Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/didinj/grails-spring-security-rest-api-example

Securing REST API with Grails 3 and Spring Security Rest

example grails grails3 plugin rest restapi security spring tutorial

Last synced: 29 Apr 2026

https://github.com/go-appsec/llm-security-toolbox

LLM-first CLI and MCP toolkit that lets humans and agentic coding tools collaborate on application security testing

agent-collaboration mcp security security-testing security-tools

Last synced: 05 Feb 2026

https://github.com/r3li4nt/awsecure

Herramienta de seguridad para entornos AWS, diseñada para analizar la infraestructura.

aws cloud hacking scanner security vulnerabilities

Last synced: 29 Apr 2026

https://github.com/embetrix/satobox

Satobox is an open-source Yocto-based, privacy-focused and secure bitcoin full node solution designed for embedded linux devices.

anonymity bitcoin bitcoin-node bitcoin-wallet cryptocurrency cryptography embedded hardware-wallet linux raspberry-pi security toronionproxy wallets yocto yocto-layer

Last synced: 18 Apr 2026

https://github.com/jokk-itu/authserver-framework

The AuthServer IdP framework. OAuth and OIDC at scale, secure by default.

csharp dotnet identity idp jwt oauth2 oidc openid openid-connect openidconnect security

Last synced: 16 Jun 2026

https://github.com/sydseter/dungeons-and-daemons

This repository contains OWASP Dungeons & Daemons a collection of LRP games. It's purpose is to promote security awareness and OWASP Cornucopia

appsec gamification security

Last synced: 01 Feb 2026

https://github.com/sandy-sp/metadata-cleaner

Metadata Cleaner – A CLI tool to remove metadata from images, PDFs, DOCX, audio, and video files. Privacy-focused, fast, and open-source. Supports batch processing & standalone executables.

cli file-cleaner metadata metadata-removal open-source privacy python security

Last synced: 10 May 2026

https://github.com/turbot/flowpipe-mod-gcp

GCP pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect GCP to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod gcloud gcloud-cli gcp hacktoberfest integrations low-code orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 25 Feb 2026

https://github.com/faryon93/swarmprom

Secure way to expose Prometheus HTTP handler in an Docker Swarm environment.

docker go metric prometheus security swarm

Last synced: 10 May 2026

https://github.com/dnviti/arsenale-website

An OpenSource Privilege Access Manager with extended Enterprise features like multi tenancy and strong auditing

access desktop keychain pam password-manager rdp remote security ssh vnc

Last synced: 04 Apr 2026

https://github.com/ohemilyy/lunarshell

A modern, elegant, and secure shell environment that transforms your Linux terminal experience with smart configurations, enhanced security, and beautiful customizations. Powered by Starship prompt and compatible with Ubuntu, Enterprise Linux, and Arch Linux.

linux optimized optimized-shell security shell shell-script shelll starship

Last synced: 28 Apr 2026

https://github.com/anthonyharrison/sbomdebt

Determine the technical debt for a Software Bill of Materials (SBOM)

cyclonedx devsecops sbom sbom-tool security spdx technical-debt

Last synced: 02 Feb 2026

https://github.com/turbot/flowpipe-mod-reallyfreegeoip

Really Free Geo IP pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Really Free Geo IP to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code orchestration pipelines reallyfreegeoip security workflow workflow-automation workflow-engine

Last synced: 02 Feb 2026

https://github.com/daggerok/spring-kotlin-examples

This repository contains some my kotlin examples and links to other my repos with kotlin projects

functional functional-programming functional-reactive-programming kotlin reactive reactive-programming security spring-5 spring-boot spring-kotlin webclient webflux

Last synced: 28 Apr 2026

https://github.com/e107inc/twofactorauth

Two-Factor Authenthication (2FA) for e107

2fa e107 plugin security two-factor-auth twofactorauth

Last synced: 24 Oct 2025

https://github.com/gowww/crypto

⛓ Encryption and hashing utilities

aes aes-128 anonymity cipher encoding encryption go golang helper secure security

Last synced: 01 Mar 2026

https://github.com/metraton/gaia-ops

GAIA-Ops — General Agentic Integration Architecture. Multi-agent DevOps system that classifies every operation by risk, routes work to specialist agents, and blocks irreversible commands automatically.

