Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/nirodg/hyper-api

A Quarkus extension for instant, zero-boilerplate, secured CRUD APIs

api-rest backend cache java kafka llm quarkus quarkus-extension security

Last synced: 28 Apr 2026

https://github.com/hackesticmedusa/password-manager

Password Manager is a web application that allows users to securely store and manage their passwords. Built with React and Vite, it offers a user-friendly interface and robust functionality.

clipboard-functionality javascript mit-license open-source password-management react responsive-design security user-authentication vite web-application

Last synced: 08 May 2026

https://github.com/pedroestevaodev/advanced-authentication

Advanced authentication demo using Next.js 14 & NextAuth v5: OAuth, credentials, email verification, 2FA, role-based access (Admin/User), secure API routes, dynamic login/register components, password reset, and extensive session handling with custom hooks. Includes social login with Google & GitHub.

2fa authentication authjs email-verification middleware nextauth nextjs oauth react role-based-access-control security

Last synced: 08 May 2026

https://github.com/lazauk/acr-ociartifact-cli

Securely build custom Docker image from OCI artifact in Azure Container Registry (ACR), using Azure CLI.

acr artifact azure cli container docker nginx oci open-container-initiative registry security

Last synced: 09 May 2026

https://github.com/sourcefuse/arc-spa-csp

Production-ready CSP injector for React, Angular & VITE projects. Smart auto-detection, environment variables, workspace support. Enterprise-grade SPA security.

angular build-tool content-security-policy csp react security single-page-application spa typescript web-security xss-protection

Last synced: 09 May 2026

https://github.com/mamamia0729/enterprise-linux-docker

🐳 Production-ready multi-distribution Linux environment with Docker. Features RHEL UBI 9, Ubuntu 22.04 LTS & CentOS 7 with enterprise security, monitoring & Infrastructure as Code. Built by AWS|Azure AZ-104|CCNA|Security+ certified professional.

centos containerization devops docker docker-compose enterprise infrastructure-as-code linux monitoring portainer rhel security ubuntu

Last synced: 10 Jun 2026

https://github.com/mughal-baig/agentic-workflow-guard

Scan GitHub Actions workflows for AI-agent injection and unsafe prompt flows

ai-agents code-scanning devsecops github-actions llm prompt-injection sarif security

Last synced: 30 May 2026

https://github.com/jtauschl/moz-certs-mobileconfig

Generate and optionally sign a macOS/iOS .mobileconfig profile from Mozilla's trusted root certificates.

automation ca-bundle certificates curl ios macos mobileconfig mozilla nss security

Last synced: 13 Apr 2026

https://github.com/stylepatrick/spring-boot-web-basic-security-template

Possibilities of basic auth + oauth2 login. Basic HTTP Auth with WebMVC and Spring Security. User Repository to PostgresDB and different Roles. OAuth2 connection to Google client.

basic-authentication oauth2 postgresql security spring-boot

Last synced: 09 May 2026

https://github.com/yjdoc2/kerberos-js-module

Node package for giving an API over Kerberos protocol.This gives interface to create Authentication server, Ticket Granting Server, and Servers to be protected.

kerberos-protocol nodeje security

Last synced: 09 May 2026

https://github.com/sentinez/quadrum

🗡️ Sentinez Quadrum // Sentinel of the Fourth Layer

ebpf go security

Last synced: 10 May 2026

https://github.com/geekcell/terraform-aws-waf

Terraform module to provision an AWS Web Application Firewall.

aws firewall security terraform terraform-module waf web-application-firewall

Last synced: 10 May 2026

https://github.com/fsero/beekeeper_ansible

Ansible playbooks and modules used to setup Beekepeer project

docker honeypot security ssh

Last synced: 10 May 2026

https://github.com/jakbin/django-tor

Run your django website on tor using django_tor

django onion onion-service onionshare python security tor

Last synced: 10 May 2026

https://github.com/jeremywildsmith/shadowhash-distributed

Elixir distributed Shadow File password cracker with GPU accelerated cracking for md5crypt hashing algorithm.

cracking-hash cracking-hashes cracking-password cuda distributed-systems elixir erlang hashing nx security

