An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/ayemunhossain/secure-session-based-jwt-authentication

🔒 Introducing an authentication project crafted with Node.js, featuring session-based JWT token authentication and fortified with CSRF protection. Elevate your security measures while enjoying the seamless user experience provided by this robust solution.

ayemunhossain csrf-protection jwt jwt-token jwt-vs-session security session session-management token

Last synced: 24 Mar 2025

https://github.com/ichhabrecht/devtools

Adds nice developer tools to your TYPO3 installation

changes developement extension integrity manager security typo3 typo3-cms typo3-extension

Last synced: 12 Apr 2025

https://github.com/malikmaky/keemanager

KeeManager is a secure password and data management desktop application designed to help users securely store, manage, and access sensitive information.

encryption-decryption hash javascript key-der rust security svelte tailwindcss tauri tauri-app

Last synced: 11 Apr 2026

https://github.com/ladjs/store-ip-address

Stores a user's IP address in the background for Lad

address ip ipv4 ipv6 koa lad mongoose passport security store

Last synced: 15 Apr 2025

https://github.com/ractstudio/essential-wp-tools

Essential WP Tools is an all-in-one solution for optimizing, securing, and enhancing your WordPress website. With a comprehensive suite of features, this plugin empowers website owners to streamline their site management, boost performance, and fortify security effortlessly. Project website: https://ewpt.ractstudio.com/

ad adsense essential essential-wp-tools ewpt perfromance security seo share tools wordpress wordpress-plugin wp

Last synced: 29 May 2026

https://github.com/moltenbit/ufw-automatic-ip-blacklisting

Automatic import of UFW rules for daily generated IP-blacklists.

blacklists security threats ufw

Last synced: 14 Apr 2025

https://github.com/kaiiyer/emailrep

This is a go library for interacting with the EmailRep service

api email emailrep golang json-api security

Last synced: 16 Jan 2026

https://mohamedabdallah-14.github.io/awesome-claude-hooks/

Production-ready Claude Code hooks: security guards, quality gates, automation, context injection, and starter packs. Tested, auditable, copy-paste installable.

ai-coding anthropic automation awesome-list claude claude-code developer-tools devtools hooks security shell

Last synced: 17 Jun 2026

https://github.com/ibrahmsql/discoursemap-plugin

A comprehensive professional security auditing plugin for Discourse. This plugin provides automated security assessment capabilities to identify vulnerabilities, misconfigurations, and security issues in your Discourse installation

discourse discourse-plugin discourse-secuirty discoursemap forum-security red-team ruby ruby-on-rails security security-testing security-tools vulnerability-scanner

Last synced: 18 May 2026

https://github.com/loicttn/notebooks

All my jupyter notebooks used to learn Cryptography, Mathematics, Security and Machine Learning.

algorithms cryptography jupyter-notebook machine-learning mathematics security

Last synced: 11 Aug 2025

https://github.com/seisvelas/SAN-Scanner

Burp Suite extension for passively discovering Subject Alt Names in SSL/TLS certificates

burp burp-extensions burpsuite security security-tools ssl-certificates

Last synced: 13 May 2025

https://github.com/monke443/cve-2023-40028

Arbitrary file read in Ghost-CMS allows an attacker to upload a malicious ZIP file with a symlink.

cve cve-2023-40028 exploit ghost-cms github pentesting security vulnerability

Last synced: 07 May 2025

https://github.com/merci-libre/genpass-rs

A password management tool written in Rust. Generates Extended ASCII, ASCII, and alphanumeric strings, and uses steganography to store passwords into images as pixels.

cli cryptographically-secure linux modular password-generator password-manager rust security security-tools steganography windows

