Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/webreflection/csp

Because Security Matters, and Web libraries, tools, and projects, should be more informative about their state.

badge csp security

Last synced: 15 Feb 2026

https://github.com/tylerchr/pwnedpass

Package pwnedpass is a Go package for querying a local instance of Troy Hunt's Pwned Passwords database.

golang haveibeenpwned hibp offline pwnedpasswords security selfhosted

Last synced: 14 Jan 2026

https://github.com/andresriancho/aws-backup

AWS Backup implementation in terraform

aws backup security terraform

Last synced: 10 Apr 2025

https://github.com/zb3/tiandy-research

This repository contains the results of my August 2020 research of Tiandy's IPC/NVR firmware. I found two vulnerabilities that could be used to remotely recover the administrator password and gain root access to the device.

full-disclosure security

Last synced: 17 Jan 2026

https://github.com/jfrog/jfrog-skills

AI agent skills for the JFrog Platform. Search and download artifacts, query CVEs and exposures, check curation and compliance, trace builds, and more. Install in your AI coding agent and interact with JFrog through natural language.

ai-agent ai-skills artifact-managment artifactory cli devops devsecops jfrog security xray

Last synced: 26 Jun 2026

https://github.com/rek7/patchy

Automated Persistence and Lateral Movement using GCP Patch Management

cloud-native-se cloud-security gcp penetration-testing red-team security

Last synced: 26 Feb 2026

https://github.com/bain3/f.bain

E2EE file uploading website

cryptography security storage website

Last synced: 04 Apr 2026

https://github.com/duomarket/userless

A client and server side solution for zero knowledge authentication, in Go

authentication encryption golang openbazaar security

Last synced: 14 Jan 2026

https://github.com/chamodanethra/biometric_signature

Hardware-backed biometric authentication for Flutter. Create cryptographic signatures using device biometrics with keys stored in Secure Enclave/StrongBox/Windows Hello.

android biometric-authentication cryptography flutter ios macos secure-enclave security strongbox windows windows-hello

Last synced: 01 Apr 2026

https://github.com/s4u/pgp-keys-map

PGP keys map to maven artifacts

hacktoberfest java maven-plugin pgp pgp-key security

Last synced: 11 Oct 2025

https://github.com/alishahidi/apantos

Apantos is a fast and simple framework based on php with security methods and dedicated orm. Modularly

fast framework lightweight php security

Last synced: 13 Jan 2026

https://github.com/toshke/aws-keys-sectool

Command line to list and IP whitelist active AWS credentials

access-control aws security security-tools

Last synced: 14 Dec 2025

https://github.com/jasondrawdy/amaterasu

Lightweight licensing library for .NET applications which allows the managing of licenses via web based scripts and on-the-fly code compilation.

amaterasu antebyte code-generation compiler cryptography csharp dotnet dynamic encryption hacking library license license-management memory-management networking on-the-fly scripting security web windows

Last synced: 22 Apr 2025

https://github.com/X0RBYT3/OSINT-Tools

An Online Collection of Open Source Intelligence Tools

css html osint repository security security-audit security-scan security-tools

Last synced: 12 Jul 2025

https://github.com/chinmina/chinmina-bridge

Allows Buildkite agents to use ephemeral GitHub tokens to authenticate their interactions. Avoids deploy keys and long-lived PATs.

buildkite github github-app oidc security

Last synced: 27 May 2026

https://github.com/0xricksanchez/sploitget

A wrapper script for https://sploitus.com to scrape query results for tools and exploits

ctf exploit exploitation pentest-tool security wrapper-api

Last synced: 13 Apr 2025

https://github.com/krisnova/.net

Compiled Works: Computer Science, Engineering, Analysis, Research

analysis computer-science kernel linux research security

Last synced: 14 Apr 2025

https://github.com/frmoretto/hardstop

Don't let AI destroy your hard work! HardStop is a rock-solid protection for AI-generated commands. Pre-execution safety validation for Claude Code, Claude Cowork. Catches dangerous commands before they run: whether from AI mistakes, hallucinations, prompt injection, or misunderstood instructions. Seatbelts for the agentic AI era.

agentic-ai ai-safety claude claude-ai claude-code claude-code-hooks claude-code-plugin claude-code-plugin-marketplace claude-code-plugins claude-code-plugins-marketplace claude-cowork cowork developer-tools llm pre-commit-hook prompt-injection security