Last synced: 11 May 2026

https://github.com/zamberjo/odoo-security-audit

Scripts for Odoo security audit tool

odoo security

Last synced: 10 Jun 2026

https://github.com/chintanshah35/secretguard

Scan source code for secrets, credentials, and PII — CLI and Node.js API

cli credentials devsecops nodejs pii secret-scanning security typescript

Last synced: 10 Jun 2026

https://github.com/edycutjong/vetoblast

🛡️ Zero-Trust AI Agent Terminal Proxy and Runtime Guard protecting developer credentials and workspaces.

ai-agents deberta nextjs react sandbox security tailwind zero-trust

Last synced: 10 Jun 2026

https://github.com/weblineindia/dn-jwt-authentication

This is a lightweight and easy-to-use library for JSON Web Token (JWT) authentication in .NET Core applications. It provides a seamless integration of JWT-based authentication, enabling secure and efficient user authentication processes in your .NET Core projects.

dotnet dotnet-core jwt jwt-authentication jwt-token library security

Last synced: 11 May 2026

https://github.com/timebertt/talk-credentials-rotation

Credentials Rotation in Kubernetes – Putting Together the Puzzle Pieces

conference credentials-rotation kubernetes security

Last synced: 11 May 2026

https://github.com/rupivbluegreen/omni-sag

Omni-SAG — auditable Linux privileged-access gateway (SSH + SFTP): AD+MFA, single-dialer authz, tamper-evident evidence chain, recording, ICAP inspection, CyberArk injection, four-eyes approvals, control-plane API/TUI. Go modular monolith.

audit-log bastion devsecops golang pam privileged-access security sftp ssh ssh-gateway zero-trust

Last synced: 15 Jul 2026

https://github.com/mkafonso/guardian

[NPM] Analise dependências Node.js, priorize riscos reais e gere relatórios acionáveis em segundos

audit cli dependencies devtools nodejs npm security typescript vulnerabilities

Last synced: 12 May 2026

https://github.com/raullopezpenalva/contact-service

Spring Boot microservice handling contact submissions for my personal website. Includes persistence, admin management and notification system.

backend backend-api backend-service documentation feature infrastructure java security spring-boot

Last synced: 13 May 2026

https://github.com/anystack-sh/electron-license-demo-app

Example implementation of Anystack's licensing SDK for Electron applications

electron license-management security

Last synced: 14 May 2026

https://github.com/joemunene-by/ghostaudit

Kubernetes Security Auditor — 23 CIS-based checks for RBAC, pod security, secrets, network policies, resource limits, and image security. CLI with HTML/JSON reports.

audit cis-benchmark cli cloud-security devsecops kubernetes kubernetes-security pod-security rbac security

Last synced: 11 Jun 2026

https://github.com/useformseal/fetch

CLI tool for fetching encrypted form submissions from your storage backend.

cli cloudflare-kv formseal-ecosystem privacy redis security supabase

Last synced: 11 Jun 2026

https://github.com/keyorixhq/keyorix

Lightweight on-premise secrets management for European enterprises. AGPL. No SaaS dependency. Air-gap compatible. NIS2/DORA aligned. AI-native via MCP server — roadmap

air-gap devops devsecops european gdpr golang on-premise secrets-management security vault-alternative

Last synced: 15 Jun 2026

https://github.com/zigul1/canaryshell

A PowerShell script that allows to monitor a folder and set automatic customizable alerts and reactions.

canary folder-monitor monitoring-automation powershell privacy ransomware-mitigation security

Last synced: 12 Jun 2026

https://github.com/cymdeveloppement/phplibuserconnected

Librairie de gestion d'utilisateur pour PHP

php security user-management

Last synced: 12 Jun 2026

https://github.com/atensecurity/thoth-runbooks

SIEM, PAM, and SOAR runbooks for Thoth headless operations

pam runbooks security siem soar thoth

Last synced: 12 Jun 2026

https://github.com/seditiocms/php-firewall-new

PHP Firewall is a small free PHP script, but secure all websites writen in PHP.

firewall php7 security seditio

Last synced: 05 Jul 2025

https://github.com/azva-co/helm-charts

Helm charts for Kubernetes

devops helm helm-charts k8s kubernetes security

Last synced: 12 Jun 2026

https://github.com/adudley78/clean-skill

Detect malicious AI skills in skills marketplaces: platform-agnostic ingestion, YAML rule engine, secret scanner, LLM-as-judge, and a gVisor Docker sandbox for dynamic analysis.

