An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/robsd/js-password-generator

A password generator application written in JavaScript with the option of 8-128 character passwords consisting of letters (lowercase and uppercase), numbers and symbols.

app application bootstrap bootstrap5 cyber cyber-security generator html html5 javascript js password password-generator security tool web

Last synced: 15 May 2026

https://github.com/kakwa/cpe-search

Search Tool for CPE (Common Platform Enumeration) Filters

common-platform-enumeration cpe cve cve-search html national-vulnerability-database nist nvd perl security xslt

Last synced: 25 Jan 2026

https://github.com/mitre/heimdall-baseline

(WIP) InSpec Profile for the Heimdall Application

heimdall inspec mitre-corporation security security-tools

Last synced: 16 May 2026

https://github.com/scality/ghaudit

Github organisation security auditing tool

github it security security-audit security-compliance

Last synced: 18 May 2026

https://github.com/vsingh55/DevSecOps-Pipeline

DevSecOps Pipeline Pro ensures secure, automated, and continuously monitored CI/CD processes on GCloud. It integrates security by design, leverages automation through Jenkins and Docker, and employs continuous monitoring with Prometheus and Grafana to maintain application and infrastructure health.

automation devsecops docker dockerhub gcp gmail graphana kubernetes prometheus security sonarqube terraform trivy

Last synced: 20 Jul 2025

https://github.com/gioragutt/scan-unverified-actions

This action scans actions used in your workflow files and outputs those that are unverified by github.

github-action javascript-action security

Last synced: 16 May 2026

https://github.com/michelboucey/brutedrop

A simple tool to ban SSH invalid user for all machine accesses

firewall-configuration iptables security ssh-bruteforce

Last synced: 17 Feb 2026

https://github.com/cmin764/usphere

Modern User Management System

bootstrap css html jquery js php security user validation

Last synced: 10 Apr 2026

https://github.com/gregorykogan/jwt-microservice

A high-performance JWT authentication microservice written in Go, featuring Redis caching and Docker support.

authentication auto-logout caching docker docker-compose go high-performance jwt load-balancing microservice nginx redis security structured-logging testing token-refresh uuid

Last synced: 04 Apr 2026

https://github.com/krontab/cisco-hashgen

Generate and verify Cisco-compatible password hashes for Cisco ASA & IOS/IOS-XE.

asa cisco cli firewall networking one-way-hash-functions pbkdf2 router security switch type-5 type-8 type-9

Last synced: 30 Dec 2025

https://github.com/mattsalves/securepassgen

SecurePassGen is a lightweight C++ application designed to generate strong and customizable passwords. It offers users the ability to specify password length, inclusion of special characters, and spacing between characters, ensuring the creation of secure passwords tailored to individual preferences.

cpp password-generator security

Last synced: 21 Mar 2025

https://github.com/bug-ops/exarch

Secure archive library: TAR/ZIP/7z extraction & creation with CVE protection. Type-safe Rust core, Python/Node.js bindings, zero unsafe code.

7z archive cli compression cve-protection extraction library memory-safe napi-rs nodejs path-traversal pyo3 python rust security tar zip zip-bomb

Last synced: 06 Feb 2026

https://github.com/stuttgart-things/install-configure-vault

setup, configure and use a hashicorp vault instance

ansible podman security vault

Last synced: 10 Apr 2025

https://github.com/kaliforniagator/secshell-go

An implementation of SecShell now written in go with security features like command whitelisting and blacklisting built-in. It also uses sanitizing to ensure commands are clean from most injection attacks.

cyber cybersecurity go golang security shell

Last synced: 12 May 2026

https://github.com/x3onkait/DreamHackWargameWriteup

나의 드림핵 워게임 풀이

security wargame

Last synced: 11 Mar 2025

https://github.com/badchars/steganography-mcp

128-tool MCP server for steganography analysis — LSB detection, chi-square steganalysis, RS analysis, JPEG/F5/JSteg/OutGuess detection, BPCS, video & GIF stego, network covert channels, MP3 stego, spread spectrum, archive stego, QR code analysis, audio stego, text encoding, file forensics. 100% offline, zero API keys.

