An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/parhamfa/where-is-my-dst

🌍🔍 Safari extension that reveals the geographic origin of web requests, helping you understand where your data is going

blocking extension geolocation ios javascript macos privacy safari security web-requests

Last synced: 09 May 2026

https://github.com/visiongaiatechnology/vgtdesk

VGT WP-Desk is a modular, zero-dependency WordPress Operator Workspace that transforms the classic WordPress admin interface into a high-performance, OS-style desktop environment. It combines a hook-preserving iframe workspace, per-user desktop state, multi-window productivity features, and an integrated defense-in-depth security

dashboard dashboard-design os-theme security visiongaiatechnology wordpress wordpress-development wordpresssecurity

Last synced: 08 Jul 2026

https://github.com/destan0098/subenum

This tool Enumeration subdomains and check cdn and not ,This tool just is for training.

enumeration security security-tools subdomain subdomain-enumeration

Last synced: 30 Jul 2025

https://github.com/gregurco/security-advisories-ga

This Github Action integrated SecurityAdvisories check to your project!

github-actions php security

Last synced: 21 May 2026

https://github.com/humanjavaenterprises/nostr-nsec-seedphrase

The nostr-nsec-seedphrase repository offers a TypeScript library that converts Nostr nsec keys into mnemonic seed phrases, enhancing the readability and management of keys within Nostr applications. This approach mirrors Bitcoin's use of seed phrases, emphasizing the importance of secure storage and careful handling of these keys.

bitcoin cryptography decentralized-protocols digital-signatures key-management mnemonic-seed-phrases nostr public-key-infrastructure security

Last synced: 31 Aug 2025

https://github.com/ram001-code/port-scanner

A Simple Flask and Nmap based Port Scanner

cybersecurity flask python python3 security webapp

Last synced: 14 Mar 2025

https://github.com/alexruperez/cryptokitcli

Take Apple CryptoKit to the command line and perform cryptographic operations securely and efficiently.

apple cli command-line command-line-tool cryptography cryptokit security swift

Last synced: 09 Aug 2025

https://github.com/eriksjolund/writing-more-secure-perl-cgi-scripts

Tutorial of how to write more secure Perl CGI scripts

cgi perl perl5 security security-hardening tutorial

Last synced: 06 Apr 2025

https://github.com/chekist32/2fa-plugin-jenkins

The plugin that integrates 2FA with the default Jenkins user management system.

2fa authentication jenkins-plugin otp-email security totp

Last synced: 22 Sep 2025

https://github.com/nmicic/compartment

Kernel-enforced sandboxing for untrusted processes. Two zero-dependency core tools, one shared profile format, plus an optional BPF-LSM module.

bpf-lsm defense-in-depth ebpf hardening landlock linux linux-security-module namespace privilege-separation process-isolation sandboxing seccomp security syscall-filtering

Last synced: 21 May 2026

https://github.com/adelin-info/tp_srcs

Systèmes Répartis et Client-Serveur

concurrent distributed-systems java rmi security

Last synced: 15 Jun 2025

https://github.com/blessedrebus/tesi-magistrale

Tesi magistrale di Ingegneria Informatica Magistrale su Attacchi Buffer Overflow e Return Oriented Programming in architetture RISC-V, Università di Bologna

assembly bof buffer-overflow cybersecurity return-oriented-programming risc-v rop security x86 x86-64

Last synced: 02 Jan 2026

https://github.com/baraja-core/privacy-firewall

A simple library for securing access to the web.

access authorizator firewall login login-form security

Last synced: 15 May 2025

https://github.com/oussama-zbair/java-securityconcepts

Java code practice for security concepts

2fa-security aes-encryption java security

Last synced: 28 Jul 2025

https://github.com/ishanoshada/xxe

A comprehensive Python package for XML External Entity (XXE) security testing and analysis. This package provides tools for security researchers and ethical hackers to identify and analyze XXE vulnerabilities in XML processing systems.