Last synced: 14 Feb 2026

https://github.com/gcmurphy/osv

Rust implementation of ossf osv specification

rust security vulnerability-scanners

Last synced: 11 Mar 2026

https://github.com/mxschmitt/react-have-i-been-pwned

React component for: Have I Been Pwned?

hibp javascript passwords react security

Last synced: 19 Apr 2025

https://github.com/avishayil/cf-signer

Tool for signing and verifying the integrity of CloudFormation templates

aws cloudformation integrity security signing

Last synced: 01 Apr 2025

https://github.com/y-miyazaki/terraform-aws-base

Initially set base configuration created by Terraform.

aws metrics monitoring security terraform terraform-aws

Last synced: 17 Jan 2026

https://github.com/rocketshipapps/adblockfast-android

[Moved] Adblock Fast for Android is an Android port of the Adblock Fast app.

android data-structures frontend gradle html http java mobile security xml

Last synced: 25 Jul 2025

https://github.com/bincyber/vigilant

a security controller for Kubernetes

controllers kubernetes security

Last synced: 25 Aug 2025

https://github.com/camandel/check-password-strength

check-password-strength is an open-source tool that could help you to check how your passwords are good

password password-strength security tool zxcvbn

Last synced: 12 Jan 2026

https://github.com/DoneDeal0/codefather

Codefather protects your codebase by controlling who can change what. Set authorization levels, lock down files, and enforce your rules—offline via CLI or online with GitHub Actions.

access-control cli code-review codefather codeowner-approval codeowners codeowners-files file-protection github-actions godfather mafia protection repository-management reviewer reviewer-assignment rule-based security team-management

Last synced: 11 Sep 2025

https://github.com/padok-team/yatas-aws

Plugin for YATAS that audits AWS accounts for misconfiguration and security issues

audit aws hardening misconfiguration security yatas

Last synced: 12 Jul 2025

https://github.com/bit4mind/anon-service

Transparent proxy through Tor with optionally DNSCrypt and Anonymized-DNS feature enabled.

anonymity anonymized anonymized-dns dns dnscrypt dnscrypt-proxy iptables privacy proxy security shell tor transparent-proxy unbound

Last synced: 18 Apr 2025

https://github.com/cybrota/scharf

Static analysis tool to Identify and Fix GitHub Actions prone to Supply‑Chain Risks

ci-cd cybersecurity devsecops github github-actions go golang security security-tools supply-chain-security

Last synced: 17 Jan 2026

https://github.com/putyourlightson/craft-sherlock

Security scanner and monitor to keep your site and Craft CMS secure.

craft-plugin craftcms monitor monitoring scanner secure security

Last synced: 31 Jul 2025

https://github.com/azure/azurekeyvault

R interface to Azure Key Vault

azure azure-key-vault azure-sdk-r r security

Last synced: 20 Oct 2025

https://github.com/alegrey91/vex8s

Generates VEX documents by parsing the Kubernetes SecurityContext configuration

security security-scanner security-tools trivy vex vulnerability

Last synced: 27 Feb 2026

https://github.com/moul/totp-keychain

:lock: TOTP cli backed by the OS X keychain

2fa authentication cli cryptography keychain mfa security totp

Last synced: 28 Apr 2025

https://github.com/netflix-skunkworks/stethoscope-examples

Example Express application for collecting data from the Stethoscope app

security

Last synced: 09 Oct 2025

https://github.com/austincabler13/acsecurity

AcSecurity is a Python module designed to scan applications for common security vulnerabilities. It checks for hardcoded secrets, dependency vulnerabilities, and code quality issues.

acsecurity ai chatgpt copilot india-dev made-in-usa security security-tools

Last synced: 26 Mar 2025

https://github.com/zeroxjf/cve-2026-20687-applejpegdriver-uaf

CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC)

apple arm64 cve-2026-20687 ios kernel poc security use-after-free vulnerability

Last synced: 03 Jun 2026

https://github.com/middlewares/honeypot

PSR-15 middleware to implement a honeypot spam prevention

honeypot http middleware psr-15 security spam-protection

Last synced: 01 Apr 2026

https://github.com/ait-testbed/attackbed

The AttackBed is a simulated enterprise network with numerous vulnerabilities. Attacks in this testbed are executed automatically and cover a variety of tactics and techniques of the MITRE ATT&CK enterprise framework.

aecid ai ait ansible atb attackmate dataset environment machine-learning openstack research security simulation terraform terragrunt testbed vulnerability

Last synced: 02 Mar 2026

https://github.com/robertdebock/ansible-role-auditd

Install and configure auditd on your system.