ai-security cli llm mcp prompt-injection python sandbox security supply-chain-security yara

Last synced: 29 Jun 2026

https://github.com/rudradcruze/securityapplication

This project is a Spring Boot application that provides security features using JWT authentication. It includes custom filters for JWT authentication and response logging.

custom-filters java jwt-authentication logging maven security spring-boot stateless-session

Last synced: 13 Apr 2026

https://github.com/axrobert/vps

🛡️ Virtual Private Servers [ Config + Hardening ]

centos debian hardening private security server ubuntu virtual vps

Last synced: 13 Jun 2026

https://github.com/friendlygeorge/base-scanner

Lightweight on-chain security scanner for Base chain smart contracts — 15 pattern-based checks, no API key required

audit base ethereum python scanner security smart-contracts solidity web3

Last synced: 14 Jun 2026

https://github.com/finsavvyai/opensyber-mcp-watch

MCP rug-pull detection. SHA-256 fingerprints per tool, per server, across days.

ai-agents ai-security drift-detection mcp model-context-protocol opensyber prompt-injection security

Last synced: 14 Jun 2026

https://github.com/bujosa/sharepasswords

Backend/admin services for sharepasswords.com.

admin-panel dashboard gcp mongodb security

Last synced: 15 Jun 2026

https://github.com/bespredel/awg-command-builder

Native Windows app for Keenetic/Netcraze RCI that simplifies AWG/WireGuard ASC command building and execution in a single executable.

amneziawg automation command-builder configuration devops networking security wireguard

Last synced: 15 Jun 2026

https://github.com/atkei/piccolo-sql-guard

Static analysis tool for detecting unsafe raw SQL construction in Piccolo ORM projects

piccolo pyton security sql-injection static-analysis

Last synced: 15 Jun 2026

https://github.com/eilandert/webserver-hardening

Hardening patches + config snippets for nginx, Angie and OpenSSL — the deb.myguard.nl stack

angie certificate-compression hardening ja4 nginx openssl reverse-proxy security tls webserver

Last synced: 16 Jun 2026

https://github.com/tonyfenwick8814121/100-percent-skill-vetter

OpenClaw 技能/插件安装前审查插件：生成本地报告并阻断 critical 风险

ai-agent openclaw plugin security skill-vetter

Last synced: 16 Jun 2026

https://github.com/rs-py/proxybroker4python3.9

This project is simply an updated version of proxybroker that is able to work with Python 3.9 on windows OS.

anonymity hacktoberfest hacktoberfest2022 penetration-testing-tools pentesting proxy proxy-checker proxy-list proxybroker proxypool security security-tools

Last synced: 17 Jun 2026

https://github.com/batu3384/ironsentinel

Local-first AppSec CLI for guided scans, runtime trust checks, and evidence-rich reporting.

appsec bubbletea cli go sarif security

Last synced: 18 Jun 2026

https://github.com/wjddusrb03/pkghall

Detect hallucinated (non-existent) packages in AI-generated code

ai-safety cli hallucination llm pypi python security slopsquatting

Last synced: 18 Jun 2026

https://github.com/sht/sek4

Web for CS experiments, self-hosted tools, and personal projects. Built with Zola.

homepage security static-site-generator zola-site

Last synced: 19 Jun 2026

https://github.com/sht/passify

A beautiful, open-source password generator with custom rules and history. Simple, secure, and ready to use anywhere.

flask opensource passify password-generator security selfhost

Last synced: 19 Jun 2026

https://github.com/valkyoth/skrifheim

Skrifheim is a Rust world database for signed, versioned, policy-bound facts, branchable worlds, causal provenance, tamper-evident storage, and security-aware query planning.

append-only casual-database content-addressed-storage database eupl-1-2 hacktoberfest mvcc podman policy-engine provenance rust rust-lang security tamper-evident world-database zero-trust

