Security
Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
- GitHub: https://github.com/topics/security
- Wikipedia: https://en.wikipedia.org/wiki/Computer_security
- Aliases: security-tools, security-vulnerability, security-audit,
- Last updated: 2026-07-02 00:27:53 UTC
- JSON Representation
https://github.com/robertdebock/ansible-role-cve_2021_44228
Check and report for cve_2021_44228 (log4shell) on your system.
ansible cve202144228 log4j log4shell molecule playbook security tox
Last synced: 16 May 2025
https://github.com/grapheneos-archive/device_google_bonito
Pixel 3a and Pixel 3a XL device sources.
Last synced: 04 Oct 2025
https://github.com/youichi-uda/sbomhub
日本市場向けオープンソースSBOM管理ダッシュボード / Open-source SBOM management dashboard with NVD/JVN vulnerability correlation, Japanese UI, and METI guidelines compliance
compliance cyclonedx cyclonedx-sbom devsecops docker sbom sbom-management security self-hosted software-bill-of-materials spdx spdx-sbom vex vulnerability-management
Last synced: 05 Jul 2026
https://github.com/the404hacking/wpscan
WPScan is a black box WordPress vulnerability scanner.
hacking-tool ruby scan scanner security security-scanner the404hacking wordpress wordpress-scan wpscan
Last synced: 13 May 2025
https://github.com/mikeroyal/codeql-guide
CodeQL Guide
codeql codeql-cli codeql-command codeql-container codeql-docker container containerization docker secure security security-tools
Last synced: 13 May 2025
https://github.com/tracebit-com/tracebit-community-cli
The Tracebit Community CLI is the command-line tool for Tracebit Community Edition, which deploys and maintains security canaries, proactively detecting intrusions across your devices and accounts.
canaries cli csharp deception dotnet security
Last synced: 13 Jan 2026
https://github.com/openziti/ziti-browzer-core
Core componentry for the Ziti browZer ecosystem (used internally by ziti-browzer-runtime and ziti-sdk-browzer)
appsec browser netsec openziti security zero-trust zero-trust-network zero-trust-network-access zero-trust-security ztna
Last synced: 24 Jul 2025
https://github.com/vaithak/password-locker
A cli password storer and manager.
aes-256 aes-encryption cli command-line-tool cryptography hacktoberfest password password-generator password-manager python python3 security
Last synced: 03 Jul 2025
https://github.com/dawsbot/skrub-cli
Irreversible file deletion on every operating system
filesystem-utils fs-node rm secure security
Last synced: 28 Jun 2025
https://github.com/shsingh/blackhat-tools
This repository contains tools made by completing exercises from various books on blackhat programming. The intent is to learn writing software in Typescript, Go, Rust and Python
blackhat go hacking pentesting redteam rust security typescript
Last synced: 11 Apr 2025
https://github.com/dopplerhq/secrets-fetch-action
Securely inject Doppler secrets into your GitHub Actions.
secret-management secrets secrets-management secrets-manager security
Last synced: 15 Jul 2025
https://github.com/acatton/python-spm
:muscle: Simple and secure sub processes manager
clean-api for-humans injection python secure security shell subprocess
Last synced: 13 Apr 2025
https://github.com/lapwat/secure-open
A Docker environment to securely open images, videos, sounds and more.
Last synced: 08 Jul 2025
https://github.com/thomasleplus/java-sql-inspector
Utility to test Java code for SQL injection vulnerabilities.
antlr antlr-4 antlr-grammar antlr4 antlr4-grammar antlr4-java information-security infosec java jdbc jdk security sql sql-injection-vulnerabilities
Last synced: 10 Apr 2025
https://github.com/grapheneos-archive/platform_packages_apps_setupwizard
android grapheneos privacy security
Last synced: 13 Apr 2025
https://github.com/badisi/auth-js
🛡️ Authentication and authorization support for web based desktop and mobile applications
angular auth authentication authn authorization capacitor cordova hybrid identity ionic mobile oauth oauth2 oidc openid openidconnect security web
Last synced: 12 Apr 2025
https://github.com/clj-holmes/clj-holmes-rules
Open source rules used by clj-holmes.