ceh cyber-security cybersecurity oscp pypi python security xxe

Last synced: 13 Apr 2025

https://github.com/jenkinsci/redhat-codeready-dependency-analysis-plugin

A Jenkins plugin by Red Hat, to scan the dependency stack and give information related to vulnerabilities, popularity, maintainability, compatibility and more

analysis crda dependencies dependency-analysis deprecated devsecops maintainability redhat scanning security vulnerabilities

Last synced: 30 Sep 2025

https://github.com/charles-adedotun/claude-code-sub-agents

🤖 Comprehensive sub-agent ecosystem for Claude Code - Intelligent AI assistance across the full software development lifecycle

ai-agents automation claude-code developer-tools devops productivity react security testing workflow

Last synced: 03 Sep 2025

https://github.com/anatoly-semenov/cpp-security-gateway

C++ implementation of a gRPC gateway designed for scalable and secure microservice architectures on Kubernetes

cpp gateway high-performance security

Last synced: 24 Aug 2025

https://github.com/alh477/demod-camera-setup-script

I am building my own PoE IP cams and I wanted to show up the lame ass SWEs at brand name IP cam companies. Use my script to make your own cameras for cheaper, so you don't need to use Internet Explorer compatibility mode. WHY DO THEY EVEN DO THAT, IT IS DISGUSTING AND APISH.

apt bash bash-script camera debian-packages ffmpeg gnu ip mediamtx python python-script security ufw

Last synced: 19 Apr 2026

https://github.com/shu-tom/threatweather

Check internet threat alert levels

python3 security

Last synced: 22 Jul 2025

https://github.com/dv64/dragonattacker

DragonAttacker is an educational network diagnostic tool designed for testing network security and resilience. It simulates various types of network traffic for authorized penetration testing and security research purposes only.

ddos learn learning network py python security tool

Last synced: 13 Apr 2025

https://github.com/aruvili/agam

அகம் - A Tamil programming language with Python inspired syntax using rust

agam aruvili performance programming-language security simple tamil-language

Last synced: 30 Dec 2025

https://github.com/briso10-dev/oracle-database

An Open source project giving a maximum of Query Solutions of various different databses in Oracle

database oracle security sql

Last synced: 20 Sep 2025

https://github.com/ianleeclark/paseto_plug

A Paseto (Platform Agnostic SEcurity Token) plug for Phoenix Authentication

elixir paseto security

Last synced: 27 Jun 2025

https://github.com/desmondsanctity/twilio-authy

A Next.js application that uses Twilio Authy for 2FA

2fa mfa nextjs security twilio twilio-verify

Last synced: 25 Apr 2026

https://github.com/ladunjexa/authentication-n-security

Anonymous Social Network addresses Authentication & Security conspectus using Mongoose encryption, dotenv, MD5 hash, bcrypt, Passport.js (Cookies & Sessions) and OAuth 🔐

authentication bcrypt dotenv md5 md5-hash mongoose-encryption oauth passportjs security

Last synced: 24 Jul 2025

https://github.com/azu/read-once

read-once objects for sensitive data.

ddd javascript secure security sensitive typescript

Last synced: 20 Jun 2026

https://github.com/mariosergiosl/sys-inspector

An enterprise-grade Linux forensic analysis and observability tool powered by eBPF. Captures real-time execution, I/O, and network events with storage topology mapping.

bcc ebpf forensics linux monitoring observability python security sysadmin

Last synced: 13 Jan 2026

https://github.com/zeusssz/drive-wiper

A tool to securely wipe your disk, so no one can steal your sensitive info

drive-wiper security shell-script

Last synced: 24 Jul 2025

https://github.com/hookwarden/hookwarden

Find every webhook-verification bug in your codebase in under five minutes. Three-state verdicts across 21 providers in JS/TS, Python, and PHP. Zero off-machine traffic.

cli developer-tools hmac php python sast security signature-verification static-analysis typescript webhook-security

Last synced: 03 Jun 2026

https://github.com/madsmtm/security-txt

A security.txt draft 09 parser for Rust

rust rust-lang security security-txt

Last synced: 24 Aug 2025

https://github.com/rezen/hardcidr

Dockerized hardcidr

osint security

Last synced: 09 Oct 2025

https://github.com/sainiabhishek/nodejs_auth-api

A backend authentication & authorization project to handle the scale and complexity of an application. It is design while keeping the different environments in the mind.