ai bpcs claude cli ctf digital-forensics forensics image-analysis lsb mcp model-context-protocol mp3-steganography network-steganography qr-code security spread-spectrum steganalysis steganography typescript video-steganography

Last synced: 30 Jun 2026

https://github.com/badchars/supply-chain-mcp-server

90-tool MCP server for software supply chain security — OSV, GHSA, NVD, EPSS, CISA KEV, npm, PyPI, crates.io, RubyGems, NuGet, Packagist, Go, deps.dev, Scorecard, Rekor, ClearlyDefined, Repology, typosquatting detection

ai-agent claude cve dependency-security llm mcp model-context-protocol npm-security openssf osv pypi sbom scorecard security sigstore software-composition-analysis supply-chain supply-chain-security typosquatting vulnerability

Last synced: 30 Jun 2026

https://github.com/badchars/darknet-mcp-server

66-tool MCP server for dark web intelligence — breach data, ransomware tracking, Tor .onion access, malware analysis, blockchain intel, exploit search, stealer logs

ai-agent breach claude cybersecurity dark-web darknet exploit malware mcp model-context-protocol osint ransomware security stealer-logs threat-intelligence tor

Last synced: 30 Jun 2026

https://github.com/aicent-stack/rpki

AI-native Zero-Trust security layer. Parallel tensor watermarking and RPKI-based identity attestation. 300µs quarantine for malicious pulses.

ai ai-infra aicent depin embodied-ai gtiot low-latency rpki rttp rust security sovereign-ai zcmk zero-trust zero-trust-ai

Last synced: 06 Apr 2026

https://github.com/jnbdz/hping3

hping3 packaging for Kali Linux (with a small correction)

kali security

Last synced: 21 Jul 2025

https://github.com/eld/turbopump

Session middleware and driver for the Rocket web framework (https://rocket.rs)

cookies rocket rust security sessions web

Last synced: 18 May 2026

https://github.com/kizzycode/ma_proper

This crate provides the cleaning memory allocator `MAProper`

memory-allocation memory-allocator memory-management security

Last synced: 16 Jun 2025

https://github.com/blue-davinci/socialaid

[Demo API] SocialAid Tracker is a Management Information System (MIS) designed to track beneficiaries of social protection programs. It enables efficient storage and retrieval of program details, household geolocation data, and household member information.

api backend golang rest-api security

Last synced: 15 May 2026

https://github.com/emmaccen/webauth

Web Authentication API Demo

security webapi webauthn

Last synced: 29 Oct 2025

https://github.com/ojford/pam-credential-process

PAM module to set authentication token to output of arbitrary executable

authentication pam pam-authentication pam-module security

Last synced: 03 Apr 2025

https://github.com/jnaulty/cargo-diff

Security Review Utility to help highlight risk signals in reviews of dependency updates.

dependency-analysis rust security supply-chain

Last synced: 18 May 2026

https://github.com/authress/csharp-starter-kit

The Authress Starter Kit for C#.Net. Includes Authentication, Authorization, user identity and role management

api asp-net authentication authorization authress backend csharp dotnet mvc security service starter-kit

Last synced: 28 Dec 2025

https://github.com/zailoxtt/mediacrypt

MediaCrypt is a tool that lets you encrypt text into existing media files (mp3, wav, mp4, ogg and more) and retrieve it using a key.

cipher data-hiding decryption encryption encryption-decryption media media-encryption media-files mediafiles non-commercial non-commercial-license python python3 security security-tools wav

