An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/beforewire/beforepaste

Local-first paste protection for AI workflows

ai clipboard redaction rust security

Last synced: 09 Jun 2026

https://github.com/ferderer/security-lab

Hardening playbooks, security configurations, and reference implementations for WSL2, Linux, and application security.

ai-agents ansible devops hardening linux nftables security spring-security squid wsl2

Last synced: 03 May 2026

https://github.com/johnnymast/redbox-testsuite

Redbox Testsuite allows you to batch process student-like tests in a Suite of tests and collect the results.

security students test testing testsuite

Last synced: 13 Jun 2026

https://github.com/ritartistry/hal

HAL is a secure HTTP API Layer for Large Language Models, enabling seamless web API interactions and automatic tool generation from OpenAPI specs. 🚀🌐

analyze compiler cryptocurrency cryptography dsl embedded face-animation fpga go gpu halo image-animation integrated-circuits javascript network objective-c security source-code

Last synced: 03 May 2026

https://github.com/hyperscale-stack/security

The Hyperscale security is a powerful and highly customizable authentication and access-control framework.

auth authentication authenticator authorization go go-modules golang oauth2 oauth2-server security

Last synced: 09 Jun 2026

https://github.com/ysocrius/rls-isolated-task-manager

A high-fidelity, data-sovereign task orchestration platform with Double-Blind Data Isolation (RLS) and Serverless Architecture.

glassmorphism react security serverless supabase typescript

Last synced: 09 Jun 2026

https://github.com/bitsensor/php

BitSensor Web Application Security

bitsensor php security

Last synced: 09 Jun 2026

https://github.com/cflarios/iue-ethical-hacking

Resources for college topics

api flask-api nodejs python security test wireshark

Last synced: 03 May 2026

https://github.com/atensecurity/pulumi-thoth

Official Pulumi provider for Thoth headless control-plane workflows

gitops provider pulumi security thoth

Last synced: 03 May 2026

https://github.com/dhiraviyasundaram/sql-injection-demo

A Flask app demonstrating SQL Injection vulnerability and its prevention using parameterized queries.

demonstration education flask parameterized-queries python security sql-injection sqlite vulnerability web-security

Last synced: 03 May 2026

https://github.com/madi-s/fastapi-security

Interesting authorization method demonstrated with FastAPI

fastapi oauth security

Last synced: 04 May 2026

https://github.com/coldbootsec/secure-iam-lint

Scan your IAM policies before they hit prod. secure-iam-lint catches common misconfigurations with a simple CLI or CI step

aws ci-cd cloud compliance devsecops iam linter python security static-analysis

Last synced: 04 May 2026

https://github.com/gtothani/google-cloud-wordpress-security-audit

Bash script to audit WordPress on Google Cloud HTTP(S) Load Balancing: DNS, SSL/TLS, redirects, security headers, xmlrpc, CDN/cache, Cloud Armor, and more.

bash gcp google-cloud security security-audit shell wordpress

Last synced: 04 May 2026

https://github.com/do6pbln9l/hh-oauth2-keendns-nginx-systemd

Automated HeadHunter OAuth2 infra behind KeenDNS + nginx with token auto-refresh via systemd timers. Test server included; production app lives in a separate project.

api-integration automation bash devops headhunter hhru infrastructure keendns linux nginx oauth2 proxy reverse-proxy security ssl-termination systemd token-refresh

Last synced: 04 May 2026

https://github.com/mateuszskoczek/securebank

Simple secure web application for managing a bank account

bank blazor-server csharp cybersecurity data-protection dotnet security sqlite

Last synced: 04 May 2026

https://github.com/ed555009/utilities-jwt-ed25519

A simple .NET library for generating and verifying JSON Web Tokens (JWT) using Ed25519 public/private key pairs for signing and verification, targeting netstrandard2.1

authentication c-sharp ed25519 eddsa eddsa25519 jwt netstandard21 security

Last synced: 09 Jun 2026

https://github.com/adikum19/password-generator

🔐 Generate secure, random passwords effortlessly with this Python and PyQt6 tool featuring a user-friendly interface and strength indicators.

