An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/edneimonteiro/obo-sqlserver

Azure SQL OBO PoC - ASP.NET Core API on Azure Container Apps using Microsoft Entra ID, Azure SQL Always Encrypted and Azure Key Vault

always-encrypted azure azure-sql container-apps dotnet entra-id key-vault obo poc security

Last synced: 29 Jun 2026

https://github.com/akornatskyy/wheezy.security

A lightweight security/cryptography library

cryptography python security wheezy

Last synced: 28 Apr 2025

https://github.com/nisanth2004/blood-bank-management-system

A User can request a blood in this web application and Admin can add a new donor in this application

application backend bloodbank-application c conatiner frontend jsp security servlet spring web

Last synced: 30 Apr 2026

https://github.com/adnan-kutay-yuksel/colorful-nmap

A Python tool that enhances nmap's version scanning by highlighting deprecated/outdated software versions in red

network-scanning nmap python security

Last synced: 30 May 2026

https://github.com/smitroy4/jwt-spring-boot-starter

Auto-configured JWT starter for Spring Boot applications.

authentication backend java jwt maven opensource security spring-boot starter

Last synced: 30 May 2026

https://github.com/patrick204nqh/triagekit

Backend-free repo triage in one self-contained HTML file — GitHub Dependabot alerts, code scanning, PRs & issues, scored and tiered. No server, no CDN; your token stays in the browser.

appsec cli code-scanning dashboard dependabot devsecops github security security-tools self-hosted single-file static-site triage vulnerability-management

Last synced: 23 Jun 2026

https://github.com/gorman-ap/rpi-fleet-management

Automating updates, monitoring logs & metrics, and managing Raspberry Pi devices across the company.

ansible automation grafana linux monitoring networking node-exporter prometheus raspberry-pi raspberry-pi-3 raspberry-pi-4 raspberry-pi-5 security

Last synced: 30 Apr 2026

https://github.com/mauricelambert/mremotengpasswordsstealer

This module steals mRemoteNG passwords.

decrypt mremoteng passwords recovery security steal

Last synced: 30 May 2026

https://github.com/jimurrito/get-ip

Simple server that provides the public IP back to the sending client. Written fully in Powershell.

api automation debugging get-ip http-server ip publicip security server socket tooling

Last synced: 23 Jun 2026

https://github.com/radishconcepts/radish-wp-2fa

Enforceable, frontend-first two-factor authentication for WordPress with role-based hard enforcement.

2fa multisite security totp two-factor-authentication wordpress wordpress-plugin

Last synced: 01 May 2026

https://github.com/funnyhcat-dotcom/json-sample-redactor

Redact secrets and personal data from JSON before sharing examples.

cli developer-tools json nodejs pii privacy redaction secrets security

Last synced: 29 Jun 2026

https://github.com/joshjarabek7/hiss

Secure your FastAPI applications effortlessly with Hiss! 🐍🔒 Hiss offers a collection of decorators and custom middleware for seamless integration of advanced security features, including virus scanning with ClamAV, input sanitization, and robust authentication/authorization. Build powerful and secure APIs with ease. 🛡️✨

api async authentication authorization clamav decorators fastapi input-validation open-source pydantic python security virus-scanning web-framework

Last synced: 01 May 2026

https://github.com/estaji/check-cves

Collection of codes to verify servers, applications and infrastructure immunity against specific CVEs.

security security-tools vulnerability-detection vulnerability-scanner vulnerability-scanners

Last synced: 23 Jun 2026

https://github.com/geonnave/cose-elixir

CBOR Object Signing and Encryption (COSE) [RFC 8152].

cbor cose iot security

Last synced: 08 Jun 2026

https://github.com/hakenr/modelbindingmassassignment

DEMO for ASP.NET Worst Practices sessions

demo mass-assignment over-posting security spoofing

Last synced: 13 Jul 2025

https://github.com/igorjs/sentinel

Generic GitHub Action that opens auto-PRs for OSV-driven dependency bumps across rust, go, javascript, python

automation dependencies github-actions osv security supply-chain

Last synced: 13 Jul 2026

https://github.com/diegograham/key-pad

An Arduino-based door lock system with a 4x4 keypad for password entry, LCD for status display, and a relay to control the lock. It includes audible feedback with a buzzer and locks out after three incorrect password attempts.