Last synced: 26 Mar 2025

https://github.com/masdxi/right-to-left-attack-solidity

An example of right to left attack on smart contract

rtlo security smart-contracts solidity

Last synced: 19 May 2026

https://github.com/acebot712/promptguard-python

PromptGuard Python SDK — Drop-in security for AI applications

ai-firewall ai-safety llm prompt-injection python sdk security

Last synced: 06 Apr 2026

https://github.com/webpro255/agentlock

The Open Authorization Standard for AI Agents. Framework-agnostic tool permissions, identity verification, scoped access control, and audit logging for any AI agent.

access-control ai-agents ai-safety authorization guardrails llm owasp permissions security tool-calling

Last synced: 06 Apr 2026

https://github.com/sinantech/jwt-authentication

🔐 This Application Contains JWT Authorization and Authentication Example From AmigosCode

authentication authorization filter java jsonwebtoken jwt security spring-boot

Last synced: 15 May 2026

https://github.com/k4yt3x/wifi-keygen

A utility that generates a long, complex and secure wifi password.

password security wifi-keygen

Last synced: 07 Sep 2025

https://github.com/trickfilm400/gitlab-security-scan-parser

CI/CD Job to analyize Application test files for GitLab's Free & Premium tier (as it is only available in Ultimate)

ci-cd cicd gitlab parser pipeline sast scanner security

Last synced: 12 May 2026

https://github.com/devbisme/locknotey

Simple script that stores encrypted data within itself and allows you to modify it using any editor.

password-store privacy security

Last synced: 26 Mar 2025

https://github.com/farrosfr/noa

A multi-layer content filtering and system hardening solution designed for high-performance blocking and un-bypassable enforcement.

blocker security

Last synced: 15 May 2026

https://github.com/haxurn/better-middleware

a framework-agnostic authentication middleware for Better Auth that provides robust session validation, intelligent caching, and comprehensive error handling for your backend routes.

auth better-auth middleware secure-routes security

Last synced: 15 May 2026

https://github.com/typek22/cfmx_compat_python

A Python implementation of ColdFusion default encryption and decryption with CFMX_COMPAT and UUEncoding based on Railo source.

cfmx-compat coldfusion decrypt encrypt python railo security uuencode

Last synced: 30 Jun 2026

https://github.com/lookyman/security

Wraps PHP's password_* functions in authenticated encryption

encryption password security

Last synced: 23 Jun 2026

https://github.com/wreos/dart_secrets_scanner

dart_secrets_scanner is a command-line tool designed to scan Dart and related files in Flutter projects for hardcoded sensitive information such as API keys, tokens, passwords, and other credentials.

dart devsecops flutter scanner security security-tools

Last synced: 18 May 2026

https://github.com/okkindel/sekurak

Computer Sercurity - set of programs to do various illegal things.

security

Last synced: 29 Apr 2025

https://github.com/23seriy/devops-ai-workflows

Curated collection of AI-agent workflows, prompts & rules for DevOps/SRE — Kubernetes debugging, AWS audits, Terraform plan reviews, CI/CD triage, Dockerfile reviews, secrets scanning & incident response. Works with Windsurf, Cursor, Claude Code or any LLM.

ai-agent ai-workflows aws chatops cicd cursor devops docker incident-response kubernetes llm observability platform-engineering prompts security sre terraform windsurf

Last synced: 03 Jun 2026

https://github.com/kmotoko/server-guideline

To-Do's and best practices for Linux web/database server

debian guidelines hardening mysql security ubuntu

Last synced: 18 May 2026

https://github.com/ishanoshada/lockix

A secure file encryption and decryption tool

cryptography encryption files security

Last synced: 07 Mar 2026

https://github.com/lily-osp/rfid-access-control-system

This project is just one of many examples of how we can apply the use of google theachable machine.

access-control arduino automation computer-vision nfc rfid security

Last synced: 19 May 2026

https://github.com/byjpr/plug_shopify_verify_timestamp

Validates inbound connection timestamp delta, designed for Shopify App Bridge

app-bridge elixir plug security shopify shopify-app shopify-embedded-applications