asp-net-core bios composer console-application diceware diceware-passphrase-generator diceware-passphrases diceware-password generator java objective-c open-source password password-generator passwords php-library pwgen security

Last synced: 04 May 2026

https://github.com/boutetnico/ansible-role-fail2ban

Install and configure Fail2ban with Ansible.

ansible debian fail2ban firewall security ubuntu

Last synced: 04 May 2026

https://github.com/elliot-huffman/discount-hardware-key

Use an Arduino Micro as a hard coded password type. Like the static password functionality of the Yubikey, but less secure.

arduino automation keyboard password security

Last synced: 04 May 2026

https://github.com/luckyfoxdesign/docker-nginx-http

A production-ready secure HTTP Nginx setup with Docker featuring ModSecurity WAF, rate limiting, security headers, and token-based authentication. Designed for secure API gateway deployments with minimal configuration required.

api-gateway containerization devops docker docker-compose infrastructure-as-code modsecurity nginx rate-limiting reverse-proxy security waf web-security

Last synced: 04 May 2026

https://github.com/cyberdns/vaultwarden-backup-container

A secure and efficient solution for backing up and restoring self-hosted Vaultwarden data, ensuring access to critical backup passwords even in case of server loss.

backup data-recovery docker password-management security self-hosted vaultwarden

Last synced: 05 May 2026

https://github.com/crissnamon/ruvik-proto-java

Custom end-to-end encryption protocol in Java (university course work)

aes decryption encryption end-to-end end-to-end-encryption hmac java messanger protocol ratchet rsa ruvik scheme security signal

Last synced: 05 May 2026

https://github.com/mreshboboyev/api-rate-limiter

A robust and scalable API Rate Limiter implementation in .NET Core, supporting 4 algorithms (Fixed Window, Sliding Window, Token Bucket, Concurrency) with IP-based rate limiting. Built using Clean Architecture and integrated with Redis for distributed environments.

api-security clean-architecture concurrency fixed-window ip-based-rate-limiting middleware rate-limiting redis security sliding-window throttling token-bucket

Last synced: 05 May 2026

https://github.com/pieroxius/striker

A powerful CLI toolkit for scraping top crypto wallet addresses and performing high-speed private key brute-force checks across multiple blockchains

bitcoin blockchain bruteforce crypto dash dogecoin ethereum litecoin mnemonic research security solana

Last synced: 05 May 2026

https://github.com/erik-castro/easy_fclean

Ferramenta para exclusão segura de arquivos e diretórios. Parte do conjunto de ferramentas 'easy_tools' para segurança e manipulação de dados.

antiforensics bash-script deletion-tool linux linux-tools security security-tools shell-script

Last synced: 05 May 2026

https://github.com/jfrimmel/talks-and-sources

This repository contains a list of talks and papers, that I find insightful and worth sharing

c concurrency conference conference-talk cplusplus cpp data-oriented data-structures list optimization papers rust security simd software-arch software-design talk talks video videos

Last synced: 05 May 2026

https://github.com/ilanur/arvify.io

Fingerprint-based consent layer for universal AI integrations.

ai claude fingerprint gemini llama mcp mcp-server openai security sveltekit wearable

Last synced: 05 May 2026

https://github.com/kaalpanikh/bastion-host

Secure AWS bastion host setup with Terraform automation, fail2ban, and SSH hardening for private infrastructure access

aws aws-ec2 bastion-host cloud-security devops fail2ban iac infra-automation infrastructure-as-code network-security security ssh-hardening terraform vpc

Last synced: 05 May 2026

https://github.com/themuhd/xo_storage

Decentralised File sharing system using bloackchain technology

blockchain-technology css decentralized filesystem ipfs-blockchain peer-to-peer python security

Last synced: 05 May 2026

https://github.com/labackdoor/ddos-attack-simulation

A research framework for simulating DDoS attacks using infrastructure-as-code with Terraform and Ansible. Built for controlled environments to study attack patterns and test defense mechanisms.