Last synced: 03 Jul 2026
https://github.com/0xn0ne/sensitive-helper
基于正则表达式的本地文件敏感信息数据挖掘助手。Regular Expression Based Data Mining Assistant for Local File Sensitive Information.
aksk infomation jwt scanner security sensitive
Last synced: 11 Apr 2025
https://github.com/jonathan-vella/architecting-for-success
This repository enables partners to help customers move with confidence with the right mix of skilling and resources to facilitate migration, modernization, and innovation with Azure OpenAI.
ai analytics azure cloudadoption migration networking openai openai-chatgpt security wellarc
Last synced: 07 Apr 2026
https://github.com/umutcamliyurt/Amnezichat
An encrypted and anti-forensic web chat server
anonymity anti-forensics counter-forensics forensics opsec privacy rust security
Last synced: 14 May 2025
https://github.com/denis-g/firefox-user.js
🦊 Firefox user.js – based on arkenfox/user.js with additional UI fixes.
firefox firefox-css firefoxcss ghacks mozilla mozilla-firefox privacy security settings userchrome userchromecss userjs
Last synced: 12 Apr 2025
https://github.com/apetenchea/earl
Evaluate Application Risk Level
android malware-detection security tensorflow
Last synced: 14 May 2025
https://github.com/cedricbonhomme/ip-link
Visualizing the relationships between different IP from network traffic capture.
circos network-traffic-capture pcap python security visual-analysis visualisation
Last synced: 14 Apr 2025
https://github.com/existenznl/permcheck
PermCheck is a little tool that checks if the files in a PHP project have the executable bit set properly.
executable executable-file php security security-tools security-vulnerability
Last synced: 14 Apr 2025
https://github.com/brndnmtthws/protect-yourself
A guide on how to protect your digital assets
digital-assets encryption phone privacy security yubikey
Last synced: 08 Mar 2026
https://github.com/turbot/steampipe-export
Steampipe Export is a zero-ETL CLI to fetch data from cloud services and APIs. Hundreds of plugins with thousands of documented examples.
aws azure backup data devsecops etl gcp golang kubernetes security steampipe steampipe-engine zero-etl
Last synced: 31 Jul 2025
https://github.com/sam-k/pager-sec
Hacking hospital pagers, then building an encrypted solution.
arduino encryption pagers sdr security
Last synced: 02 Aug 2025
https://github.com/ege-erdogan/splitguard
Supplementary code for the paper "SplitGuard: Detecting and MitigatingTraining-Hijacking Attacks in Split Learning"
machine-learning privacy security split-learning
Last synced: 13 Aug 2025
https://github.com/lazureykis/throttlecrab
High-performance GCRA rate limiter for Rust. Multi-protocol server (HTTP, gRPC, Redis/RESP) with advanced metrics, or embed as a minimal library. Self-tuning memory management 🦀
api-gateway api-protection cloudnative cloudnative-services ddos-protection docker gcra grpc microservices rate-limit rate-limiter rate-limiting rate-limits ratelimit ratelimiter ratelimiting redis rust security throttling
Last synced: 22 Aug 2025
https://github.com/maulingmonkey/firehazard
Unopinionated low level API bindings focused on soundness, safety, and stronger types over raw FFI.
rust sandbox sandboxing security win32 windows
Last synced: 30 Aug 2025
https://github.com/krishpranav/sniff
A Simple Golang Tool That Automates OSINT For Threat Intelligence And Mapping Your Attack Surface.
attack attack-defense attack-surface attack-surfaces bugbounty go golang recon reconnaissance scanner security web-security
Last synced: 14 Apr 2025
https://github.com/brucewind/cryptoppinndk
A repo for hiding encrypt algorithm working with CryptoPP.
android crypto cryptopp jni jni-android ndk security
Last synced: 15 Apr 2025
https://github.com/hexydec/torque
A Wordpress plugin to optimise the transport of your website to the client. Reduce the load on your server and make your Wordpress website fly!
minification optimization performance security wordpress
Last synced: 18 Nov 2025
https://github.com/controlplaneio/sandbox-probe
Agentic sandbox enumeration: find security issues, and seed escape automation.
