Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/XiaomingX/ysoserial-plus

ysoserial 最早在 AppSecCali 2015 演讲 "Marshalling Pickles: how deserializing objects will ruin your day" 中发布，包含适用于 Apache Commons Collections (3.x 和 4.x)、Spring Beans/Core (4.x) 和 Groovy (2.3.x) 的 gadget 链。后续版本增加了对 JRE <= 1.7u21 和其他常见 Java 库的支持。

exploit java security

Last synced: 04 Nov 2025

https://github.com/nidhiyashwanth/how-to-better-secure-your-mobile-application

Guide for securing mobile application against most of threats that still continue to trouble application developers.

application-security security

Last synced: 07 Jan 2026

https://github.com/teemperor/cif

Enforcing information flow in C-languages with Clang.

clang clang-static-analyzer cpp information-flow security static-analysis

Last synced: 28 Jul 2025

https://github.com/carlspring/vertx-vulns

This repository is a collection of vulnerable code examples for Vert.X.

security vertx vulnerabilities vulnerability-detection

Last synced: 02 Jan 2026

https://github.com/jocoders/damn-vulnerable-defi

Explode solidity security solutiuons

contract defi explode foundry security solidity

Last synced: 21 Aug 2025

https://github.com/notreeceharris/pass-shield

🛡️ (POC) This algorithm offers an improved approach to password security by creating a theoretically untraversable value to encrypt and hash passwords much faster than they can be decrypted. The algorithm uses random data to obfuscate and secure passwords, enhancing their protection against attacks.

bruteforce encryption hash password password-generator poc security sha256

Last synced: 22 Aug 2025

https://github.com/mkuhlmann/nextcloud_limit_login_ip

Similar to the official limit_login_to_ip nextcloud app but applies ip limit only to specific groups.

nextcloud security

Last synced: 18 May 2026

https://github.com/unicity-astrid/sage

Run Claude Code as a capability-governed agent on the Astrid OS runtime — WASM capsules (tool broker, native-tool policy gate, installer) plus a Claude Code plugin.

agent astrid capability-security claude mcp rust security wasm

Last synced: 07 Jul 2026

https://github.com/anchapin/luminaguard

Local-first Agentic AI Runtime with Just-in-Time Micro-VMs. Secure agent execution through ephemeral Micro-VM isolation.

agents artificial-intelligence firecracker isolation mcp microvm python rust sandbox security

Last synced: 09 Apr 2026

https://github.com/romnn/helm-outdated-charts

Helm plugin to list and update outdated dependencies of a Helm chart.

best-practices chart ci dependencies devops helm k8s security versioning

Last synced: 09 Apr 2026

https://github.com/Live-Hack-CVE/Discussions

General discution about CVE and security issues

audit cve discussion security

Last synced: 10 Mar 2025

https://github.com/forwardemail/serverauditing.com

Enhance your server security with our comprehensive auditing solutions. Automated monitoring, real-time alerts, and detailed reporting for optimal server performance and security.

alerting alerts audit auditing auditor automated automation monitor monitoring performance real-time repor reporting security server

Last synced: 23 Jun 2025

https://github.com/pranjalco/caesar-cipher-simple

A Python program that implements the Caesar Cipher for encoding and decoding messages. Users can input text, choose shift numbers, and decide whether to encode or decode. Includes a user-friendly loop for multiple operations in one run.

algorithms cipher console-application cryptography python-programming security

Last synced: 30 Mar 2025

https://github.com/anonputraid/zetcipher

Lightweight and secure text encryption tool built for developers and security enthusiasts.

cryptography data-encryption encryption security

Last synced: 13 Jan 2026

https://github.com/terraprovider/.github

Default Community Information Files for the TerraProvider organization on GitHub

entra intune microsoft microsoft-365 security terraform

Last synced: 23 Nov 2025

https://github.com/tituskirch/common-passwords

A list of common passwords that should not be accepted.

password password-safety password-strength passwords security security-tools

Last synced: 18 Apr 2026

https://github.com/bhojpur/vsf

The Bhojpur VSF is a software-as-a-service product used as a Virtual Security Function based on Bhojpur.NET Platform for application delivery.

security virtualization

Last synced: 28 Jul 2025

https://github.com/wmal/e-tornado

E-Tornado is an offensive security system developed over 5 years starting in 2008. It is a powerful remote administration tool that allows for monitoring and performing various actions on other computers remotely.