Last synced: 19 Jun 2026

https://github.com/pierre-h/secure-convex

A library to secure your Convex database with Valibot and Permix

convex permix security valibot validation

Last synced: 20 Jun 2026

https://github.com/ms13th-cyber/simple-system-snapshot

Capture secure environment diagnostics (MD/JSON). / サーバー環境やシステム情報を安全にスナップショット。機密情報は自動遮蔽。

developer-tools diagnostic-tool lightweight maintenance php security snapshot sysadmin system-information wordpress wordpress-plugin

Last synced: 20 Jun 2026

https://github.com/yeet-src/runfrom

Live exec-provenance monitor. Flags execs from tmp/shm, fileless binaries, and setuid privilege jumps, all in-kernel.

bpf co-re ebpf exec fileless kernel linux observability provenance security setuid tracepoint tracing yeet

Last synced: 20 Jun 2026

https://github.com/voidd0/tells-encryption-spec

Public spec of tells' AES-256-GCM + HKDF + AAD encryption

aead aes encryption gdpr hkdf privacy security tells

Last synced: 20 Jun 2026

https://github.com/securityronin/iso9660-forensic

Forensic ISO 9660 reader & tamper analyzer in pure Rust — analyse() surfaces 23 anomaly findings (redundancy, slack, EDC/ECC, concealment) across multi-session, Rock Ridge, Joliet, El Torito & raw CD images

dfir digital-forensics disk-image ecma-119 el-torito file-format forensics incident-response iso iso9660 joliet optical-disc parser rock-ridge rust security udf

Last synced: 21 Jun 2026

https://github.com/securityronin/journald-forensic

From-scratch systemd journal (.journal) forensic reader — parse entries without journalctl/systemd, carve from unallocated space, and flag tampering (sequence gaps, timestamp regressions, truncation, online-state)

anti-forensics dfir forensics incident-response journald linux log-analysis log-forensics rust rust-forensics security systemd

Last synced: 21 Jun 2026

https://github.com/durellwilson/security-awareness-course

🛡️ Comprehensive security course: Deepfakes & Prompt Injections - Detection, Prevention & Response

ai-safety ai-security cybersecurity deepfakes detroit education hacktoberfest machine-learning mdbook open-source prompt-injection security

Last synced: 22 Jun 2026

https://github.com/wayyoungboy/mcpcanary

Local-first MCP trust scanner and semantic drift canary for AI agent tool configs

ai-agents go local-first mcp sarif security static-analysis

Last synced: 22 Jun 2026

https://github.com/patrick204nqh/triagekit

Backend-free repo triage in one self-contained HTML file — GitHub Dependabot alerts, code scanning, PRs & issues, scored and tiered. No server, no CDN; your token stays in the browser.

appsec cli code-scanning dashboard dependabot devsecops github security security-tools self-hosted single-file static-site triage vulnerability-management

Last synced: 23 Jun 2026

https://github.com/jimurrito/get-ip

Simple server that provides the public IP back to the sending client. Written fully in Powershell.

api automation debugging get-ip http-server ip publicip security server socket tooling

Last synced: 23 Jun 2026

https://github.com/0xsl1m/shadowshield

Unified open-source security shield for agentic AI systems — defense-in-depth prompt-injection protection (canary tokens, agent-trace alignment audit, tool-call guarding, PII/secret scanning).

agentic-ai ai-safety guardrails llm llm-guardrails llm-security prompt-injection security

Last synced: 23 Jun 2026

https://github.com/perufitlife/awesome-backend-security

Curated security auditors for the backend stack — Supabase, Firebase, Hasura, Strapi, Directus, Payload, Convex, n8n, Ollama & more. Keyless, active-probe, MIT.

awesome awesome-list baas backend devsecops graphql headless-cms security security-audit vulnerability-scanner

Last synced: 25 Jun 2026

https://github.com/Perufitlife/directus-security

Keyless active-probe security auditor for Directus: proves public-role data exposure, user enumeration, unauth version/schema leaks (CVE-2025-53887), GraphQL introspection & search-param field enumeration (CVE-2025-30352) with live anonymous probes. Zero deps.

cms cve data-exposure devsecops directus graphql headless-cms security security-audit vulnerability-scanner

Last synced: 25 Jun 2026

https://github.com/sulthonzh/envault

Zero-dep .env file encryption for teams — encrypt, decrypt, diff, merge secrets with a passphrase

aes decrypt dotenv encrypt env passphrase secrets security

Last synced: 25 Jun 2026

https://github.com/tegmentum/citadel

A stateful, operator-friendly TPM 2.0 platform: named objects, declarative policies, explainable diagnostics, and a CLI, TUI, and HTTP daemon.