ansible auditd molecule monitoring playbook security system tox

Last synced: 17 Mar 2026

https://github.com/wolfssl/wolfkeymgr

Secure key management service for middle-box decryption of TLS traffic

apache enterprise-transport-security ets key-management security ssl tls wolfcrypt wolfssl

Last synced: 27 Apr 2025

https://github.com/hegdepavankumar/cisco-asa-firewall-training

Welcome to our comprehensive Free Cisco ASA Firewall Training – the ultimate guide to mastering the art of network security. Whether you're a beginner looking to understand the basics or an experienced professional seeking advanced configurations, our hands-on course is tailored just for you.

asa asa-firewall cisco-asa cisco-firewall-training firewall firewall-configuration firewall-management security statefull training

Last synced: 07 Feb 2026

https://github.com/openwall/phpass

Legacy password hashing framework for PHP applications needing to support or having previously supported PHP below 5.5

bcrypt hash hashing password php security

Last synced: 09 Apr 2025

https://github.com/cosad3s/njsdump

Dump paths & pages from Next.js Manifest

bugbounty nextjs recon security

Last synced: 14 Oct 2025

https://github.com/stratum-mining/stratumprotocol.org

Website for the Stratum V2 bitcoin mining protocol

bitcoin decentralization efficiency flexibility mining security

Last synced: 04 Sep 2025

https://github.com/anomaly/gallagher

The missing toolkit for extending Gallagher Command Centre, featuring a CLI, SQL interface, TUI and a Python idiomatic SDK

cli foss gallagher python sdk security sql tui

Last synced: 14 Jan 2026

https://github.com/gredler/aegis4j

A Java agent that disables platform features you don't use, before an attacker uses them against you.

devsecops java java-agent security

Last synced: 14 Jan 2026

https://github.com/kamil-kielbasa/libedhoc

EDHOC (RFC 9528): Lightweight authenticated key exchange in C for IoT and constrained devices

authentication c coap constrained-devices cryptography edhoc embedded ietf iot key-exchange oscore rfc9528 rfc9529 security zephyr

Last synced: 02 Apr 2026

https://github.com/grapheneos-archive/kernel_google_crosshatch

Pixel 3, Pixel 3 XL, Pixel 3a and Pixel 3a XL kernel sources.

android blueline bonito crosshatch grapheneos sargo security

Last synced: 04 Oct 2025

https://github.com/sharenowtech/virity

Automated Vulnerability Analysis and Disclosure of Docker Containers

anchore-engine cve docker etcd k8s security sensu

Last synced: 05 Sep 2025

https://github.com/marcopaga/plain-spring-on-kubernetes

A demo Spring Boot application using the Kubernetes infrastructure

helm kubernetes pulumi security spring-boot

Last synced: 27 Oct 2025

https://github.com/dropbox/bhakti

Bundle of security analysis scripts for keras tensorflow models

cdk python security yara-rules

Last synced: 04 Jul 2025

https://github.com/pawamoy/django-meerkat

Security audit tool for Django sites

audit django monitoring security

Last synced: 24 Oct 2025

https://github.com/cr0hn/wordpress-docker-sec

Anti-hacking tools deploying configuration for Wordpress

hacking hardening nmap plecost security wordpress wp-scan wp-scanner

Last synced: 11 Apr 2025

https://github.com/agadiffe/windowsmize

:pushpin: PowerShell script to automate and customize the configuration of Windows. General settings, telemetry, network protocols, apps removal/installation, ramdisk, services, scheduled tasks.

bloatware cleanup debloat debloater optimize powershell powershell-module powershell-script privacy security telemetry tweaks windows windows-10 windows-11 windows10 windows11

Last synced: 11 Apr 2025

https://github.com/elcritch/keyx

Elixir implementation of Shamir's Secret Sharing

crypto secret-sharing security

Last synced: 07 May 2025

https://github.com/0xkoda/defi-dns-whitelist

Minimize your attack surface by allowing only essential traffic for signing Safe transactions.

dns ethereum security

Last synced: 19 Jul 2025

https://github.com/nyxnor/onioncomms

OnionComms is a repository of script to run an onion server and guides to configure client side applications to connect to any onion service that uses the same protocol, therefore, onion communications.

file-sharing hidden-service instant-messaging omemo onion-service open-source otr privacy proxy remote-administration rss security self-hosted tor tor-network voip xmpp xmpp-server