Last synced: 03 Apr 2026

https://github.com/bodadotsh/npm-security-best-practices

A list to stay safe from NPM supply chain attacks

deno javascript list nodejs npm pnpm security yarn

Last synced: 27 Sep 2025

https://github.com/saltstack-formulas/suricata-formula

A saltstack formula to install suricata on RHEL or Ubuntu based systems

automation ids monitoring network nsm salt-formula saltstack security suricata

Last synced: 02 May 2025

https://github.com/xorgxx/doctrine-encryptor-bundle

This bundle provides Encrypt/Decrypt data sensible in a Db system in your application. Its main goal is to make it simple for you to manage encrypt & decrypt sensible data into Db! This bundle is to refresh the old bundle [DoctrineEncryptBundle]

doctrine doctrine-orm encryption halite openssl security

Last synced: 24 Dec 2025

https://github.com/assaf-r/aisir

Named after the beautiful loch Aisir in northen Scotland, Aisir is an Ebpf based tool that logs and filters connection to remote IP addresses

ebpf ebpf-programs firewall linux security security-tools

Last synced: 01 Apr 2026

https://github.com/rsrdesarrollo/auto-ysoserial

Generate all ysoserial payloads with burp collaborator (or similar)

burp burpsuite exploit java python security security-tools ysoserial

Last synced: 15 May 2026

https://github.com/brave-experiments/defi-privacy-measurements

Code and data supporting our research projects on security and privacy issues in DeFi sites.

blockchain defi erc20 ethereum privacy security

Last synced: 07 Apr 2025

https://github.com/th3s4mur41/demo-auto-security-release

How to leverage GitHub and semantic release to reduce vulnerabilities in your packages

article blog blogging demo dependabot dependencies github-actions security semantic-release vulnerabilities

Last synced: 18 Jul 2025

https://github.com/pregress/tflint-ruleset-azurerm-security

TFLint ruleset to enforce security best practices on the AzureRM provider

azure azure-resource-manager azurerm azurerm-terraform-provider security terraform tflint tflint-ruleset

Last synced: 11 Apr 2025

https://github.com/jedisct1/soundcheck

Use an Arduino to send text messages when an attached mic detects a sustained, abnormal sound level.

arduino security

Last synced: 20 May 2026

https://github.com/rsksmart/reproducible-builds

Reproducible builds of RSKj's dependencies

blockchain reproducible-builds rsk security smart-contracts

Last synced: 02 Jan 2026

https://github.com/zackeryrsmith/cval

A layer of protection for python's eval function

eval pypi-package python python3 security

Last synced: 19 Mar 2025

https://github.com/isovalent/cilium-up-and-running

This repository contains manifests, scripts, and configurations referenced in the O'Reilly book Cilium Up and Running. These resources are intended to help readers experiment with Cilium features, reproduce demonstrations, and deepen their understanding of Kubernetes networking, security, and observability.

cilium ebpf kubernetes networking observability security

Last synced: 17 Jul 2025

https://github.com/shirshadatta/server-hardening

Ansible Playbooks for Server Hardening, these playbooks have been tested in AWS servers to provide and configure security in multiple servers.

ansible ansible-galaxy ansible-playbook ansible-role automation hacktoberfest hacktoberfest2020 nginx-server security testing

Last synced: 19 May 2026

https://github.com/r3li4nt/aescrypter

Encrypt and Decrypt files with Advanced Encryption Standard.

aes aes-128 aes-192 aes-256 aes-encryption cryptography decrypt encrypt linux python security

Last synced: 09 Mar 2026

https://github.com/astrid-project/lcp

In each local agent, the control plane is responsible for programmability, i.e., changing the behaviour of the data plane at run-time.

agent beats control data ebpf elasticsearch log logstash management programmability security

Last synced: 06 Apr 2025

https://github.com/robertdebock/ansible-role-collectd

Install and configure collectd on your system.

ansible collectd molecule playbook security tox

Last synced: 24 Apr 2025

https://github.com/tubenhirn/rasic

create issues for cve's found by trivy.

cve issues security

Last synced: 13 May 2026

https://github.com/volkansah/tor-scapy-application

This project is a simple example of using Stem and Scapy together to create an anonymized network analysis tool. The application can connect to a running Tor process or start a new one, send network packets through the Tor network, and rotate identities.

admins analytics defense hack hacking offensive python scapy script security stem tor wardrive

Last synced: 17 Aug 2025

https://github.com/thomas-dev7/finwallet

finWallet é uma aplicação fullstack desenvolvida com Laravel para gestão financeira pessoal. Inclui funcionalidades de cadastro, autenticação, depósitos, transferências e histórico de transações, com foco em segurança, validações e código limpo.

alpinejs breeze challenge cripto css deployment framework fullstack laravel mobile mysql php responsive-design security tailwindcss wallet