ansible ddos-attacks devops infrastructure-as-code networking research security terraform virtualization

Last synced: 05 May 2026

https://github.com/notdodo/pulumi-k8s

Pulumi deployments for Kubernetes

infrastructure-as-code kubernetes pulumi security

Last synced: 05 May 2026

https://github.com/blackcatacademy/blackcat-database

Primary SQL layer, repositories, migrations and CRUD events. Used by blackcat-database-sync, blackcat-auth, blackcat-identity and blackcat-messaging; ships sync-check.php CLI.

blackcat database devops encryption events kms migrations mysql php schema security sql submodules

Last synced: 06 May 2026

https://github.com/caveyra/electron-executor-11

Roblox Electron Executor is one of the most favorite Roblox Executors at the moment. Before I tell you how to download Electron Executor, let me tell you that it is currently available safely for Windows. But it is not officially available for Android users as of now but the update is coming and will be launched soon.

cryptography electron electron-app electron-exploit electron-v3 gpg mobile nodejs offline privacy python react security

Last synced: 06 May 2026

https://github.com/damianperera/spring-boot-secure

Security module for Spring Boot that applies recommended Secure HTTP Response Headers and more

owasp owasp-top-10 security spring spring-boot spring-boot-starter

Last synced: 06 May 2026

https://github.com/shazeus/hashcrack

Hash identification and lookup tool for CTF and security research

cli cryptography ctf hash-cracking hashing md5 password-cracking pentesting python reverse-hash security sha256

Last synced: 09 Jun 2026

https://github.com/jerichojyant/wildleek

A simple npm package that checks if a password is on a list of the 10,000 most common passwords.

javascript nodejs npm-package security

Last synced: 06 May 2026

https://github.com/mreshboboyev/multi-factor-authentification

This repository demonstrates a Multi-Factor Authentication (MFA) system in .NET, built using Domain-Driven Design (DDD) and Clean Architecture. It includes secure user registration, token-based authentication, MFA activation, recovery codes, and login with MFA enforcement—enhancing security while maintaining flexibility.

c-sharp clean-architecture domain-driven-design dotnet-core jwt-authentication login-protection multi-factor-authentication recovery-codes rest-api security software-architecture

Last synced: 06 May 2026

https://github.com/jkulvich/say-front

🔐 SAY Encrypted messaging without auth. Just SAY that you have got OVER the RED trouble of privacy.

chat crypto encryption messaging say security typescript vue vuejs vuetify

Last synced: 06 May 2026

https://github.com/tvatdci/natours-2025

This project follows the Natours Node.js course by Jonas Schmedtmann. . It is a complete Node.js backend application built during my study of the "Node.js, Express, MongoDB & More" course on Udemy. It covers all essential concepts to master full-stack backend development using modern technologies.

advanced-authentication authorization crud-application encryption error-handling express geospatial-data mongodb mongoose node nosql-database pagination rate-limiting restful-api sanitization security server-side-rendering stripe-payments

Last synced: 06 May 2026

https://github.com/bhattjayd/react-native-vulnerability-scanner

react-native-vulnerability-scanner – A Python tool to analyze React Native APKs for vulnerable npm dependencies by scanning modules.json. It checks packages using Snyk's vulnerability database and provides a detailed security report. 🔍 Find vulnerable dependencies in React Native apps easily!

apk-analysis bugbounty cybersecurity cybersecurity-tools ethical-hacking mobile-security pentesting react-native react-native-security security snyk snyk-scan vulnerability-scanner

Last synced: 06 May 2026

https://github.com/giovannicandido/audit-view

Visualization and search of AuditView Events

angular2 auditing java security security-tools spring spring-boot

Last synced: 06 May 2026

https://github.com/cristimanolache28/employee-performance-tracker

A backend system built with Spring Boot for managing employees, performance evaluations, and skill progression within an organization.

authentication authorization integration-testing java junit jwt management-system maven mockito mysql opensource performance-tracking rest-api security skills-management springboot unit-testing