arduino doorlock electronics embeded-systems keypad lcd relay security

Last synced: 02 May 2026

https://github.com/rewindio/aws-role-play

A CLI tool that makes assuming IAM roles and exporting temporary credentials easier

aws cli iam mfa security sts

Last synced: 29 Jul 2025

https://github.com/sulmar/vavatech.mbdvc.wapisecurity

Przykłady ze szkolenia Bezpieczeństwo WebAPI

security webapi

Last synced: 17 Jun 2026

https://github.com/khanmaster/aws-scs-c03-quiz

AWS Security Specialty (SCS-C03) Quiz Platform - Interactive certification preparation

aws certification github-actions quiz scs-c03 security terraform

Last synced: 02 May 2026

https://github.com/mgunawardhana/nestjs-passkey-auth-platform

Modern passwordless authentication system using WebAuthn (Passkeys) with NestJS and MongoDB. Features include multi-device passkeys, MFA, risk-based authentication, JWT refresh rotation, RBAC/ABAC authorization, audit logs, and compliance-ready security design.

authentication fido2 iam identity mfa passkeys passwordless security webauthn zero-trust-security

Last synced: 11 Mar 2026

https://github.com/kogunlowo123/terraform-gcp-cloud-armor

Terraform module for Google Cloud Armor with WAF rules, rate limiting, geo-blocking, bot management, and adaptive protection

cloud-armor ddos-protection gcp google-cloud infrastructure-as-code production-ready security terraform terraform-module waf

Last synced: 02 May 2026

https://github.com/kogunlowo123/terraform-azure-security-center

Terraform module for Microsoft Defender for Cloud with security contacts, pricing tiers, auto-provisioning, and security automations

azure cloud-security compliance devsecops microsoft-defender security terraform terraform-module

Last synced: 02 May 2026

https://github.com/justinjilg/brainstorm-security-stack

The Living Case Study — AI agents building Wiz + CrowdStrike + SentinelOne from scratch, live, 24/7. Powered by Brainstorm CLI + BrainstormRouter.

agents ai brainstorm cnapp edr live-coding open-source security siem

Last synced: 02 May 2026

https://github.com/subhranil002/user-authentication-ssr

User-Authentication-SSR provides a secure authentication system with server-side rendering (SSR) for web apps. It ensures seamless login experiences and enhanced performance ... ❤️

authentication bcrypt cookies environment-variables expressjs handelbars jsonwebtoken jwt middlware mongodb nodejs password-hashing security server-side-rendering sessions ssr user-management

Last synced: 02 May 2026

https://github.com/rajikaimal/icoid

:ghost: Modular API gateway

api-gateway javascript nodejs security

Last synced: 02 May 2026

https://github.com/seniorbatleo/cryptocart

Secure chat software for your computer.

chat cryptocart cryptography messaging secure security

Last synced: 24 Jun 2026

https://github.com/almayor/override

Learning more about reverse engineering and buffer overflow attacks

buffer-overflow-attack reverse-engineering school-21 security

Last synced: 24 Jun 2025

https://github.com/w1ld3r/raspi_hackbox

Debian-based Raspberry Pi hacking lab with i3, zsh, and tools for IoT, OT, and automotive security.

automotive debian hacking i3 iot ot pentesting raspberry-pi redteam security zsh

Last synced: 03 May 2026

https://github.com/elevated-standards/cloudits

Cloudit automates compliance with evidence collection. Cloudit streamlines vulnerability tracking, audit workflows, and compliance reporting by gathering artifacts, comparing findings, and generating actionable plans—keeping your organization audit-ready at all times.