cybersecurity education offensive-security security security-tools

Last synced: 19 Sep 2025

https://github.com/amarjaleelbanbhan/veripatch

Verified remediation for npm vulnerabilities — scan, sandbox-verify fixes are safe, and get audit-grade evidence reports.

cli cve devsecops docker github-actions nodejs npm sca security supply-chain-security typescript vulnerability-scanner

Last synced: 04 Jul 2026

https://github.com/foospidy/api-gauntlt

Generate Gauntlt scenarios from API specification files.

api gauntlt security web

Last synced: 22 Aug 2025

https://github.com/stephane-martin/sluggissh

a fake SSH server that covers passersby with tar

golang security ssh tarpit

Last synced: 19 Sep 2025

https://github.com/theunknownsoul/awesome-kubernetes-pentesting-guide

My own kubernetes penetration testing favorite methodologies, script, tools and resources.

devsecops kubernetes security trivy-scan

Last synced: 19 May 2026

https://github.com/n1ckl0sk0rtge/unlinkablepseudonyms

A java package for using (un)linkable pseudonyms based on RSA.

cryptography encryption gdpr privacy pseudonymisation pseudonymization security

Last synced: 14 Oct 2025

https://github.com/rurumimic/siege

🏰 공성전

aes cryptography rsa rust security tls

Last synced: 27 Jul 2025

https://github.com/h-vance/cloud-operations-runbook

Production-grade cloud engineering and security runbooks for incident response, troubleshooting, and prevention.

cloud-engineering incident-response runbooks security troubleshooting

Last synced: 02 Jul 2026

https://github.com/Projects-Developer/Land-Registry-Using-Blockchain

The traditional land registry system has been plagued by inefficiencies, corruption, and inaccuracies

blockchain decentralized land-registry property-rights security transparency

Last synced: 11 Sep 2025

https://github.com/jjlibra/intrusion-detection-kddcup99

Intrusion detection engine based on KDDCUP99 datasets.

experiment machine-learning security

Last synced: 23 Mar 2025

https://github.com/brandonnimer/project-1-securing-a-web-app

The walkthrough and technical brief of my first project, Securing a Web Application through Azure

application azure security

Last synced: 05 Oct 2025

https://github.com/filiprokita/passwordgenerator

A simple password generator that creates a random password of a user-specified length, and checks if it meets security requirements. It includes digits, lowercase and uppercase letters, and special characters.

bruteforce characters generator good-password hack password password-generator password-strength python python3 rando safety security validation

Last synced: 23 Jul 2025

https://github.com/r3li4nt/onionymous

A modern, privacy-first desktop client for the Tor network. Un cliente de escritorio moderno para la red Tor, enfocado en privacidad.

anonymity hacking pentesting privacy rust security tor windows

Last synced: 29 May 2026

https://github.com/dog-broad/keybridge-server

Secure WebSocket server for remote keyboard control with AES-256-GCM encryption, token-based authentication, and QR code pairing. Control your computer's keyboard from any mobile device over WiFi.

aes-encryption automation keyboard-control pynput python qr-code remote-control security websocket websocket-server

Last synced: 17 Jan 2026

https://github.com/seesee010/hidder

Did you ever wish to have credentials, which you can push without worrying or creating a seperated file like config.yml.example. With the cli tool `hidder` worrying or seperated example files are now over! Now you can just hide special lines from pushing and then restore them!

c cli devops git-tools privacy secrets-management security

Last synced: 08 Mar 2026

https://github.com/VKrebs/screen-sentinel

🛡️ Screen Sentinel – A personnal challenge to build a secure, tamper-resistant Windows lock screen overlay. The goal: block all interaction while keeping the desktop visible, persist as a Windows Service, enforce security restrictions, and log access attempts. 🔒

dotnet experimental hacking hardening lockscreen screen-lock security session-management windows-security

Last synced: 01 Apr 2025

https://github.com/ancat/lutra

Lutra automatically detects and destroys reverse shells.

ebpf security

Last synced: 17 May 2026

https://github.com/goto-eof/ares-guard

Ares Guard is a java application which allows you to automatically configure Apache2 to allow only authorized indexing bots to access your website.

security

Last synced: 02 Jul 2026

https://github.com/blamca/solidity-development-toolkit

Complete toolkit for Solidity & Foundry development with templates, utilities, and best practices

blockchain ethereum foundry security smart-contracts solidity

Last synced: 18 May 2026

https://github.com/a51cf/packapi

🔍 Discover insights from Composer, NPM, GitHub, and more with a unified, strongly-typed API that simplifies multi-ecosystem data analysis.