backend-api cookie-parser cors error-handling eslint expressjs joi jwt mongodb moongose nodejs prettier rate-limiter security tokens typescript winston

Last synced: 03 Feb 2026

https://github.com/hacimertgokhan/mixsecurity

Discord security bot

discord discordjs-v14 security

Last synced: 28 Apr 2026

https://github.com/sangeetagarwal/securingappswithoauth2andoidc

Fully functional App that demonstrate the various flows in OpenId. It uses Duende's Identity Server as the IDP. You'll also see a React app which uses the Backend for Frontend (BFF) pattern to communicate with the API along with a a pure JavaScript client which again uses the BFF pattern to communicate with the API.

aspnetcore bff duende duende-identityserver identity oauth oidc openid-connect security

Last synced: 15 May 2026

https://github.com/dev88jerry/cs325

Bishop's University - CS325 Computer & Network Security

networks security vpn

Last synced: 26 Feb 2025

https://github.com/migueldemoura/migueldemoura.com

Personal Blog - Projects, Security & Privacy

blog pentesting performance personal privacy projects security

Last synced: 22 Mar 2025

https://github.com/sjinks/docker-alpine-dirb

Alpine-based image to run dirb scanner

alpine-image dirb docker-image pentest-tool security security-tool

Last synced: 02 Aug 2025

https://github.com/marksowell/clickjacking-poc

A Python package for creating a clickjacking proof of concept (POC).

clickjack clickjacking clickjacking-tester clickjacking-vulnerability iframe security vulnerability web-security

Last synced: 03 Apr 2025

https://github.com/heliomarpm/cryptoh

A clean and easy-to-use cryptography utility library for Node.js, built on top of the native crypto module.

crypto crypto-helper cryptography cryptography-algorithms cryptography-library cryptoh helpers helpers-library md5 node-library security sha1 sha256 sha512 utils-library

Last synced: 28 Jul 2025

https://github.com/amul-thantharate/aws-project-golang-terraform

This repository contains a collection of serverless applications built with Go, leveraging AWS Lambda, API Gateway, and DynamoDB. The projects are designed to demonstrate scalable and efficient serverless architectures, including CRUD operations, event tracing, and more.

aws azure docker golang groq python security shell terraform

Last synced: 07 Apr 2026

https://github.com/farrosfr/noa

A multi-layer content filtering and system hardening solution designed for high-performance blocking and un-bypassable enforcement.

blocker security

Last synced: 15 May 2026

https://github.com/haxurn/better-middleware

a framework-agnostic authentication middleware for Better Auth that provides robust session validation, intelligent caching, and comprehensive error handling for your backend routes.

auth better-auth middleware secure-routes security

Last synced: 15 May 2026

https://github.com/ecgalaxy/ca_certificates

Ansible role which installs ca-certificates and adds CommisSign certificates to the trusted CAs list - Repository mirror - development takes place on code.europa.eu

ansible-role ca-certificates security

Last synced: 13 Apr 2025

https://github.com/kakwa/cpe-search

Search Tool for CPE (Common Platform Enumeration) Filters

common-platform-enumeration cpe cve cve-search html national-vulnerability-database nist nvd perl security xslt

Last synced: 25 Jan 2026

https://github.com/destan0098/subcheck

This Tool Check Domains and Subdomains has Open Port 80 or 443 and use cdn or not

cdn enum recon security security-tools vulnerability-scanners waf

Last synced: 10 May 2026

https://github.com/wp-digital/wp-recaptcha

Helps to protect website with Google reCAPTCHA v3 or Cloudflare Turnstile.

recaptcha recaptcha-v3 security turnstile wordpress-plugin wp-digital

Last synced: 12 Apr 2025

https://github.com/simplify-framework/security

This project aims to provide some basic security scan features for security assessments for Simplify Framework base projects.