attestation cli hardware-security rust security tpm tpm2 trusted-computing tui

Last synced: 25 Jun 2026

https://github.com/apiverve/danevalidator-api

DANE Record Validator validates DANE/TLSA DNS records used for certificate authentication, providing security analysis and best practice recommendations.

android-library api apiverve danevalidator dotnet java nodejs npm-package nuget-package python python-package rest-api security

Last synced: 25 Jun 2026

https://github.com/adit019/secure-authz-service-cpp

C++ authentication and authorization microservice using salted SHA-256.

authentication authorization c-plus-plus jwt microservice security sha256 systems-programming

Last synced: 25 Jun 2026

https://github.com/askalf/keeper

own your agent secrets — an encrypted vault that hands agents scoped, short-lived, single-use leases instead of raw keys, and audits every access. Completes the agent-security stack (warden · canon · keeper). Part of Own Your Stack.

agent-security ai-agents credentials least-privilege own-your-stack secrets security vault

Last synced: 26 Jun 2026

https://github.com/beyondnetcode/ums

User management system, prototype for an Authorization Block that can be worked with Auth providers or stand alone

authentication-service authorization-middleware csharp microservices-architecture monolithic-architecture net nodejs security ums

Last synced: 30 May 2026

https://github.com/coinfabrik/scout-workshop

Learn to Scout for security issues and best practices in Soroban

security soroban workshop

Last synced: 19 Feb 2026

https://github.com/jekwwer/common-docs

A centralized repository containing standardized documentation files, like CODE_OF_CONDUCT.md, LICENSE, and more, for consistent use across multiple projects.

code-of-conduct contributing documentation repository-standards security template

Last synced: 19 Oct 2025

https://github.com/fabriziocafolla/py-secscan

PySecScan automates security checks, linting, and SBOM generation, ensuring a proactive approach to code security with minimal setup.

devbox nix python python3 ruff sast security uv

Last synced: 24 Feb 2026

https://github.com/humzaakhtarr/ElasticSearch-using-Kali

A step-by-step guide for setting up an SIEM using the Elastic Web Portal and a Kali Linux VM. You will learn how to generate security events on the Kali VM, set up an agent to forward data to the SIEM, and query and analyze the logs in the SIEM. This is a great beginner project that you can add to your resume.

cybersecurity elasticsearch elk-stack kibana security siem

Last synced: 22 Oct 2025

https://github.com/bigpresh/catalyst-plugin-html-scrubber

Catalyst::Plugin::HTML::Scrubber - Perl Catalyst plugin to scrub HTML / XSS attempts from incoming parameters

catalyst perl-module perl5 security xss xss-clean xss-filter

Last synced: 22 Oct 2025

https://github.com/freema/openclaw-mcp

🦞 MCP server for OpenClaw - secure bridge between Claude.ai and your self-hosted OpenClaw assistant with OAuth2 authentication

docker-compose mcp-server open-claw productivity security typescript

Last synced: 14 Mar 2026

https://github.com/jpiechowka/npm-audit-2-docx

Parse npm audit reports and create docx documents with summary of vulnerabilities

docx npm npm-audit parser reporting security security-tools

Last synced: 27 Jan 2026

https://github.com/anthonyharrison/cvss

Utilities for manipulating CVSS vulnerability metric

cve cvss cvssv3 metrics security vulnerability-assessment

Last synced: 13 Jun 2025

https://github.com/josephbartlett/fhir-resource-validator

Validate FHIR resources directly in your browser. This open-source tool checks required fields, highlights missing elements, and flags invalid values for common resource types—all without server dependencies. Ideal for quick diagnostics, learning FHIR structure, or validating profiles securely.

browser-tool client-side fhir fhir-resources fhir-validator health-it healthcare hl7 integration-tool interoperability patient-data privacy security validation