composer downloads jsdeliver metadata npm package package-metadata postgresql security typescript

Last synced: 11 Apr 2026

https://github.com/marynahl/pawtel-platform

Two Spring Boot microservices for a “dog hotel” demo—auth (JWT) + data, Postgres, Docker Compose, tests.

docker docker-compose java jwt maven microservice postgres rest-api security spring-boot

Last synced: 10 Apr 2026

https://github.com/tuladhar/bypassing-branch-protections-with-github-actions

Demo - Bypassing Branch Protections with Github Actions

github githubactions security

Last synced: 30 Jun 2025

https://github.com/sequenxa/eslint-config

Secure ESLint + Prettier config for trust-grade TypeScript, React, and Tailwind apps. Built for AI, identity, and verification workflows. Maintained by Sequenxa.

compliance eslint linting open-source prettier react security sequenxa tailwindcss trust-infrastructure typescript

Last synced: 10 Apr 2026

https://github.com/mondial7/agrishop-ecommerce-php

Information Security Course Project @ UNIBZ

ecommerce php security

Last synced: 16 May 2026

https://github.com/marcstraube/zappzarapp-php-audit-logger

GDPR-compliant audit logging for PHP with injectable encryption, configurable storage, and tamper-proof checksums.

audit-log encryption gdpr php security

Last synced: 15 Apr 2026

https://github.com/mikaelvesavuori/mikroid

A lightweight, customizable ID generator with zero dependencies.

id id-generator security

Last synced: 24 Feb 2026

https://github.com/dpbm/infosec-course

My progress on infosec course from freecodecamp

banner banner-grab challenges freecodecamp infosec js nmap nodejs pip py python scripts secu security socket

Last synced: 01 May 2026

https://github.com/suzuki-shunsuke/verify-go-asset-action

GitHub Action to verify GitHub Releases Assets of my CLI tools built with Go

github-actions oss security

Last synced: 16 Oct 2025

https://github.com/gedigi/noissh

A remote shell that survives network changes — instant feel on lossy/high-latency links, roams across IP changes and sleep/resume, secured end-to-end by the Noise Protocol. 100% safe Rust.

mosh networking noise-protocol remote-shell roaming rust security ssh terminal udp

Last synced: 28 Jun 2026

https://github.com/soenneker/soenneker.github.repositories.security

A utility library for GitHub Repository Security related operations

csharp dotnet github githubrepositoriessecurityutil repositories security util

Last synced: 14 May 2026

https://github.com/nnemirovsky/claude-passthru

Regex-based permission rules for Claude Code via hooks

claude-code claude-code-hook claude-code-plugin developer-tools permissions regex security

Last synced: 15 Apr 2026

https://github.com/iman-zamani/z-vault

A simple password manager built for personal use. This app securely stores and retrieves passwords for various accounts. It's designed to be minimalistic, focusing on ease of use and security.

cpp cross-platform password-manager qt qt5 security

Last synced: 16 Mar 2026

https://github.com/beadon/ai-security-reviewer

Two-layer AI security review pipeline for npm/JS — automated tool scanning + Claude semantic analysis of what tools cannot catch

claude claude-code code-review devsecops iac-security javascript llm nodejs owasp sast security semgrep supply-chain-security terraform

Last synced: 01 Jun 2026

https://github.com/mizcausevic-dev/identity-command-center

React + TypeScript control-plane for access posture, policy exceptions, remediation tracking, and executive identity governance visibility.

access-review control-plane frontend iam identity-governance react security typescript vite

Last synced: 01 Jun 2026

https://github.com/tempehs/practical_approach_to_secure_software_architecture_resources

A practical and hands-on workshop for teachers to build their confidence, skills and tools to deliver the NESA Software Engineering course. Focusing on the 2 focus areas ‘Secure Software Architecture’ and ‘Programming for the Web’.