ai-agents claude-code devops gaia-ops orchestration security

Last synced: 14 Apr 2026

https://github.com/ishanoshada/spiral-cipher

A spiral cipher implementation for text encryption and decryption

cipher crypto cryptography encryption pypi python security spiral spiral-cipher

Last synced: 18 Feb 2026

https://github.com/cjbarker/pyhack

A collection of white-hat custom security tools for education and ethical testing.

cybersecurity hack hacking infosec pyhack python security whitehat

Last synced: 18 Jan 2026

https://github.com/mohamedelbachir/group-8-system-security-and-network

Group 8 for course System Security and Network

attack attack-defense network security

Last synced: 19 Mar 2026

https://github.com/smouj/captcha-shield

CAPTCHA Shield v3.0 - Advanced Anti-Bot/AI CAPTCHA with 14 behavioral signals, 7 challenge types, QR mobile verification. 100% client-side.

anti-ai anti-bot behavioral-analysis bot-detection canvas captcha framer-motion human-verification nextjs prisma react security shadcn-ui tailwindcss typescript

Last synced: 12 Jun 2026

https://github.com/harrystaley/tamusa_csci4349_week8_livepentest

This repository contains a college project for CSCI 4349, focusing on live penetration testing of the Globitek website in three versions: blue, green, and red. It involves identifying and exploiting six potential vulnerabilities, including SQL Injection and Cross-Site Scripting, using automated scripts and CLI tools to enhance cybersecurity skills.

cli command-line cybersecurity infosec network-security scripting security shell sql terminal

Last synced: 17 Mar 2026

https://github.com/gmhafiz/audit

Audit database INSERT, UPDATE and DELETE by recording who is making that change along with previous and after records.

audit golang security

Last synced: 28 Apr 2026

https://github.com/ntdls/talkster

Secure chat instant messaging server and client, offering multi-layered peer-to-peer encryption.

communication cryptography privacy security

Last synced: 21 Apr 2026

https://github.com/jabedude/fail2ban-plot

Takes Fail2Ban log files and generates a Google Maps scatter plot of banned IP addresses.

fail2ban python python3 security

Last synced: 09 Oct 2025

https://github.com/chocholl/xdp_furpf

Pretty fast XDP-based URPF implementation that leverages hierarchical data structures to perform high-speed packet filtering with rate limiting support.

arp-poisoning arp-spoofing cloud-networking ebpf kernel ndp-poisoning ndp-spoofing network-policy networking rate-limiting security spoofing-attack urpf virtual-machine xdp

Last synced: 01 Apr 2026

https://github.com/mablanco/docker-metabigor

Docker image for Metabigor, an Intelligence Framework to do OSINT tasks without any API key

docker pentesting security

Last synced: 02 Jun 2026

https://github.com/brunopadz/mammoth

Audit-logging postgres proxy and jumpbox

auditing jumpbox postgres proxy security

Last synced: 14 Jan 2026

https://github.com/jstreitb/baa

BAA: The cozy TUI that herds your package managers. Unified updates for apt, pacman, snap & flatpak... 🐑

apt automation bubbletea charmbracelet cli developer-tools flatpak go golang linux opensource package-manager pacman security snap system-update terminal-app terminal-ui tui

Last synced: 28 Apr 2026

https://github.com/turbot/flowpipe-mod-pagerduty

PagerDuty pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect PagerDuty to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code orchestration pagerduty pagerduty-api pipelines security workflow workflow-automation workflow-engine

Last synced: 26 Feb 2026

https://github.com/tokido-io/tokido-core

Production-grade MFA toolkit for Java. TOTP, recovery codes, extensible factors. GraalVM native-image ready.

authentication graalvm java mfa security totp two-factor

Last synced: 28 Apr 2026

https://github.com/viadee/deichefuerdieinseln

Companion repo for an upcoming articel on microservice security

java notes oauth oauth2 security

Last synced: 28 Feb 2026

https://github.com/yasirhamza/androdr

Open-source Android security scanner and endpoint detection (EDR). Detects spyware, stalkerware, and malware entirely on-device.

android edr malware-scanner mobile-security open-source privacy security sigma-rules spyware-detection stalkerware

Last synced: 25 May 2026

https://github.com/meysam81/go-auth

Production-ready authentication library for Go with Basic Auth, JWT, WebAuthn/Passkeys, TOTP 2FA, and OAuth2/OIDC SSO (Google, GitHub, Microsoft, and 7+ providers). Storage-agnostic, framework-agnostic, SOC2/GDPR compliant audit logging.