Last synced: 13 Jun 2025

https://github.com/middlewares/csp

PSR-15 middleware to add the Content-Security-Policy header to the response

csp http middleware psr-15 security

Last synced: 06 May 2025

https://github.com/anvilsecure/symlink-secure-boot-vm

VM demonstration various symlink and hard link attacks against secure boot. See the whitepaper at: https://www.anvilventures.com/blog/defeating-secure-boot-with-symlink-attacks.html

attacks boot hacking secure secureboot security symlinks vms whitepaper

Last synced: 07 Jan 2026

https://github.com/gamemann/notes-and-guides

Notes and guides I've made mostly exported from GFLClan.com.

anycast debian dpdk guides hardening linux network networking notes security ubuntu xdp

Last synced: 18 Mar 2025

https://github.com/contributte/oauth2-client

:lock: OAuth2 client for Nette Framework

client contributte http nette nette-framework oauth2 security

Last synced: 30 Oct 2025

https://github.com/somajitdey/ipfs-link

Publish dynamic multiaddresses of private or isolated nodes using IPNS. Benefit - 1. Bandwidth savings, 2. Avoiding DDNS 3. Securely exposing localhost behind NAT.

bandwidth-saver bootstrap dynamic-ip expose-localhost ipfs ipfs-node ipns nat-traversal port-forwarding private-network remote-shell reverse-proxy security

Last synced: 07 May 2025

https://github.com/nayakpenguin/easy-api-encryptor

"easy-api-encryptor" 🚀 is a lightweight NPM package facilitating seamless encryption and decryption of data between Node.js and React.js. Ensure secure communication in your applications with minimal setup, making it easy to protect sensitive information during transit.

api-encryption encryption-decryption npm npm-package security

Last synced: 18 Jun 2025

https://github.com/buanzo/webmon

A scalable, plugin-based url asset monitoring system based on zeromq, flask-restful, redis and docker-compose

asset-monitoring docker docker-compose flask-restful osint osint-framework osint-python python3 redis security url-monitor web-monitoring

Last synced: 11 Apr 2025

https://github.com/devteds/e2-setup-private-docker-registry

Setup private docker registry using docker machine - https://devteds.com/episodes/2-setup-private-docker-registry-secure-with-ssl-password

digitalocean docker docker-compose docker-machine docker-registry free-ssl free-ssl-certificates nginx private-docker-registry security ssl-certificates

Last synced: 10 Apr 2025

https://github.com/FIWARE/academy

:mortar_board: Video tutorials, slide decks and other training materials for developers learning about the FIWARE ecosystem.

context-broker contextual-data data-publication fiware generic-enablers iot-agent monetization processing robotics security tutorial video-tutorial

Last synced: 04 May 2025

https://github.com/dotnet-labs/client-ip-safelist

Client IP safelist for ASP.NET Core | .NET 5 | CIDR | Network | allowed list | IP restriction

allowedlist api cidr client-ip dotnet dotnet-core dotnet5 dotnetcore integration-tests ip-restrictions ngrok remote-ip remoteip safe-list security

Last synced: 08 Aug 2025

https://github.com/ihexon/revm

revm helps you quickly launch Linux VMs / Containers

container docker libkrun orbstack podman sandbox security vfkit virtualization vm

Last synced: 09 Mar 2026

https://github.com/torden/ngx_hidden_signature_patch

Just! a Hide Server Signature of Nginx Web Server in response header and in response error

hidden-version nginx patch security

Last synced: 18 Jan 2026

https://github.com/org-metaeffekt/metaeffekt-universal-cvss-calculator

A TypeScript implementation of CVSS 2.0, 3.0, 3.1 and 4.0, alongside a web application for calculating scores for multiple CVSS vectors simultaneously.

calculator cve cvss cvssv2 cvssv3 cvssv4 javascript library security typescript webapplications

Last synced: 12 Jan 2026

https://github.com/feross/security

Security Policies and Procedures for @feross projects

disclosure javascript nodejs policy report security

Last synced: 13 Sep 2025

https://github.com/ajayrandhawa/visual-basic-scripts

Visual Basic Scripts Utilities. Fun, Automation, Fundamentals. With the help of these scripts, I develop lots of Exploits which I'm used for automation system tasks. these vb scripts I am also used for system security exploitation.

automation basic exploitation fun fundamentals hacking-tool project scripts security tutorials vb-script visual visual-basic

Last synced: 03 Jan 2026

https://github.com/mitre/aws-s3-baseline

A micro InSpec baseline to check for insecure or public s3 buckets in your VPC

aws aws-s3-security aws-security inspec microprofile mitre-corporation mitre-inspec mitre-saf s3 s3-bucket s3-bucket-leak s3-security security