2fa flask github security vscode workshop-materials

Last synced: 15 Oct 2025

https://github.com/ribafs/laravel6-acl

Package to ACL implements Laravel 6

access acl laravel laravel6 php security

Last synced: 27 Feb 2026

https://github.com/filiprokita/portscanner

PORTSCANNER is a simple Python program with GUI that allows users to check whether a given port is open on a specified IP address. The program uses socket programming to establish a connection to the specified port, and displays a message indicating whether the port is open or closed.

network network-analysis network-monitoring network-security network-tools networking port-scanner python python3 security socket-programming tkinter

Last synced: 28 Jun 2026

https://github.com/zufardhiyaulhaq/asdf-starboard

Starboard plugin for the asdf version manager

asdf asdf-plugin security security-tools starboard

Last synced: 14 Jul 2026

https://github.com/untanukii/serverguardbot

🔒 A Discord bot that verifies user membership in required servers using OAuth2

discord discord-bot discordjs discordoauth2 discordsecurity javascript oauth2 security

Last synced: 24 Jan 2026

https://github.com/nisanth2004/restful-web-services-springboot-3.1.x

Spring Boot provides a convenient and powerful way to build RESTful web services. REST (Representational State Transfer) is an architectural style that uses HTTP protocols for communication between client and server.

api client connection database eclipse h2 intellij java jdbc mysql rest security soap springboot testing

Last synced: 16 Mar 2026

https://github.com/0xcyberlitech/ssh

SSH sur Debian : guide de durcissement, bonnes pratiques, audit et supervision des connexions.

2fa brute-force-protection cryptography debian hardening homelab key-management linux openssh port-forwarding security ssh

Last synced: 07 May 2026

https://github.com/truefinder/notion_public_page_search

[企業向け] NotionワークスペースにおけるPublicページを検出し、セキュリティリスクを評価するツールです。

notion notion-api notion-integrations security security-audit security-tools

Last synced: 15 Apr 2026

https://github.com/buession/buession-shirojs

A security framework for JavaScript or TypeScript.

authentication authorization javascript permission privilege security shiro typescript vue

Last synced: 27 Feb 2026

https://github.com/iamthemitchell/oktalogger

Poll Okta for audit logs and index the logs in AWS OpenSearch via Lambda function

aws aws-lambda okta opensearch security

Last synced: 06 Feb 2026

https://github.com/karmatr0n/mongodb_scanner

This a MongoDB scanner written in Ruby.

bindata mongodb networking ruby scanner scanning security

Last synced: 22 Jan 2026

https://github.com/tjenkinson/is-github

A small JavaScript library which checks if the provided IP address belongs to GitHub.

github ip ip-address secure security validate validation

Last synced: 23 Feb 2026

https://github.com/beauwilliams/solidity-reentrancy-attack-example

Learn how to exploit a reentrancy attack to steal ether. Then see how the exploit is mitigated with the check effects interaction pattern.

ethereum exploit security solidity solidity-contracts solidity-language

Last synced: 29 Jan 2026

https://github.com/sucho6996/shadowsend-a-secure-communication-platform

This is a Java Spring boot and JS React project where sender will send a message which will be encrypted and embedded in an Image provided by the sender and the receiver will be able to see those images with sender's number in his/her inbox . Once the receiver will read the message it'll be deleted automatically for a traceless conversation.

cryptography eureka-discovery-client eureka-server feign-client git github java jpa jwt-authentication jwt-token messaging microservices open-feign platform security spring-boot spring-security steganography

Last synced: 01 Mar 2026

https://github.com/greysquirr3l/shadowforge

Production-grade quantum-resistant steganography toolkit in Go. Implements 7 image/audio/text techniques, Kyber-1024 and Dilithium3, Reed-Solomon error correction, and 4 distribution patterns via a full CLI, following Clean Architecture (DDD + CQRS).

audio-processing clean-architecture cli cqrs cryptography ddd dilithium go image-processing kyber post-quantum-cryptography pqc reed-solomon security steganography

Last synced: 19 Jan 2026

https://github.com/pnelson/top95

Package top95 tests strings against a popular wordlist.

password security

Last synced: 30 Jan 2026

https://github.com/liteobject/pihole-llm-analytics

AI-powered DNS log analyzer for Pi-hole - detect suspicious domains, traffic patterns, and security threats using gpt-oss.

dns gpt-oss network-security ollama pi-hole python security

Last synced: 15 Apr 2026

https://github.com/aboehm/clt2025-secret-management

Vortrag auf Chemnitzer Linux Tage 2025 über Secret Management im Umfeld von IaC

ansible chemnitzer-linux-tage kubernetes opentofu sealed-secrets security security-tools sops terraform vault

Last synced: 15 Apr 2026

https://github.com/brandonhon/tls-cert-monitor

Production-ready SSL/TLS certificate monitoring tool with Prometheus metrics

cetificate-monitoring cross-platform monitoring nuitka prometheus python security ssl tls