atlassian audit aws azure compliance edr elastic fedramp gcp grc hitrust iso-27001 iso-27002 jira jumpcloud okta pci-dss security security-evidence tx-ramp

Last synced: 12 Apr 2026

https://github.com/natthasath/zap-shell-script

Zed Attack Proxy (ZAP) is an open-source web application security scanner maintained by OWASP. It helps find security vulnerabilities in web apps by performing automated and manual penetration testing. ZAP is ideal for developers and security testers of all levels.

script security shell website zap

Last synced: 26 Mar 2025

https://github.com/deuxksy/sylph

Sylph는 Tailscale ACL 과 Cloudflare(DNS)를 관리하는 시스템입니다.

acl automation devops diagram documentation github-actions network security tailscale vpn

Last synced: 03 May 2026

https://github.com/mark101221/aws-lift-shift-migration

🌐 Automate your migration of 2-tier web applications from on-premises to AWS using Terraform, ensuring best practices and efficient infrastructure setup.

application-migration automation aws aws-s3 cloud-migration cloudwatch database-migrations iaas infrastructure-as-code maven memcached migration-aws mysql paas portfolio security terraform vpc

Last synced: 03 May 2026

https://github.com/chadmayfield/gh-repos-hud

Heads-up display of repo health across your GitHub orgs (gh extension)

bubbletea cli dashboard dependabot devops gh-cli gh-extension github github-api golang repository-management security terminal tui

Last synced: 24 Jun 2026

https://github.com/perufitlife/appwrite-security-skill

Open-source Appwrite security auditor: detects 'any' role grants, document security misconfig, over-permissive collection permissions. Active probe confirms each leak.

appwrite audit auditor baas cli devsecops leak mit-license nodejs open-source penetration-testing scanner security security-audit typescript vulnerability

Last synced: 25 Jun 2026

https://github.com/chaluvadis/safe-to-send

safe-to-send is a minimal VS Code extension to scan selected code (or full file) for sensitive data before copying for manual AI usage.

agent-skills agents ai clipboard security sensitive-data typescript utilities utility vscode-extension

Last synced: 25 Jun 2026

https://github.com/morpheusadam/coldphrase

Offline, single-file cold storage for crypto seed phrases. Argon2id + AES-256-GCM in one self-contained HTML file, with duress decoy and tamper detection.

aes-256-gcm air-gapped argon2id bip39 cold-storage crypto-wallet encryption javascript metamask offline plausible-deniability security seed-phrase self-contained self-custody trust-wallet webcrypto zero-dependency

Last synced: 16 Jul 2026

https://github.com/ysocrius/rls-isolated-task-manager

A high-fidelity, data-sovereign task orchestration platform with Double-Blind Data Isolation (RLS) and Serverless Architecture.

glassmorphism react security serverless supabase typescript

Last synced: 09 Jun 2026

https://github.com/bitsensor/php

BitSensor Web Application Security

bitsensor php security

Last synced: 09 Jun 2026

https://github.com/abjrcode/swervo

Rotate your secrets and live worry free!

secret-management security

Last synced: 12 Mar 2026

https://github.com/noureldin2303/booksshop-nestjs

Nestjs progressive book shop application built using modern technologies and best practices.

apidevelopment authentication authorization dependency-injection nestjs nodejs oauth2 prisma restful-api security typescript

Last synced: 03 May 2026

https://github.com/aunshx/device-fingerprinting

Utilizing Machine Learning and Optimal Hashing to develop unique device fingerprints

data-science fingerprinting ml networking security

Last synced: 14 Jun 2025

https://github.com/alvaroemanuel20/gerador-de-senha

Gerador de senhas seguras com várias opções de escolha de senha.

algorithms css html javascript portfolio security

Last synced: 04 May 2026

https://github.com/jcsec-security/learn-solidity-security

Course material about common vulnerabilities, security and audits of Solidity smart contracts that I use during my lectures

audit beginner blockchain bug contract ethereum evm pentesting security smart smart-contracts vulnerabilities