Last synced: 07 Mar 2026

https://github.com/meinto/anonymous-api-auth-provider

Prevent unauthorised access of public endpoints by for example bots or bad clients.

auth authorization public-api security session-token

Last synced: 29 Mar 2025

https://github.com/aayushiahlawat/shield-chat-android-app

Shield Chat is an Android messaging application developed using Java and Firebase technologies

android android-application authentication chatting-app firebase java security

Last synced: 08 May 2026

https://github.com/nystudio107/craft-twig-sandbox

Allows you to easily create a sandboxed Twig environment where you can control what tags, filters, functions, and object methods/properties are allowed

craftcms sandbox security twig

Last synced: 14 Jul 2025

https://github.com/artivain/reseau-discord-node

Node.js module for interacting with the Réseau Discord Artivain API.

api axios blacklist discord discord-api discord-bot free security sus

Last synced: 11 Apr 2025

https://github.com/defguard/yubikey-provision

YubiKey provisioning tool used by defguard security platform

grpc security yubico yubico-otp yubikey

Last synced: 11 Apr 2025

https://github.com/thomasthelen/vulnerablecs

Applications demonstrating exploit proof of concepts in C#

buffer-overflow hacking security stack-overflow

Last synced: 30 Apr 2025

https://github.com/ysskrishna/shai-hulud-detector

A CLI security scanner that detects GitHub accounts compromised by the “Sha1-Hulud: The Second Coming” npm supply-chain worm.

github malware malware-detection nodejs npm pypi pypi-package security shai-hulud shai-hulud-detector typer vulnerability-scanners worm ysskrishna

Last synced: 24 Dec 2025

https://github.com/graphtylove/python_with_tor

Repo to demonstrate how to use TOR with python.

python python3 sec security tor

Last synced: 11 Jun 2026

https://github.com/alexrasch/virustotal-desktop-widget

VirusTotal Desktop Widget: A VirusTotal desktop widget for Windows that performs file scans and displays system information such as RAM and CPU usage. Note: An API key is required to use the VirusTotal API.

api desktop desktop-app dotnet-core security virustotal virustotal-api windowsforms

Last synced: 04 Jan 2026

https://github.com/sap/vs-code-extension-for-project-credential-digger

VS Code extension for project Credential Digger https://github.com/SAP/credential-digger

api-key code-scan credential-digger github-scan github-security password secret secret-scan security

Last synced: 22 Jun 2025

https://github.com/vsliouniaev/go-pass-cache

Better than sending passwords directly through your instant messaging client!

password password-manager password-store security security-tool small-business small-tools web website

Last synced: 02 Feb 2026

https://github.com/psnappz/shadowguard

Fast & Reliable API Security Engine

api-security firewall security

Last synced: 15 Apr 2025

https://github.com/le0pard/mpw.js

MPW.js is a JavaScript implementation of the Master Password App algorithm

algorithm javascript mpw security

Last synced: 20 Jun 2025

https://github.com/aabbtree77/auth-starter-backend

Backend for a complete session-based user authentication: Bun, Hono, Drizzle, SQLite.

authentication authorization backend-api bun cookie cors credentials crud drizzle hono minimalism ngrok security session sqlite typescript user-password xss

Last synced: 07 May 2025

https://github.com/dmkebusinessgmbh/typo3-mksanitizedparameters

Sanitize `$_GET`, `$_POST` and `ServerRequest $request` before the processing of TYPO3 starts. Take a look into the documentation how to add your own rules or see which one exist.

sanitizer security typo3 typo3-extension

Last synced: 29 Jul 2025

https://github.com/tek-works/articles

Using to store backups of Deaconn's articles made in Markdown.

articles blog cybersecurity deaconn django linux markdown modern networking real-time security space updates

Last synced: 19 Feb 2026

https://github.com/cityssm/simple-password-generator

Makes generating simple or complex, appropriate passwords a breeze.

generator hacktoberfest password password-generator safe security unleet zxcvbn

Last synced: 03 Aug 2025

https://github.com/itsanuragsingh/secret-hunter

A powerful command-line tool to scan your codebase for hardcoded secrets, API keys, and sensitive information.