Last synced: 06 May 2026

https://github.com/aslamanver/aes-javascript-php

AES encrypt from JavaScript (Client-end) and decrypt in PHP (Server-side)

aes aes-encryption encryption javascript php security

Last synced: 07 May 2026

https://github.com/faisalazam/ynami

YNaMi -> Why Not Me: Template project to help with future projects. It aims to provide a template with web layout, database, database migrations, testing, feature toggles, security etc.

database-migrations feature-flags gherkin html-css-javascript integration-testing java jquery security spring-boot unit-testing web-layout

Last synced: 07 May 2026

https://github.com/serverfarmer/sf-php

sf-php extension is responsible for installing and configuring PHP on any operating system supported by Server Farmer.

developer-tools development development-tools devops devops-tools php php-cli php-configuration php-fpm php5 php7 security security-automation security-hardening security-tools

Last synced: 07 May 2026

https://github.com/approov/quickstart-azure-api-management

Approov quickstart to implement the Approov token check in Azure API management platform.

api api-gateway api-security approov approov-backend approov-backend-quicksart approov-integration approov-quickstart azure security

Last synced: 10 Jun 2026

https://github.com/reaandrew/politest

A Go CLI tool for testing AWS IAM policies before deployment using scenario-based YAML configurations and the SimulateCustomPolicy API

aws aws-iam ci-cd cli-tool devops go golang iam policy-testing policy-validation scp security yaml

Last synced: 07 May 2026

https://github.com/mr-yash-01/dvsb

The backend API for the decentralized voting system, built with Node.js and TypeScript, integrates with Ethereum for election management, user authentication, and secure transaction handling.

api backend blockchain election-management node-js nodemon security typescript

Last synced: 07 May 2026

https://github.com/wrg-11/wrg-portfolio

WRG-11 ecosystem operations: version sentry, portfolio dashboard, automation scripts (zero-dep stdlib + GHA cron)

devops github-actions monitoring python security zero-dependency

Last synced: 10 Jun 2026

https://github.com/destan0098/dir-fuzzer

This Tool Fuzz Directory , for use this you must be edit code

security

Last synced: 07 May 2026

https://github.com/hackesticmedusa/password-manager

Password Manager is a web application that allows users to securely store and manage their passwords. Built with React and Vite, it offers a user-friendly interface and robust functionality.

clipboard-functionality javascript mit-license open-source password-management react responsive-design security user-authentication vite web-application

Last synced: 08 May 2026

https://github.com/felipewatter/secure-header-middleware

Middleware Express para adicionar headers HTTP de segurança de forma configurável.

express middleware nodejs security typescript

Last synced: 08 May 2026

https://github.com/u66u/securotron

A simple and user-friendly shell tool to increase security on linux distributions

bash config linux linux-security secure security security-tools shell ssh utility

Last synced: 08 May 2026

https://github.com/swipswaps/fedora-security-hardening-toolkit

Comprehensive security hardening toolkit for Fedora Linux systems with enterprise-grade UX and cross-platform compatibility

automation cis-controls cybersecurity devops fedora hardening linux nist security sysadmin

Last synced: 08 May 2026

https://github.com/eclipsedev1337/rootsecurity

A collection of BotNet's, C2's, Scanners, Loaders and more!

archive clean css3 html5 javascript json modern security site website

Last synced: 08 May 2026

https://github.com/fxzxmic/sign-module

Kernel module signing tool for Fedora Linux with XZ compression support.

c17 compression fedora linux linux-kernel-module openssl security signing

Last synced: 08 May 2026

https://github.com/gabrielfraga962/crud-back-end-projetos

Criação do primeiro Crud - blog pessoal

api-rest java-15 security spring spring-boot swagger

Last synced: 08 May 2026

https://github.com/reconmap/homebrew-tap

Easy to use Homebrew tap containing Reconmap tools.