Last synced: 04 May 2026

https://github.com/markei/wordpress-plugin-security-protection

Security & protection improvements: login event history, prevent login brute force, hide backend, update status API

security wordpress wordpress-plugin

Last synced: 04 May 2026

https://github.com/jjpeleato/slides-security-wordpress

Presentation made for a WordPress security workshop.

security slides wordpress workshop

Last synced: 09 Apr 2025

https://github.com/metalcloud1/leakguard

🛡️ LeakGuard: Microservices for early detection of compromised passwords and sensitive data, with secure k-Anonymity checks, observability, and Docker-ready deployment.

ci-cd data-protection devops docker fastapi grafana haveibeenpwned k-anonimity leak-detection loki microservices mocking observability password-security posgresql prometheus pytest python security security-testing

Last synced: 04 May 2026

https://github.com/hitman472005/security-project

🔒 Build a secure application with robust authentication and authorization using Spring Boot and Angular, ensuring safe user roles and access control.

apple documentation-portal hacking hacktoberfest jwt linux network-programming owasp owasp-zap practice-hacking programming project security spring-boot spring-security spring-security-oauth2 vulnerable-application zsh

Last synced: 04 May 2026

https://gitlab.com/eliotr/RSA_Security_Token

Our bachelor's thesis. A Security token system for Linux PAM using an FPGA. Either utilizing 72-bit or 512-bit RSA cryptography when using Version A and B respectively. Version B is utilizing USB UART communication, while version A is air-gapped.

FPGA PAM-Module VHDL authentication linux open source pam rsa security token two-factor unix

Last synced: 11 Mar 2025

https://github.com/adikum19/password-generator

🔐 Generate secure, random passwords effortlessly with this Python and PyQt6 tool featuring a user-friendly interface and strength indicators.

asp-net-core bios composer console-application diceware diceware-passphrase-generator diceware-passphrases diceware-password generator java objective-c open-source password password-generator passwords php-library pwgen security

Last synced: 04 May 2026

https://github.com/yashikams25/login-page

The Login & Registration page allows users to securely create accounts and log in to access personalized features on the e-commerce platform. It ensures smooth user experience with form validation and secure authentication.

authentication css django e-commerce-website form-validation html login-registration security user-auth

Last synced: 04 May 2026

https://github.com/Perufitlife/strapi-security

Audit any Strapi CMS for public-role data exposure, CORS reflection, user enumeration & GraphQL introspection — and PROVE each leak live with an anonymous probe. Keyless, zero deps, MIT.

auditor cms cors data-exposure devsecops headless-cms nodejs security security-audit strapi

Last synced: 25 Jun 2026

https://github.com/roman-pinchuk/dependency-security-matrix-action

Generate README dependency matrices with optional scanner-backed security status.

dependencies github-action npm readme security snyk

Last synced: 13 Jul 2026

https://github.com/suraj-khot-19/amazon_clone

Amazon Clone App With Admin and User Functionality. Using Node.js and Flutter

amazon-clone authentication flutter nodejs security

Last synced: 04 May 2026

https://github.com/Perufitlife/appwrite-security-skill

Open-source Appwrite security auditor: detects 'any' role grants, document security misconfig, over-permissive collection permissions. Active probe confirms each leak.

appwrite audit auditor baas cli devsecops leak mit-license nodejs open-source penetration-testing scanner security security-audit typescript vulnerability

Last synced: 25 Jun 2026

https://github.com/Perufitlife/directus-security

Keyless active-probe security auditor for Directus: proves public-role data exposure, user enumeration, unauth version/schema leaks (CVE-2025-53887), GraphQL introspection & search-param field enumeration (CVE-2025-30352) with live anonymous probes. Zero deps.

cms cve data-exposure devsecops directus graphql headless-cms security security-audit vulnerability-scanner