cli scanner secrets security security-tools

Last synced: 03 Aug 2025

https://github.com/golab-arch/synaptic-sentinel

The vibe-coding security sentinel. Apache-2.0 agentic security toolkit for AI-assisted projects: 5 deterministic scouts + LLM Brain Layer (BYOK Anthropic), in the IDE and CI.

ai-coding ai-generated-code byok llm-security sast security synaptic taint-analysis vibe-coding vscode-extension

Last synced: 29 May 2026

https://github.com/authress/identity-aware-proxy

Identity Aware Proxy and S3 Private Website enable service

authentication authress iap identity-aware-proxy private-website security

Last synced: 07 Aug 2025

https://github.com/njmarko/smart-secure-home

Smart home with security. IoT. HTTPS (SSL/TLS), CSR, Certificates, Spring-boot, Angular, Drools, RabbitMQ, MongoDB, PostgreSQL.

angular certificates csr drools https iot mongodb postgresql rabbitmq security smart-home spring-boot

Last synced: 03 Feb 2026

https://github.com/prdn/ksb

sb26 [Kernel Socks Bouncer] is a Linux Kernel 2.6.x Loadable Kernel Module that that redirects tcp connection (to user-defined target hosts) through socks 4/5 chains.

kernel privacy security

Last synced: 25 Jun 2025

https://github.com/gautamjkr/safe-paste

🛡️ A privacy-first Chrome extension that intercepts clipboard data to redact PII (emails, keys, CCs) before pasting into AI assistants like ChatGPT & Gemini. 100% local, zero-leakage "privacy firewall."

browser-extension chatgpt chrome-extension cybersecurity data-protection gemini pii-redaction privacy privacy-tools react security typescript

Last synced: 15 Jan 2026

https://github.com/pyenb/cloudcheck

Checks if a given website, or list of websites, use the cloudflare service or not.

cloud cloudflare python python3 security security-automation security-tools waf waf-bypass

Last synced: 02 Mar 2026

https://github.com/redoubt-cysec/provenance-template

Production-ready template demonstrating supply chain security, SLSA provenance, and multi-platform distribution for Python CLIs

attestation cli devsecops github-actions homebrew provenance pypi python reproducible-builds sbom security sigstore slsa supply-chain-security template verification

Last synced: 28 Apr 2026

https://github.com/kareimgazer/des

Implementation of the Data Encryption Standard algorithm using C++

cipher-algorithm cryptography data-encryption-standard security

Last synced: 29 Mar 2025

https://github.com/nurislom373/springmicroservice

A simple example of setting up a microservices system using Spring, Spring Boot and Spring Cloud.

cloud java kotlin microservice security spring

Last synced: 09 Apr 2025

https://github.com/devonfw/security

OWASP solution guidelines for devonfw

owasp security

Last synced: 02 Jan 2026

https://github.com/geminimir/promptproof

Deterministic LLM testing for CI. Record→Replay + policy-as-code to block risky merges (PII, schema drift, regressions, budget creep).

anthropic ci github-actions guardrails llm openai prompt rag security testing

Last synced: 09 Sep 2025

https://github.com/theredspy15/budgetvpn

Work-in progress free VPN alternative

privacy python security vpn wip

Last synced: 05 Apr 2025

https://github.com/jeremylaratro/purplesploit

Purplesploit - a framework for ultimate pentesting workflow efficiency

cyber offensive offsec pentesting purple purpleteam purpleteaming redteam security

Last synced: 21 May 2026

https://github.com/destan0098/basicauthbruteforce

This App BruteForce Basic Auth Pages , Just For Education

brute-force brute-force-attacks bruteforce security websecurity

Last synced: 20 Jun 2026

https://github.com/sthenauth/zxcvbn-hs

Password strength estimation based on zxcvbn

haskell security zxcvbn

Last synced: 11 Apr 2025

https://github.com/gofurry/web-profiler

A lightweight Go middleware for request profiling, exposing entropy, fingerprints, complexity, and charset insights through net/http context.

go http middleware observability request-analysis security

Last synced: 08 Apr 2026

https://github.com/sjinks/ww-lock-user-to-ip

WordPress plugin to lock users to specific IP addresses

ip lock plugin security wordpress wordpress-plugin

Last synced: 10 Apr 2025

https://github.com/elliotwutingfeng/steam_totp

A Dart library for generating 5-character alphanumeric Steam TOTP codes.