audit-logging auth-library authentication bcrypt compliance golang golang-authentication golang-library jwt middleware oauth2 oidc passkeys passwordless security session-management sso totp two-factor-authentication webauthn

Last synced: 01 Mar 2026

https://github.com/apolopena/yubikey-wsl-guides

Guides for successfully using YubiKey in WSL2 workflows

aiworkflows bots development documentation github linux macos opengpg piv security ssh windows wsl yubikey

Last synced: 28 Feb 2026

https://github.com/d4rklynk/pyfo

PYFO (Put Your Fedora On) is a post-install script for upstream version of fedora

fedora fedora-workstation hardened-malloc kernel-hardening linux-hardened post-install post-installation security setup

Last synced: 04 Mar 2026

https://github.com/balangyaoejuspher/rastray

Blazing-fast static analysis CLI for security, dependency, and performance audits.

cli dependencies-audit linter miettte rust security static-analysis

Last synced: 18 Jun 2026

https://github.com/lana-20/api-gateway-sdet

API Gateway from SDET Perspective

api-gateway load-balancer microservices security

Last synced: 19 Mar 2026

https://github.com/jeremylong/musical-octo-carnival

A journey through the insecure defaults in GitHub Actions - wait who committed code to my repo?

actions security

Last synced: 09 Feb 2026

https://github.com/er28-0652/py-invoke-obfuscation

Python implementation of (just a part of) Invoke-Obfuscation for PowerShell

obfuscation powershell python3 redteam security

Last synced: 18 May 2026

https://github.com/pirate-emperor/cipherx

CipherX is a verification project for Advanced Encryption Standard (AES-128) using Universal Verification Methodology (UVM). It leverages Verilog, SystemVerilog, and Python to ensure robust encryption algorithm validation, integrating comprehensive UVM components and tests.

aes-128 cryptography cryptography-algorithms dataencryption dataencryptionstandards digitaldesign encrytption hardwareverification python security testing-framework uvm verification verilog

Last synced: 26 Jan 2026

https://github.com/coldbox-modules/dumbpassword

Guard your users against entering dumb passwords in your ColdBox apps

mvc passwords patience security

Last synced: 03 Feb 2026

https://github.com/mitre/chef-iis-site-hardening

WIP Chef recipe to harden a windows iis site or sites to the DISA STIG requirements

disa hardening inspec mitre-corporation mitre-inspec mitre-saf security stig

Last synced: 12 Jul 2025

https://github.com/sjinks/ww-lock-user-to-ip

WordPress plugin to lock users to specific IP addresses

ip lock plugin security wordpress wordpress-plugin

Last synced: 10 Apr 2025

https://github.com/pcorbel/go-bigquery-acl

Simply apply ACL on BigQuery resources

acl bigquery config golang security

Last synced: 19 Apr 2026

https://github.com/dreadnode/capabilities

Public source of the Dreadnode capabilities in app.dreadnode.io — agents, tools, skills, MCP servers, and workers.

agents ai-agents capabilities dreadnode mcp security skills

Last synced: 25 May 2026

https://github.com/101t/step2hack

python3 and python hidden features

backdoors bypass obfuscation python security waf

Last synced: 14 Apr 2025

https://github.com/marcolugo/vulnserver

Different exploits created for Vulnserver

exploit-development security shellcode

Last synced: 17 May 2026

https://github.com/parasoft/run-dottest-action

Run code analysis with Parasoft dotTEST and review results

action analysis code compliance csharp dotnet dottest lint parasoft quality security static test testing vbnet workflow

Last synced: 11 Apr 2025

https://github.com/dan-q/length-extension-attack-demo

A demonstration of a (SHA1) length extension attack, with instructions

attack hacking hacking-tool length-extension security sha1 sha1-hash

Last synced: 27 Jun 2025

https://github.com/alazndy/r-ai-os

Universal AI Agent Kernel & Terminal Control Center. Rust-based hardened kernel with Vigils security, real-time observability, and tamper-evident audit ledger.

agent-kernel ai-os async-rust audit-ledger hardened-kernel mcp-server observability ratatui redaction-engine rust security sentry sha256-hashing sqlite status-alpha t-ecosystem tamper-evident tokio vigils