Last synced: 25 Jun 2026

https://github.com/mreshboboyev/api-rate-limiter

A robust and scalable API Rate Limiter implementation in .NET Core, supporting 4 algorithms (Fixed Window, Sliding Window, Token Bucket, Concurrency) with IP-based rate limiting. Built using Clean Architecture and integrated with Redis for distributed environments.

api-security clean-architecture concurrency fixed-window ip-based-rate-limiting middleware rate-limiting redis security sliding-window throttling token-bucket

Last synced: 05 May 2026

https://github.com/timyiu478/cryptography-i

Cryptography I: foundational cryptographic principles and primitives course by Dan Boneh, Stanford University

aes-encryption cryptography protocol rsa-cryptography security

Last synced: 29 Jun 2026

https://github.com/nir3x/fxms

FNV-XOR-Mask-Shuffle Symmetric Encryption Algorithm

algorithm crypto encryption fnv fxms go golang mask security shuffle symmetric xor

Last synced: 06 Jun 2026

https://github.com/jfrimmel/talks-and-sources

This repository contains a list of talks and papers, that I find insightful and worth sharing

c concurrency conference conference-talk cplusplus cpp data-oriented data-structures list optimization papers rust security simd software-arch software-design talk talks video videos

Last synced: 05 May 2026

https://github.com/ilanur/arvify.io

Fingerprint-based consent layer for universal AI integrations.

ai claude fingerprint gemini llama mcp mcp-server openai security sveltekit wearable

Last synced: 05 May 2026

https://github.com/testableapple/android_battery_keeper

Script that created to save an android battery by maintaining a specific charge.

android security

Last synced: 05 May 2026

https://github.com/nick-vanduijn/springboot-rbac-example

Example Spring Boot REST API demonstrating Role-Based Access Control (RBAC) with JWT authentication and enterprise-grade audit logging. Includes real security, async audit trail, AOP, and production-ready patterns for educational purposes.

demo example java jwt rbac role security spring springboot

Last synced: 05 May 2026

https://github.com/tatilimongi/secure-userform

A secure user authentication system with JWT, implementing best practices for secure development as part of a Secure Development course project.

csrf java jwt maven password-encryption restful-api secure-development secure-password-storage security spring-boot token-authentication user-authentication

Last synced: 05 May 2026

https://github.com/notdodo/pulumi-k8s

Pulumi deployments for Kubernetes

infrastructure-as-code kubernetes pulumi security

Last synced: 05 May 2026

https://github.com/artagon/artagon-bom

Bill of Materials for managing dependency versions across the Artagon stack

bill-of-materials bom cyclonedx dependency-management gradle java maven-central sbom security sigstore supply-chain

Last synced: 13 Apr 2026

https://github.com/brandonhenricks/cloudflare-leakedcredentials

Minimal netstandard2.0 library that parses Cloudflare's Exposed-Credential-Check header so origin servers can detect credential exposure.

cloudflare csharp security

Last synced: 14 Jan 2026

https://github.com/blackcatacademy/blackcat-database

Primary SQL layer, repositories, migrations and CRUD events. Used by blackcat-database-sync, blackcat-auth, blackcat-identity and blackcat-messaging; ships sync-check.php CLI.

blackcat database devops encryption events kms migrations mysql php schema security sql submodules

Last synced: 06 May 2026

https://github.com/amruthlp12/entropykey

EntropyKey is a web application that generates unique and secure tokens using your device's camera. The randomness in the video feed helps create unpredictable tokens, making them suitable for passwords or other secure identifiers.

bootstrap camera-api client-side-security css3 entropy frontend-development html5 javascript open-source password-generator random-token-generator randomness randomness-generation secure-tokens security token-generation web-application

Last synced: 08 Jan 2026

https://github.com/croatiasecurity/sentinel

Userland IDS/EDR for Windows — behavioral threat detection and response

csharp dotnet edr ids malware security threat-detection windows

Last synced: 05 Jul 2026

https://github.com/shazeus/passforge

Secure password and secret generator — passwords, passphrases, PINs, tokens, and strength analysis

cli cryptography entropy hibp passphrase password-generator passwords pyperclip python secrets security terminal