Last synced: 31 Jan 2026

https://github.com/kevinburbanodev/archgo

🚀 Go template with hexagonal architecture, Gin Framework, JWT, Rate Limiting, Swagger, and Docker. Includes testing, security, and full documentation.

api clean-architecture docker gin gin-framework go golang gorm hexagonal-architecture jwt postgresql rate-limiting rest-api security swagger testing

Last synced: 15 Apr 2026

https://github.com/spacepatcher/google-workspace-gmail-collector

👁 App for collecting Gmail logs from your Google Workspace account and sending them to Kafka

bigquery gmail google-workspace security soc

Last synced: 31 Jan 2026

https://github.com/thomasvincent/cloudflare-ufw-sync

Automated synchronization of Cloudflare IP ranges with UFW firewall rules. Enterprise-grade security tool for Linux servers using Cloudflare CDN/WAF

automation cloudflare cloudflare-api debian devops firewall firewall-rules infrastructure linux network-security networking python security sync system-administration ubuntu ufw

Last synced: 31 Jan 2026

https://github.com/auth0-blog/nestjs-authorization

Starter NestJS project to follow along "The Complete Guide to NestJS API Authorization with Auth0".

auth0 identity nest nestjs nestjs-backend security

Last synced: 15 Apr 2026

https://github.com/visheshgupta25/macos-askpass

🔐 Enable secure sudo authentication in macOS CI/CD pipelines for automated workflows, ensuring smooth operation without tty errors.

askpass authentication automation gui homebrew homebrew-tap keychain macos openssh package-manager password-management security ssh ssh-askpass sudo terminal testing

Last synced: 15 Apr 2026

https://github.com/zhaori96/krot

krot is a robust and flexible Go package designed to manage and rotate keys or secrets, such as those used to sign JWTs. It's built with customization in mind, allowing users to implement their own strategies by leveraging the interfaces provided.

app key key-rotation kr rotation sec security

Last synced: 01 Feb 2026

https://gitlab.com/openstrike/abuseipdb-client

Client code for v2 of the AbuseIPDB API

perl security

Last synced: 25 Feb 2026

https://github.com/guardsarm/rust-memory-safety-examples

Educational examples demonstrating memory-safe programming patterns in Rust

education examples memory-safe rust security tutorial

Last synced: 13 Mar 2026

https://github.com/dmitryolshansky/glow

Glow - meta os for distributed personal computing

network os oss p2p security

Last synced: 12 Oct 2025

Security Awesome Lists
the-book-of-secret-knowledge 74 Awesome-Hacking 83 awesome-security 330 awesome-web-security 425 awesome-ctf 220 awesome-hacker-search-engines 568 android-security-awesome 230 awesome-privacy 641 awesome-incident-response 221 Awesome-WAF 175 awesome-web-hacking 31 DevSecOps 188 awesome-security-hardening 207 awesome-infosec 215 awesome-cybersecurity-blueteam 252 backend-cheats 961 WebHackersWeapons 431 awesome-vehicle-security 227 awesome-sec-talks 265 awesome-game-security 92 awesome-nodejs-security 221 awesome-cloud-security 154 awesome-iot-hacks 70 awesome-embedded-and-iot-security 131 alternative-frontends 119 DevSecOps 48 Awesome-FL 4,069 Awesome-Cybersecurity-Datasets 54 awesome-golang-security 34 awesome-windows-domain-hardening 70 Crypto-OpSec-SelfGuard-RoadMap 473 awesome-azure-architecture 311 osx-and-ios-security-awesome 59 awesome-lists 737 awesome-llm-security 101 awesome-executable-packing 756 awesome-aws-security 173 awesome-ethereum-security 81 awesome-vulnerable-apps 100 Awesome-Jailbreak-on-LLMs 427 awesome-he 90 MobileHackersWeapons 73 npm-security-best-practices 33 awesome-security-GRC 81 awesome-anti-forensic 143 security-apis 114 awesome-python-security 35 awesome-opa 228 awesome-runners 38 graph-adversarial-learning-literature 314
Security Categories
Uncategorized 3,631 fl in top-tier journal 3,256 :books: Literature 2,624 fl in top ml conference and journal 1,564 Tools 1,422 Pentesting 1,141 Operating Systems 1,127 Attack 1,071 Other Lists 796 fl in top ai conference and journal 789 カテゴリ 732 fl in top cv conference and journal 673 Papers 605 Weapons 500 Resources 497 Threat Hunting: 480 **Мероприятия** 465 Defense 449 Official 439 Malware Analysis 433