aws-lambda secops security security-auditing-tool security-scanner

Last synced: 09 Jul 2025

https://github.com/zxc7563598/php-google-authenticator

一个用于生成和验证时间基础一次性密码(TOTP)的 PHP 包,支持 Google Authenticator 及类似应用。功能包括密钥生成、二维码创建和 OTP 验证 | A PHP library for generating and verifying Time-Based One-Time Passwords (TOTP). Compatible with Google Authenticator and similar apps, with features like secret generation, QR code creation, and OTP verification

2fa authentication composer google-authenticator otp php qr-code security totp

Last synced: 03 Aug 2025

https://github.com/chrisfosterelli/multiply-by-two

This is a malicious demonstration module for the blog post at https://fosterelli.co/stealing-credentials-with-a-malicious-node-module.html

node research security

Last synced: 24 Jun 2025

https://github.com/felipecosta09/aws-modernization-with-cloud-one-fss

In this workshop, you will learn how to scan your files in S3 buckets for malware and integrate into your custom workflows, by automating with your current resources, directly in your AWS environment. Using Trend Micro - Cloud One, AWS S3, AWS Lambda, AWS SQS, AWS SNS and AWS Cloud Formation, you’ll get hands-on experience implementing an automated Cloud Formation security stack to provide Data Security capabilities to your S3 buckets.

aws cloudone filestorage s3 security trendmicro

Last synced: 02 Apr 2025

https://github.com/ctkqiang/huo_jian_qiang

火尖枪是一款专为安全测试和性能验证设计的高性能HTTP批量请求工具。该工具能够自动化执行大规模的用户名/密码组合测试,支持高度可配置的请求参数和多线程并发处理。

admin automation bruteforce china chinese cybersecurity go golang hacking http login security

Last synced: 07 Apr 2026

https://github.com/usmanmusa1920/pass-access

Password and sensitive information manager, that encrypt and save them for a user, which can be decrypt by the user when ever need to be 😄

password-manager security

Last synced: 10 Jul 2025

https://github.com/ojford/pam-credential-process

PAM module to set authentication token to output of arbitrary executable

authentication pam pam-authentication pam-module security

Last synced: 03 Apr 2025

https://github.com/mitre/heimdall-baseline

(WIP) InSpec Profile for the Heimdall Application

heimdall inspec mitre-corporation security security-tools

Last synced: 16 May 2026

https://github.com/dotanuki-labs/gradle-wrapper-validator

A validator for gradle/wrapper jar binaries, intended to be used in CI pipelines.

bitrise circleci cli github-actions gradle security supply-chain-security team-city

Last synced: 12 Apr 2025

https://github.com/bug-ops/exarch

Secure archive library: TAR/ZIP/7z extraction & creation with CVE protection. Type-safe Rust core, Python/Node.js bindings, zero unsafe code.

7z archive cli compression cve-protection extraction library memory-safe napi-rs nodejs path-traversal pyo3 python rust security tar zip zip-bomb

Last synced: 06 Feb 2026

https://github.com/rix4uni/cspfinder

Discover new target domains using Content Security Policy

bugbounty content-security-policy csp golang hacking recon reconnaissance security

Last synced: 02 Feb 2026

https://github.com/lookyman/security

Wraps PHP's password_* functions in authenticated encryption

encryption password security

Last synced: 23 Jun 2026

https://github.com/nhh/tarbit

Tarbit is a tcp tarpit written in ruby.

bots networking ruby security

Last synced: 29 Oct 2025

https://github.com/fijimunkii/aws-security-audit

Scripts for security audit of AWS account

audit aws security

Last synced: 15 May 2026

https://github.com/leonrjg/vakthund

Self-hosted web dashboard for security researchers to manage and track IoT devices from public sources such as Shodan or ZoomEye.

censys dashboard fofa internet-of-things iot javascript python security self-hosted shodan zoomeye

Last synced: 15 May 2026

https://github.com/teyckmans/gradle-tink

Gradle plugin that provides encryption support for secrets using https://github.com/google/tink.

crypto cryptography gradle java kotlin security tink

Last synced: 10 May 2026

https://github.com/sv222/simple-security-checker

Its a simple security checker that helps identify and monitor URLs that should not be publicly accessible. It checks a list of 200+ URLs for a specific response code and logs any errors or successful responses.