Last synced: 09 Jun 2026

https://github.com/Perufitlife/dotenv-exposure-check

Zero-dep CLI that probes a live URL for accidentally-served secret artifacts (.env, .git/, .js.map source maps, .DS_Store, backups) and CONFIRMS each hit by fetching the bytes.

devsecops dotenv env exposure-scanner secret-scanning secrets-detection security security-audit security-tools sourcemap

Last synced: 25 Jun 2026

https://github.com/mreshboboyev/multi-factor-authentification

This repository demonstrates a Multi-Factor Authentication (MFA) system in .NET, built using Domain-Driven Design (DDD) and Clean Architecture. It includes secure user registration, token-based authentication, MFA activation, recovery codes, and login with MFA enforcement—enhancing security while maintaining flexibility.

c-sharp clean-architecture domain-driven-design dotnet-core jwt-authentication login-protection multi-factor-authentication recovery-codes rest-api security software-architecture

Last synced: 06 May 2026

https://github.com/jkulvich/say-front

🔐 SAY Encrypted messaging without auth. Just SAY that you have got OVER the RED trouble of privacy.

chat crypto encryption messaging say security typescript vue vuejs vuetify

Last synced: 06 May 2026

https://github.com/sulthonzh/agent-dep-shield

Guard AI agent dependency installations with intelligent security checks

ai ai-agent code-security dependency guard mcp npm pip security slopsquat supply-chain typosquat

Last synced: 25 Jun 2026

https://github.com/gdegirmenci/vulnerability-fixer

PHP Vulnerability Fixer with LLM

laravel openai php security vulnerability-scanner

Last synced: 06 May 2026

https://github.com/alexeykrol/supabasewordpress-land

Modern, secure landing page for Supabase Bridge WordPress plugin. Built with React, TypeScript, Vite & Tailwind CSS. Zero vulnerabilities, GDPR compliant, self-hosted resources.

ai-assisted gdpr landing-page react security supabase tailwindcss typescript vite wordpress

Last synced: 18 Jan 2026

https://github.com/wezylnia/toolgate

Policy, approval, redaction, timeout, and audit middleware for MCP server tools.

audit-logging mcp middleware model-context-protocol npm-package redaction security typescript

Last synced: 29 Jun 2026

https://github.com/vnegrea/ldaplookup

Hardened LDAP lookup tool with embedded credentials, runtime locks, and anti-tampering protection

authentication binary-obfuscation garble go golang hardened ldap ldap-client obfuscation security

Last synced: 30 May 2026

https://github.com/channely/ramdom_steps

prompt 提示词越狱测试工具(离线版)

claude-code jailbreak prompt security

Last synced: 29 Jun 2026

https://github.com/nirodg/hyper-api

A Quarkus extension for instant, zero-boilerplate, secured CRUD APIs

api-rest backend cache java kafka llm quarkus quarkus-extension security

Last synced: 28 Apr 2026

https://github.com/foxitsoftware/pdfactioninspector

A PDF security analysis framework that surfaces all embedded PDF Actions, supports AI-assisted risk assessment, and integrates with security workflows as an MCP server module.

action javascript pdf security

Last synced: 07 May 2026

https://github.com/approov/quickstart-azure-api-management

Approov quickstart to implement the Approov token check in Azure API management platform.

api api-gateway api-security approov approov-backend approov-backend-quicksart approov-integration approov-quickstart azure security

Last synced: 10 Jun 2026

https://github.com/tegmentum/citadel

A stateful, operator-friendly TPM 2.0 platform: named objects, declarative policies, explainable diagnostics, and a CLI, TUI, and HTTP daemon.

attestation cli hardware-security rust security tpm tpm2 trusted-computing tui

Last synced: 25 Jun 2026

https://github.com/cdriehuys/ansible-role-lock-root

Ansible role to lock down root access.

ansible root security

Last synced: 07 May 2026