Last synced: 23 Jan 2026

https://github.com/githubfoam/sec-pocs-githubactions

security proof of concept githubactions

githubactions proof-of-concept security

Last synced: 30 Mar 2025

https://github.com/stevemao/generate-strong-password

A module that does https://github.com/bermi/password-generator#example-with-custom-validation-rules, with isStrongEnough and customPassword exported

browser crypto generator pass password random security

Last synced: 11 Nov 2025

https://github.com/4383/defected

Defected is a CLI tool designed to analyze Git logs and detect suspicious behaviors, such as frequent timezone changes, to enhance the security and reliability of open-source projects.

osint security timezone

Last synced: 04 Feb 2026

https://github.com/luberan/cloudflare-waf-log

A Cloudflare Worker that visualises WAF / Security events across multiple Cloudflare accounts (your own + customer accounts). Fully functional on the Free tier (24 h WAF event retention).

analytics cloudflare cloudflare-workers dashboard security typescript waf

Last synced: 29 May 2026

https://github.com/sambhu431/salt-based-encryption-and-decryption

Securely encrypt and decrypt files and folders using salt-based, password-protected methods. Protect your data from hacking, leakage, and theft.

cryptography datasecurity decryption encryption encryption-decryption fernet fernet-cryptography fernet-decryption fernet-encryption fernet-key pbkdf2 pbkdf2-hmac pythonen salt security

Last synced: 09 Apr 2025

https://github.com/marynahl/pawtel-platform

Two Spring Boot microservices for a “dog hotel” demo—auth (JWT) + data, Postgres, Docker Compose, tests.

docker docker-compose java jwt maven microservice postgres rest-api security spring-boot

Last synced: 10 Apr 2026

https://github.com/bpisano/rainfall

Second projet de la branche sécurité de l'école 42.

42 project security

Last synced: 23 Aug 2025

https://github.com/7astro7/spytball

An encrypted archiving utility written in Python

backup compression python security spytball tarball

Last synced: 23 Aug 2025

https://github.com/yehezkiel1086/security-scripts-py

A Bunch of Small Scripting Security Projects built using Python

python security socket

Last synced: 28 Mar 2025

https://github.com/kivimango/metawipe

Small command-line tool to remove all metadata/exif records of your photos to give you back the control over your security and privacy.

cli command-line-tool exif-metadata exiftool java jpeg metadata privacy security

Last synced: 23 Jun 2025

Security Awesome Lists
the-book-of-secret-knowledge 74 Awesome-Hacking 83 awesome-security 330 awesome-web-security 425 awesome-ctf 220 awesome-hacker-search-engines 568 awesome-privacy 647 android-security-awesome 230 awesome-incident-response 221 Awesome-WAF 175 awesome-web-hacking 31 DevSecOps 188 awesome-security-hardening 207 awesome-infosec 215 awesome-cybersecurity-blueteam 252 WebHackersWeapons 431 backend-cheats 961 awesome-vehicle-security 227 awesome-sec-talks 265 awesome-game-security 92 awesome-nodejs-security 222 awesome-cloud-security 154 awesome-iot-hacks 70 awesome-embedded-and-iot-security 131 alternative-frontends 119 DevSecOps 48 Awesome-Cybersecurity-Datasets 54 Awesome-FL 4,069 awesome-golang-security 34 awesome-windows-domain-hardening 70 Crypto-OpSec-SelfGuard-RoadMap 473 awesome-azure-architecture 311 osx-and-ios-security-awesome 59 awesome-lists 737 awesome-llm-security 101 awesome-executable-packing 756 awesome-aws-security 173 awesome-ethereum-security 81 awesome-vulnerable-apps 100 Awesome-Jailbreak-on-LLMs 427 awesome-he 90 MobileHackersWeapons 73 npm-security-best-practices 33 awesome-security-GRC 81 awesome-anti-forensic 143 security-apis 116 awesome-python-security 35 awesome-opa 228 awesome-runners 38 graph-adversarial-learning-literature 314
Security Categories
Uncategorized 3,616 fl in top-tier journal 3,256 :books: Literature 2,624 fl in top ml conference and journal 1,564 Tools 1,424 Pentesting 1,139 Operating Systems 1,131 Attack 1,071 Other Lists 794 fl in top ai conference and journal 789 カテゴリ 731 fl in top cv conference and journal 673 Papers 605 Weapons 516 Resources 498 Threat Hunting: 480 **Мероприятия** 465 Defense 449 Official 436 Malware Analysis 433