checker endpoints go security

Last synced: 16 Jul 2025

https://github.com/gopalanand333/approuter-in-kyma

Create Approuter, bind it to XSUAA, expose it to the internet, Everything with one configuration

authentication authentication-middleware kubernetes kyma nodejs security

Last synced: 06 Mar 2026

https://github.com/mmali3287/smartdoorbell

IoT-enabled smart video doorbell using AI face recognition, low-latency real-time streaming, MQTT communication and instant mobile notifications for secure access control.

cplusplus esp32 facerecognition firebase iot kotlin materialdesign ml motiondetection mqtt opencv pushnotifications python raspberrypi realtimevideostreaming security

Last synced: 07 Apr 2026

https://github.com/JuliaAPlavin/SQLCipher.jl

Drop-in replacement for SQLite.jl, using the sqlcipher library for full encryption support.

database encryption security sqlcipher sqlite

Last synced: 06 Apr 2026

https://github.com/tomfaulkner/simple-password-generation

Generate and check secure passwords in Python

haveibeenpwned password-generator passwords security

Last synced: 17 Jul 2025

https://github.com/emmaccen/webauth

Web Authentication API Demo

security webapi webauthn

Last synced: 29 Oct 2025

https://github.com/nomadsdev/ddos-simulation-tool

A DDoS simulation tool to generate high traffic to a server using multiple threads and configurable user agents. For educational purposes only.

concurrency ddos educational http-https multi-threading networking security traffic-simulation user-agent-spoofing windows-api

Last synced: 09 Sep 2025

https://github.com/23seriy/devops-ai-workflows

Curated collection of AI-agent workflows, prompts & rules for DevOps/SRE — Kubernetes debugging, AWS audits, Terraform plan reviews, CI/CD triage, Dockerfile reviews, secrets scanning & incident response. Works with Windsurf, Cursor, Claude Code or any LLM.

ai-agent ai-workflows aws chatops cicd cursor devops docker incident-response kubernetes llm observability platform-engineering prompts security sre terraform windsurf

Last synced: 03 Jun 2026

https://github.com/stuttgart-things/install-configure-vault

setup, configure and use a hashicorp vault instance

ansible podman security vault

Last synced: 10 Apr 2025

https://github.com/chrishubert/password-manager-crypt

🔐 Secure, zero-dependency cryptographic library for password managers with universal runtime support (Node.js, CloudFlare Workers, Browsers)

browser cloudflare-workers cryptography encryption nodejs password-manager security typescript webcrypto zero-knowledge

Last synced: 17 May 2026

https://github.com/t1ltxz-gxd/vaultkey

vaultkey is an open-source Rust library for generating secure, customizable passwords. It supports various character sets and lengths, providing cryptographically secure random passwords for any use case. Contributions are welcome to improve and expand the library.

cryptography key-generation open-source password-generation password-manager random-password rust rust-crate rust-library secure-random security

Last synced: 21 Jun 2025

https://github.com/nickserv/password-entropy

A simple entropy calculator for evaluating password security.

security

Last synced: 05 Apr 2025

https://github.com/zailoxtt/mediacrypt

MediaCrypt is a tool that lets you encrypt text into existing media files (mp3, wav, mp4, ogg and more) and retrieve it using a key.

cipher data-hiding decryption encryption encryption-decryption media media-encryption media-files mediafiles non-commercial non-commercial-license python python3 security security-tools wav

Last synced: 26 Mar 2025

https://github.com/krontab/cisco-hashgen

Generate and verify Cisco-compatible password hashes for Cisco ASA & IOS/IOS-XE.

asa cisco cli firewall networking one-way-hash-functions pbkdf2 router security switch type-5 type-8 type-9

Last synced: 30 Dec 2025

https://github.com/kdawgwilk/blind_index

Securely search encrypted database fields

ecto ecto-extension elixir elixir-lang privacy security

Last synced: 03 Apr 2025

https://github.com/drincann/cry0

A lightweight CLI for generating cold wallets, managing keys, and signing cryptocurrency transactions offline across multiple blockchains.

bip32 bip44 bitcoin blockchain cli cold-wallet ethereum security wallet wallets

Last synced: 12 Jul 2025