Last synced: 09 Jul 2026

https://github.com/jasondrawdy/compendio

Collection of common and noteworthy extension methods, security tools, and filesystem functions generally found in most applications; focusing on extensibility and portability.

compendium converters cryptography data extensions generators hashing library security utilities validation windows

Last synced: 18 May 2026

https://github.com/7majesty-m/terminal-guardian-mcp

Secure MCP server for safe AI-powered terminal access with risk analysis, sandboxing, logging, filesystem protection, and Docker/Git integrations.

ai ai-agents claude cli dev-tools mcp nodejs sandbox security terminal

Last synced: 26 May 2026

https://github.com/declangray/rogue-electron

A C2 server designed to run within Electron applications.

c2 cyber pentesting security

Last synced: 13 May 2025

https://github.com/maruki00/gofd

gofd is a command-line utility written in Go for securely deleting files and directories

cli files golang security

Last synced: 29 Jun 2026

https://github.com/rof13thfloor/sql-slammer-worm_detection

Slammer worm is a type of Worm that caused a denial of service on some Internet hosts and dramatically slowed general Internet traffic.

network security worm

Last synced: 30 Mar 2025

https://github.com/embetrix/meta-pqc

OpenEmbedded/Yocto layer dedicated to Post-Quantum Cryptography, providing integration and testing of quantum-safe cryptographic algorithms for embedded linux systems.

crypto-agility cryptography embedded-linux embedded-systems openembedded post-quantum-cryptography python security yocto

Last synced: 24 Feb 2025

https://github.com/aegisjsproject/sanitizer

Sanitizer API polyfill & config

aegis sanitizer sanitizer-api security

Last synced: 13 Apr 2025

https://github.com/naruno/pywall

Python firewall framework.

decentranetwork firewall python3 security

Last synced: 29 Aug 2025

https://github.com/filiprokita/bcrack

BCrack is a basic tool designed to crack Bcrypt hashed passwords using brute-force methods. Written in C, it highlights the importance of strong passwords and the effectiveness of Bcrypt for password hashing. Ideal for educational purposes and ethical security testing with permission.

bcrypt bruteforce c cli command-line crypt cryptography cybersecurity decryption encryption file-handling hacking hash-comparison hash-cracking password-cracking security wordlist

Last synced: 11 Feb 2026

https://github.com/prdn/ksb

sb26 [Kernel Socks Bouncer] is a Linux Kernel 2.6.x Loadable Kernel Module that that redirects tcp connection (to user-defined target hosts) through socks 4/5 chains.

kernel privacy security

Last synced: 25 Jun 2025

https://github.com/wrsmith108/claude-skill-security-auditor

Claude Code skill for running structured security audits with actionable remediation plans

claude-code claude-skill developer-tools npm-audit security vulnerability

Last synced: 20 Feb 2026

https://github.com/kareimgazer/des

Implementation of the Data Encryption Standard algorithm using C++

cipher-algorithm cryptography data-encryption-standard security

Last synced: 29 Mar 2025

https://github.com/aliesmaeil/api-key-hiding-client

Demonstration of API key hiding locally in Mobile Applications.

api apikey apikeys dart encryption security

Last synced: 04 Jan 2026

https://github.com/seqred-s-a/gxdlmsdirector-cve

CVE-2020-8809 and CVE-2020-8810

advisory ami cosem cve dlms security

Last synced: 10 Mar 2025

https://github.com/giosil/woauth2

A simple OAuth 2.0 protocol implementation.

authentication java javaee javaee-security login oauth oauth2 oauth2-server security

Last synced: 05 Nov 2025

https://github.com/mikaelvesavuori/multi-cloud-security-tooling

Scripts and resources for multi-cloud (AWS, Azure, GCP + Mac) security tooling running on Linux.

amazon-web-services aws azure cloud-security gcp google-cloud google-cloud-platform linux multi-cloud security

Last synced: 10 Apr 2026

https://github.com/lorddashme/php-cryptor

A PHP package wrapper for cryptography functions.

cryptography-functions encryption hash php php-library security

Last synced: 13 Apr 2025

https://github.com/0x48piraj/wapparalyser

Fuzzing and fooling Wappalyzer. Released at BSides Delhi 2019.