Last synced: 29 Jul 2025

https://github.com/stakater/stakaterplatform

Stakater platform provides out of the box stacks to control, monitor, log, trace and security for applications deployed on kubernetes using CI/CD pipelines.

ci-cd logging monitoring security tracing

Last synced: 10 Aug 2025

https://github.com/snej/secret-handshake-cpp

SecretHandshake secure connections in C++, with Cap'n Proto support

capnproto cplusplus cryptography networking security

Last synced: 07 May 2025

https://github.com/NodeSecure/report

NodeSecure HTML & PDF report generator for any public and/or private git repositories.

hacktoberfest nodejs report security security-tool

Last synced: 02 Aug 2025

https://github.com/netflix-skunkworks/bucketsnake

An AWS lambda function that grantsss S3 permissionsss at ssscale.

aws badpunsss cross-account iam lambda permissions s3 security serverless

Last synced: 28 Jul 2025

https://github.com/v-thakkar/talks

This repository contains the slides of my talks.

coccinelle ebpf embedded-linux kernel linux security static-code-analysis virtualization xen

Last synced: 17 Mar 2025

https://github.com/mrdcvlsc/aes

A Lightweight Single Header file C++ AES Library that also supports AES Hardware Acceleration Technology

aes aes-128 aes-decryption aes-encryption aes192 aes256 aesni armv8 block-cipher blockcipher cipher confidentiality cplusplus cpp decryption encryption hardwareaccelerated key library security

Last synced: 15 Oct 2025

https://github.com/mk-fg/git-nerps

Tool to encrypt and manage selected files (or parts of files) under git repository

convenience cryptography git nacl python secret-storage security tool

Last synced: 26 Oct 2025

https://github.com/buskill/awesome-buskill-triggers

Antiforensic actions to secure your device if it's physically stolen from you

anti-forensics deadmanswitch infosec opsec security tripwire

Last synced: 05 Mar 2026

https://github.com/pepelux/stuncheck

Set of tools to audit and exploit STUN/TURN servers

hacking penetration-testing pentesting security security-audit security-tools stun turn

Last synced: 26 Oct 2025

https://github.com/guardian360/infosec-agent

Open source application to gain insights into the privacy and security of windows devices.

golang privacy security windows

Last synced: 14 Jan 2026

Security Awesome Lists
the-book-of-secret-knowledge 74 Awesome-Hacking 83 awesome-security 330 awesome-web-security 424 awesome-ctf 220 awesome-hacker-search-engines 566 awesome-privacy 641 android-security-awesome 230 awesome-incident-response 221 Awesome-WAF 175 DevSecOps 187 awesome-security-hardening 207 awesome-infosec 215 awesome-cybersecurity-blueteam 252 WebHackersWeapons 431 backend-cheats 961 awesome-vehicle-security 227 awesome-sec-talks 265 awesome-game-security 92 awesome-nodejs-security 221 awesome-cloud-security 154 awesome-iot-hacks 70 awesome-embedded-and-iot-security 131 alternative-frontends 119 DevSecOps 48 Awesome-FL 4,069 Awesome-Cybersecurity-Datasets 54 awesome-golang-security 34 awesome-windows-domain-hardening 70 Crypto-OpSec-SelfGuard-RoadMap 473 awesome-azure-architecture 311 awesome-lists 737 osx-and-ios-security-awesome 59 awesome-llm-security 101 awesome-executable-packing 756 awesome-aws-security 173 awesome-ethereum-security 81 awesome-vulnerable-apps 100 Awesome-Jailbreak-on-LLMs 427 awesome-he 90 MobileHackersWeapons 73 npm-security-best-practices 33 awesome-security-GRC 81 awesome-anti-forensic 143 security-apis 114 awesome-python-security 35 awesome-opa 226 awesome-runners 38 graph-adversarial-learning-literature 314 npm-security-best-practices 39
Security Categories
Uncategorized 3,542 fl in top-tier journal 3,255 :books: Literature 2,575 fl in top ml conference and journal 1,564 Tools 1,410 Pentesting 1,143 Operating Systems 1,137 Attack 1,071 Other Lists 798 fl in top ai conference and journal 759 カテゴリ 720 fl in top cv conference and journal 673 Papers 602 Weapons 515 Resources 508 Official 497 Threat Hunting: 480 **Мероприятия** 465 Defense 449 Malware Analysis 434