crypto cryptography mfa otp security

Last synced: 10 Jul 2025

https://github.com/pirate-emperor/cipherx

CipherX is a verification project for Advanced Encryption Standard (AES-128) using Universal Verification Methodology (UVM). It leverages Verilog, SystemVerilog, and Python to ensure robust encryption algorithm validation, integrating comprehensive UVM components and tests.

aes-128 cryptography cryptography-algorithms dataencryption dataencryptionstandards digitaldesign encrytption hardwareverification python security testing-framework uvm verification verilog

Last synced: 26 Jan 2026

https://github.com/claudiaslibrary/visualsec

A tool for visualizing and analyzing cybersecurity data as interactive graphs. Supports entity modeling, risk-based coloring, attack path analysis, and data import/export. Designed for OSINT and cybersecurity professionals.

cybersecurity ethical-hacking graph hacking hacking-tool matplotlib network osint penetration-testing python security security-tools

Last synced: 03 Feb 2026

https://github.com/callumbwhyte/secret-store

Securely manage and store secrets in the Umbraco backoffice

dotnet secrets security umbraco

Last synced: 08 Jul 2025

https://github.com/francescodisalesgithub/comptia-security-exercises

pratical examples of concepts in Comptia security + SY0-601

comptia-security concepts exercise hacking security security-content

Last synced: 22 Mar 2025

https://github.com/parasoft/run-dottest-action

Run code analysis with Parasoft dotTEST and review results

action analysis code compliance csharp dotnet dottest lint parasoft quality security static test testing vbnet workflow

Last synced: 11 Apr 2025

https://github.com/kiko-g/feup-fsi

FEUP FSI | Computer Security Foundations | 2021/22

intro security seed-labs

Last synced: 15 Jul 2025

https://github.com/manuelberrueta/hacking-buddy-mcp

Hacking Buddy MCP is a proof-of-concept MCP Server showing how AI can be leveraged in security operations/engagements.

ai llm mcp offensive-security pentesting redteam security

Last synced: 24 Jun 2025

https://github.com/approov/quickstart-ruby-token-check

Quickstart Approov integration example for Ruby without depending on a framework.

api api-security approov approov-backend approov-backend-quicksart approov-integration approov-quickstart security

Last synced: 27 Jun 2025

https://github.com/valentinmne/docker-zap-scanner

Scan a list of URLS with Zap Scan

bash docker owasp python security

Last synced: 26 Feb 2025

https://github.com/hima890/alx-system_engineering-devops

Welcome to the DevOps and System Engineering Course! This course is designed to help you learn and master the fundamentals of DevOps, system engineering, and Bash scripting. It covers a wide range of topics essential for modern IT operations and infrastructure management.

alx-africa alx-backend alx-software-engineering api-rest automation bash-script configuration-management devops json mysql network networking puppet security server serverconfig ssh sysadmin webinfrastructure

Last synced: 27 Jan 2026

https://github.com/javiorfo/go-microservice-users

Go microservice for storing users, credentials, login and registration security

go golang jwt jwt-authentication security users

Last synced: 05 May 2025

https://github.com/alazndy/r-ai-os

Universal AI Agent Kernel & Terminal Control Center. Rust-based hardened kernel with Vigils security, real-time observability, and tamper-evident audit ledger.

agent-kernel ai-os async-rust audit-ledger hardened-kernel mcp-server observability ratatui redaction-engine rust security sentry sha256-hashing sqlite status-alpha t-ecosystem tamper-evident tokio vigils

Last synced: 09 Jul 2026

https://github.com/reoring/botbox

Kubernetes sidecar that sandboxes container egress. Deny-by-default allowlist + automatic credential injection via iptables — no proxy config needed. Built for confining AI agents.

ai-agents clawdbot kubernetes moltbot openclaw sandbox security

Last synced: 26 May 2026

https://github.com/print3m/bytecaster

Swiss Army Knife for payload encryption, obfuscation, and conversion to byte arrays – all in a single command (14 output formats supported)! ☢️

encryption-tool golang maldev malware-builder malware-development obfuscation-script redteam security security-tools shellcode shellcode-convert shellcode-development shellcode-encoder shellcode-injection

Last synced: 07 Mar 2026