Last synced: 21 May 2026

https://github.com/parthur006/cisco-junior-cybersecurity-analyst-notes

Anotações e resumos da minha jornada de estudos na trilha de carreira Junior Cybersecurity Analyst, conectando desenvolvimento de software com segurança da informação.

ccst cisco cyber-threat-management cybersecurity endpoint-security ethical-hacking infosec network-defense networking redes security seguranca-da-informacao study-notes

Last synced: 16 Feb 2026

https://github.com/jenkinsci/redhat-codeready-dependency-analysis-plugin

A Jenkins plugin by Red Hat, to scan the dependency stack and give information related to vulnerabilities, popularity, maintainability, compatibility and more

analysis crda dependencies dependency-analysis deprecated devsecops maintainability redhat scanning security vulnerabilities

Last synced: 30 Sep 2025

https://github.com/rezen/hardcidr

Dockerized hardcidr

osint security

Last synced: 09 Oct 2025

https://github.com/wakeful/trick

Tactician of Role-Interchanging Cloud Keys (Effortless AWS persistence via AssumeRole).

aws penetration-testing readteam red red-team redteam-tools security security-automation security-tools

Last synced: 15 May 2026

https://github.com/indiana-university/puppet-aide

This puppet module manages the installation and configuration of AIDE (Advance Intrusion Detection Environment)

aide audit auditing cis cis-benchmarks file-integrity ids intrusion-detection puppet puppet-module security

Last synced: 13 Apr 2025

https://github.com/rogeruiz/repasar

A GitHub Action to run git-verify-commit on latest SHA on push

github-actions github-actions-ci gpg-signatures security

Last synced: 18 May 2026

https://github.com/creatornader/oss-security-scan

Reusable GitHub Actions workflow: typos + gitleaks + trufflehog + osv-scanner for public OSS repos. One uses: line.

github-actions gitleaks oss osv-scanner reusable-workflow security trufflehog

Last synced: 03 Jul 2026

https://github.com/mikehorn-git/routeros-hardening

Secure and Harden your MikroTik RouterBoard / RouterOS.

hardening mikrotik routerboard routeros script security

Last synced: 11 May 2025

https://github.com/hown3d/image-checker-k8s

A tool to update your kubernetes containers to newest Digest SHA in Container Registry

containers kubernetes security

Last synced: 28 May 2026

https://github.com/ricsanfre/ansible-role-security

Security Hardening tasks on Linux hosts

ansible-role security ssh ssh-config

Last synced: 20 May 2026

https://github.com/kingkyylian/linwarden

Rootless Linux host inventory and hardening audit CLI

cli devops hardening linux python sarif security sysadmin

Last synced: 15 May 2026

https://github.com/vbonk/repo-template

Baseline New Repository Template. .gitignore (multi-language). README.md (solo-focused). CLAUDE.md (with Copilot notes). CI workflow (.github/workflows/ci.yml) without review requirements. License. Basic structure.

ai-coding ai-first boilerplate ci-cd claude-code codex copilot cursor devcontainer developer-tools devtools gemini github-actions github-template prompt-injection repository-template security starter-template template windsurf

Last synced: 02 Apr 2026

https://github.com/nikogura/keymaster-cli

cli for keymaster

security

Last synced: 11 Jan 2026

https://github.com/kadirsenturk/argus-osint-tool

Advanced OSINT tool for username reconnaissance across 90+ websites, using Python and Playwright for high accuracy.

automation osint playwright python python3 security

Last synced: 18 May 2026

https://github.com/ecgalaxy/ca_certificates

Ansible role which installs ca-certificates and adds CommisSign certificates to the trusted CAs list - Repository mirror - development takes place on code.europa.eu

ansible-role ca-certificates security

Last synced: 13 Apr 2025

https://github.com/IowaComputerGurus/dnn.secureMyInstall

A utility function, for developer use, to help transition user accounts from Encrypted to Hashed. Great for older DNN Installations

dnn dnncms dotnetnuke security

Last synced: 12 May 2025

https://github.com/0xjonaseb11/adv_security.3.0

Advanced security | Exploitation of protocol vulnerabilities | Advanced smart contract seurity

auditing defi protocol-security security smartcontracts solidity vulnerability-detection