homebrew macos reconmap security tap

Last synced: 08 May 2026

https://github.com/janthmueller/yubikey-resident

A Docker-based tool for generating and managing resident SSH keys on a YubiKey. 🚀

docker fido2 hardware-key passwordless-login resident-keys security ssh ssh-authentication ssh-keygen yubikey

Last synced: 09 May 2026

https://github.com/navbytes/totp-turbo

High-performance TypeScript library for generating TOTP tokens using Rust backend

2fa authentication otp rust security totp typescript wasm

Last synced: 09 May 2026

https://github.com/nisanth2004/spring-security-recap

This repository demonstrates a secure full-stack application built with React for the frontend and Spring Boot for the backend, implementing comprehensive Spring Security concepts including JWT-based authentication and authorization. Key features include secure login, role-based access control for protected ro

daoauthentication filterchain java jwt jwt-authentication jwt-token security spring springboot

Last synced: 09 May 2026

https://github.com/nemirlev/auth-service-example

Complete authentication & authorization example for microservices using Ory Hydra, Ory Kratos, Apache APISIX and Go. Demonstrates JWT vs opaque tokens, OAuth2 flows, and fine-grained permissions.

apache-apisix api-gateway authentication authorization docker golang jwt microservices oauth2 oidc ory-hydra ory-kratos rbac security

Last synced: 09 May 2026

https://github.com/mamamia0729/enterprise-linux-docker

🐳 Production-ready multi-distribution Linux environment with Docker. Features RHEL UBI 9, Ubuntu 22.04 LTS & CentOS 7 with enterprise security, monitoring & Infrastructure as Code. Built by AWS|Azure AZ-104|CCNA|Security+ certified professional.

centos containerization devops docker docker-compose enterprise infrastructure-as-code linux monitoring portainer rhel security ubuntu

Last synced: 10 Jun 2026

https://github.com/stylepatrick/spring-boot-web-basic-security-template

Possibilities of basic auth + oauth2 login. Basic HTTP Auth with WebMVC and Spring Security. User Repository to PostgresDB and different Roles. OAuth2 connection to Google client.

basic-authentication oauth2 postgresql security spring-boot

Last synced: 09 May 2026

https://github.com/stanleyj03/mcp-for-security

MCP for Security: A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.

ai ai-tools claude fastmcp git-analysis kali-linux npm pentesting prompts python security security-integrations wazuh-integration web-security

Last synced: 09 May 2026

https://github.com/mslinn/scala-sig

Typesafe crypto for Scala

jwt rsa scala security

Last synced: 10 Jun 2026

https://github.com/alielderawi/myshoecollection

An Android app built with Kotlin to catalog and bookmark favorite shoes. It demonstrates MVVM architecture, DataStore for preferences, and Koin for dependency injection. The project features clean code practices and dynamic UI using Kotlin Flow.

accessibility android bindingadapter clean-architecture clean-code datastore dependency-injection design-patterns flow kotlin mvvm-architecture onboarding reactive-programming reactive-ui reactiveui security viewpager2

Last synced: 09 May 2026

https://github.com/ak-alien/pyencoder

PyEncoder is a Python script obfuscator that encodes .py files using marshal, zlib, and base encodings. It supports multi-layer encoding, reverse string obfuscation, and .pyc compilation, compatible with Windows, Linux, and Termux.

base16 base32 base64 encoding encryption linux marshal obfuscation pyc python script-protection security termux windows zlib

Last synced: 10 May 2026

https://github.com/sentinez/quadrum

🗡️ Sentinez Quadrum // Sentinel of the Fourth Layer

ebpf go security

Last synced: 10 May 2026

https://github.com/subhashchandra-birajdar/ecommerce-springboot-backend-project

This REST API is designed for an e-commerce application, enabling core CRUD operations with user authentication,seller authentication. It includes modules for user login/logout, product management, and order processing, ensuring secure and efficient transactions for both sellers and customers.

authentication-backend ecommerce hibernate-jpa mysql-database restful-api security springboot swagger-ui token