blue-team research-tool security tool

Last synced: 17 May 2026

https://github.com/brittonhayes/zero

Find zero-days related to your code, deployments, and projects. 🔍 🐞

cli golang rss security zeroday

Last synced: 18 Jun 2025

https://github.com/a3ro-dev/password_generator

Python program that generates a random password with the specified length, inserts it into a database, and then checks if the generated password already exists in the database. If it does, the program generates a new password and repeats the process until it generates a unique password.

database generator password password-generator password-manager project-python security

Last synced: 11 Sep 2025

https://github.com/sqreen/sqreen-monitoring-wordpress

Automatically monitor Wordpress with Sqreen PHP agent

security wordpress

Last synced: 17 May 2026

https://github.com/bormaxi8080/nmap-scanner

Nmap packet domain list scanner to find exploited vulnerabilities

nmap pentesting security shell

Last synced: 23 Nov 2025

https://github.com/joaog23/sistema-acesso-frontend

Depois da desmembração do monolito aplicação Acesso, o Frontend ganhou uma parte somente dele. Acesso um sistema de controle de fluxo de acesso de pessoas.

front-end frontend-web pure-javascript purecss security

Last synced: 04 Oct 2025

https://github.com/padok-team/dojo-terraform-aws-security

Hands-on introduction to secure AWS resources with Terraform.

aws dojo security terraform

Last synced: 08 Jul 2025

https://github.com/gummibeer/wp_disable_apis

Disables the REST-API and XMLRPC to secure your Wordpress installation.

api php rest rest-api security wordpress wordpress-plugin xmlrpc

Last synced: 17 May 2026

https://github.com/jenkinsci/xygeni-sensor-plugin

Jenkins plugin for Xygeni - End to end software development and delivery security

ci-cd-security iac-security secrets-scan security software-attestation software-supply-chain-security

Last synced: 11 Apr 2025

https://github.com/laravel-chronicle/filament

Read-only Filament panel plugin for Chronicle

audit-log cryptography event-log filament filament-plugin laravel security

Last synced: 03 Jul 2026

https://github.com/christarazi/steganography

A command-line C program that hides / reveals messages in Bitmap images (BMP) using steganography

bitmap bmp c cli linux obscurity security steganography

Last synced: 18 May 2026

Security Awesome Lists
the-book-of-secret-knowledge 74 Awesome-Hacking 83 awesome-security 330 awesome-web-security 424 awesome-ctf 220 awesome-hacker-search-engines 566 awesome-privacy 641 android-security-awesome 230 awesome-incident-response 221 Awesome-WAF 175 awesome-web-hacking 31 DevSecOps 187 awesome-security-hardening 207 awesome-infosec 215 awesome-cybersecurity-blueteam 252 WebHackersWeapons 431 backend-cheats 961 awesome-vehicle-security 227 awesome-sec-talks 265 awesome-game-security 92 awesome-nodejs-security 221 awesome-cloud-security 154 awesome-iot-hacks 70 awesome-embedded-and-iot-security 131 alternative-frontends 119 DevSecOps 48 Awesome-FL 4,069 Awesome-Cybersecurity-Datasets 54 awesome-golang-security 34 awesome-windows-domain-hardening 70 Crypto-OpSec-SelfGuard-RoadMap 473 awesome-azure-architecture 311 awesome-lists 737 osx-and-ios-security-awesome 59 awesome-llm-security 101 awesome-executable-packing 756 awesome-aws-security 173 awesome-ethereum-security 81 awesome-vulnerable-apps 100 Awesome-Jailbreak-on-LLMs 427 awesome-he 90 MobileHackersWeapons 73 npm-security-best-practices 33 awesome-security-GRC 81 awesome-anti-forensic 143 security-apis 114 awesome-python-security 35 awesome-opa 226 awesome-runners 38 graph-adversarial-learning-literature 314
Security Categories
Uncategorized 3,552 fl in top-tier journal 3,255 :books: Literature 2,575 fl in top ml conference and journal 1,564 Tools 1,413 Pentesting 1,143 Operating Systems 1,136 Attack 1,071 fl in top ai conference and journal 759 カテゴリ 720 Other Lists 713 fl in top cv conference and journal 673 Papers 602 Weapons 515 Resources 507 Official 497 Threat Hunting: 480 **Мероприятия** 465 Defense 449 Malware Analysis 434