Last synced: 18 May 2026

https://github.com/star7js/macos-fingerprint

Comprehensive macOS system fingerprinting tool for security auditing and change detection

fingerprinting macos python security security-audit system-administration

Last synced: 07 Mar 2026

https://github.com/gusenov/vpn-setup-sh

Настройка VPN для безопасного подключения к интернету.

openvpn security vpn

Last synced: 30 Jun 2026

https://github.com/riklewis/better-headers

Improve the security of your website by easily setting HTTP response headers to enable browser protection

http-headers security wordpress wordpress-plugin

Last synced: 13 May 2026

https://github.com/cgustav/aws-iot-tools

Boilerplates and practical applications designed to streamline the development and deployment of solutions using AWS IoT.

alexa arduino aws aws-cli cloud community innovation iot iot-application iot-platform knowledge nodemcu-esp8266 security shell sketch terraform

Last synced: 07 Apr 2026

https://github.com/tziporaziegler/ziegler-2015-mco-243

Code written for Operating Systems class - Touro College, Spring 2015

command-line compiler concurrency java md5 memory-allocator microprocessor networking scheduler security socket

Last synced: 10 Jan 2026

https://github.com/dimasma0305/wp-taint-scan

Go static taint-analysis engine that finds vulnerabilities in WordPress plugins — WordPress-aware (capability tiers, nonce≠authz, REST/AJAX entrypoints). Detects SQLi, XSS, IDOR, privesc, RCE. Built on php-parser-go.

appsec bug-bounty golang php sast security security-tools static-analysis taint-analysis vulnerability-scanner wordpress wordpress-plugin

Last synced: 30 Jun 2026

https://github.com/apathy-ca/sark

Zero-trust gateway for AI systems. OPA policies, audit logging, authentication (OIDC/LDAP/SAML), MCP/HTTP/gRPC adapters. FastAPI + Rust extensions. Production-ready.

ai-governance api-gateway audit-logging authentication authorization fastapi llm-security mcp model-context-protocol opa policy-engine python rust security zero-trust

Last synced: 27 May 2026

https://github.com/JuliaAPlavin/SQLCipher.jl

Drop-in replacement for SQLite.jl, using the sqlcipher library for full encryption support.

database encryption security sqlcipher sqlite

Last synced: 06 Apr 2026

https://github.com/jareechang/github-oidc-example

Github Actions deployment to AWS with OpenID Connect Example

authentication aws githubactions oidc s3 security terraform

Last synced: 18 May 2026

https://github.com/drincann/cry0

A lightweight CLI for generating cold wallets, managing keys, and signing cryptocurrency transactions offline across multiple blockchains.

bip32 bip44 bitcoin blockchain cli cold-wallet ethereum security wallet wallets

Last synced: 12 Jul 2025

https://github.com/alphacrack/aws-cdk-secure-constructs

Secure-by-Design AWS CDK Layer 2 Constructs with well architected Hardening

aws aws-cdk aws-security cdk cloud-security devsecops iac infrastructure-as-code security typescript

Last synced: 04 Jul 2026

https://github.com/arcjet/mcp

Arcjet Model Context Protocol (MCP) server. Help your AI agents implement bot detection, rate limiting, email validation, attack protection, data redaction.

bot-detection devtools mcp mcp-server security

Last synced: 18 May 2026

https://github.com/hdaklue/larapath

A secure, fluent path builder for PHP with sanitization strategies and Laravel integration

composer-package laravel path-builder php security

Last synced: 18 May 2026