.jar sha256sum against published releases

android gradle security verify wrapper

Last synced: 13 Apr 2025

https://github.com/bad-antics/Fuzz.jl

Security fuzzing toolkit for Julia — mutation, generation, and coverage-guided fuzzing

fuzzing julia mutation-fuzzing security testing

Last synced: 06 Apr 2026

https://github.com/pregress/tflint-ruleset-azurerm-security

TFLint ruleset to enforce security best practices on the AzureRM provider

azure azure-resource-manager azurerm azurerm-terraform-provider security terraform tflint tflint-ruleset

Last synced: 11 Apr 2025

https://github.com/joho1968/fail2wp

WordPress plugin providing security functionality, plays nicely with Fail2ban and Cloudflare. Verified with WordPress 5.5+/6.6.x and PHP 7.4/PHP 8.1.x

cloudflare fail2ban fail2ban-filter php php74 php81 security security-hardening webbplatsen wordpress wordpress-development wordpress-plugin wordpress-security wordpress-security-plugin wordpress5 wordpress55 wordpress6 wordpress66 wordpress67 xmlrpc

Last synced: 09 Apr 2025

https://github.com/raisiqueira/secure-nextjs-app

Demo of a secure Next.js application

frontend-security nextjs nextjs14 security

Last synced: 14 Feb 2026

https://github.com/princiya/lightbeam-aframe

WebVR version for the Lightbeam web-extension

aframe aframevr lightbeam privacy security webextension

Last synced: 14 Mar 2026

https://github.com/pavlakis/csp-middleware

Add Content-Security-Policy headers for PSR-7 requests. Uses the csp-builder library paragonie/csp-builder

content-security-policy csp middleware php php7 security

Last synced: 11 Jan 2026

https://github.com/maya-data-privacy/ai-safe-plugin

Real-time PII detection and redaction for AI chat interfaces.

chatgpt chrome-extension claude gemini gliner llm ner pii-detection pii-redaction security security-tools

Last synced: 23 Jun 2026

https://github.com/xunholy/k8s-workload-identity

Example setup of workload-identity into a Kubernetes cluster on GCP - https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity

gcp google-cloud iac kubernetes kubernetes-cluster kubernetes-setup pod security security-automation workload-identity

Last synced: 05 May 2025

https://github.com/webship/websecurity

Most needed contributed modules and configurations to manage a secure website.

drupal security web websecurity

Last synced: 06 Mar 2026

https://github.com/tubenhirn/rasic

create issues for cve's found by trivy.

cve issues security

Last synced: 13 May 2026

https://github.com/cmccandless/safepass

Check passwords against https://haveibeenpwned.com/API/v2#PwnedPasswords

password-safety python python3 security

Last synced: 06 May 2025