Last synced: 10 May 2026

https://github.com/binkylabs/openai-analyzers

Analyzers for the dotnet OpenAI SDK to help you implement better practices with AI

analyzers dotnet openai security tooling

Last synced: 10 May 2026

https://github.com/geekcell/terraform-aws-waf

Terraform module to provision an AWS Web Application Firewall.

aws firewall security terraform terraform-module waf web-application-firewall

Last synced: 10 May 2026

https://github.com/fsero/beekeeper_ansible

Ansible playbooks and modules used to setup Beekepeer project

docker honeypot security ssh

Last synced: 10 May 2026

https://github.com/soulee-dev/ctfkit

CTFKit: An open-source toolkit for effortlessly setting up Capture The Flag (CTF) competitions.

ctf ctfd cybersecurity defcon discord docker security writeups

Last synced: 10 May 2026

https://github.com/jakbin/django-tor

Run your django website on tor using django_tor

django onion onion-service onionshare python security tor

Last synced: 10 May 2026

https://github.com/jeremywildsmith/shadowhash-distributed

Elixir distributed Shadow File password cracker with GPU accelerated cracking for md5crypt hashing algorithm.

cracking-hash cracking-hashes cracking-password cuda distributed-systems elixir erlang hashing nx security

Last synced: 11 May 2026

https://github.com/bernardopg/bitwarden_vault_analyser

Uma aplicação web Python/Flask para analisar exportações JSON do Bitwarden e fornecer insights abrangentes sobre a segurança do seu cofre de senhas.

bitwarden bitwarden-cli django flask gunicorn jinja2 password password-generator pillow python security

Last synced: 11 May 2026

https://github.com/chintanshah35/secretguard

Scan source code for secrets, credentials, and PII — CLI and Node.js API

cli credentials devsecops nodejs pii secret-scanning security typescript

Last synced: 10 Jun 2026

https://github.com/timebertt/talk-credentials-rotation

Credentials Rotation in Kubernetes – Putting Together the Puzzle Pieces

conference credentials-rotation kubernetes security

Last synced: 11 May 2026

https://github.com/amarmuric04/gobot

🤖 A terminal-based automation bot for GoVault, my MERN + Next.js password manager. Automates login, password generation, and storage, all from the CLI.

automation bot browser-automation cli dotenv govault mern-stack nextjs password-manager python security selenium

Last synced: 12 May 2026

https://github.com/stevemats/kemsec

Infosec audit tool designed to provide comprehensive system vulnerability assessments.

audit-log audit-tools cybersecurity healthcare infosec infosectools python python3 security

Last synced: 11 Jun 2026

https://github.com/tebogoyungmercykay/restful_api_implementation_in_dotnet_6

This Implementation serves as a comprehensive guide that empowers developers to understand, interact with, and integrate an Application Programming Interface (API) seamlessly into your applications.

api authentication database dotnet dotnet-framework encryption-decryption get post requests restful-api security singleton

Last synced: 13 May 2026

https://github.com/raullopezpenalva/contact-service

Spring Boot microservice handling contact submissions for my personal website. Includes persistence, admin management and notification system.

backend backend-api backend-service documentation feature infrastructure java security spring-boot

Last synced: 13 May 2026

https://github.com/jokk-itu/saml-demo

Sample WebApp authenticating with KeyCloak using SAML

authentication csharp dotnet identity keycloak saml2 security

Last synced: 13 May 2026

https://github.com/anystack-sh/electron-license-demo-app

Example implementation of Anystack's licensing SDK for Electron applications

electron license-management security

Last synced: 14 May 2026

https://github.com/turtlemonvh/ionic-spark-utils

Utilities for working with Ionic encryption via Spark.

encryption security spark

Last synced: 14 May 2026

https://github.com/declangray/lsa-hunter

A tool for extracting the LSA Key of a Windows machine from the Registry.

encryption lsa security windows

Last synced: 14 May 2026

https://github.com/fusionauth/fusionauth-example-hostedbackend

A sample FusionAuth Backend-for-Frontend app using hosted backend

authentication bff fusionauth javascript oauth2 security serverless

Last synced: 14 May 2026