agentic-ai penetration-testing security
Last synced: 27 May 2026
https://github.com/binarymist/dockersecurity-quickreference
:books: :whale: For DevOps Engineers :whale: :books:
application-security book books capabilities cgroups control-groups devops devsecops docker docker-security information-security infosec linux lsm namespaces seccomp security volumes web-application-security
Last synced: 16 May 2025
https://github.com/built-fast/phpstan-sensitive-parameter
PHPStan extension for detecting parameters that should use SensitiveParameter
code-quality php phpstan phpstan-extension security sensitive-parameter static-analysis
Last synced: 13 Jan 2026
https://github.com/ricco386/cyber501x-cybersecurity-fundamentals
RITx: CYBER501x Cybersecurity Fundamentals - Personal study notes
Last synced: 12 Apr 2025
https://github.com/Archetypum/theSuffocater
theSuffocater is an extensible module manager/collection on UNIX admin scripts that allows you to quickly harden your server and deploy services in few clicks.
bash bsd cybersecurity cybersecurity-tools foss gnu gnu-linux linux python python3 security security-automation security-tools server server-side shell unix
Last synced: 24 Mar 2025
https://github.com/tikajhq/passwrd.in
A secure & simple password generator, that makes life easy.
encryption hash password password-generator passwrd security security-tools sys-admin
Last synced: 27 Feb 2025
https://github.com/ivan-sincek/jwt-bf
Brute force a JWT token. Script uses multithreading.
brute-force bug-bounty cracking dictionary-attack ethical-hacking jwt offensive-security penetration-testing python red-team-engagement security web web-penetration-testing
Last synced: 28 Feb 2025
https://github.com/evervault/evervault-js
Evervault JavaScript SDK.
encryption javascript security
Last synced: 13 Feb 2026
https://github.com/potato-industries/dartrs
portable dart based reverse shell
Last synced: 24 Oct 2025
https://github.com/mikkoparkkola/nowifi
No WiFi? Now WiFi. One command. 27 techniques. Bypass any captive portal.
bypass captive-portal cli go golang hacking linux macos network-security penetration-testing security wifi wifi-hacking
Last synced: 31 May 2026
https://github.com/yu-jack/yu-jack.github.io
This is a blog.
blog devops infrastructure-as-code security sharing unit-testing web-development
Last synced: 29 Jan 2026
https://github.com/echo-devim/pyjacktrick
Python module hijacking POC
code-execution hijacking python security
Last synced: 27 Mar 2025
https://github.com/dominicbreuker/goncat
netcat-like CLI tool with advanced features for bind/reverse shells
bind-shell golang offsensive-security pentesting port-forwarding pty reverse-shell security tunneling
Last synced: 11 Apr 2025
https://github.com/connorjburton/senvf
A secure & sensible replacement for process.env
javascript nodejs process-env security supply-chain
Last synced: 10 Jul 2025
https://github.com/shayanzare/admin-page-finder
This is a simple script to finding website admin page.
admin-page-finder hacking hacking-tool ruby security
Last synced: 28 Mar 2025
https://github.com/wilk/snpm
Secure NPM PoC
github javascript npm opensource proof-of-concept security
Last synced: 13 Apr 2025
https://github.com/psecio/rift
A vulnerable application for teaching the basics of web application security
application security teaching vulnerability
Last synced: 11 Apr 2025
https://github.com/badchars/cve-mcp
23-tool MCP server for CVE & vulnerability intelligence. NVD, EPSS, CISA KEV, GitHub Advisory, OSV — unified in one server. Risk scoring, bulk triage, exploit search. 2 dependencies, runs with npx.
ai-security cisa claude cve cvss cybersecurity epss ghsa kev mcp model-context-protocol nvd osv pentesting security vulnerability vulnerability-intelligence
Last synced: 30 Jun 2026
https://github.com/tomiok/vaultik
Vaultik is a cloud agnostic secret manager that helps developers to create, read, update and delete variables and easily export to a remote location or any cloud. Avoid using environment variables and these are fully encrypted.
cloud cloud-computing cobra encryption environment-variables go golang secret secret-management secrets secrets-management secure secure-storage security security-tools
Last synced: 28 Oct 2025
https://github.com/connectFree/ZigZag
Noise Framework implementation in Zig Language for use in EVER/IP and WireGuard
crypto cryptography ever ever-ip everip noise noise-protocol noise-protocol-framework security wireguard zig
Last synced: 06 May 2025
https://github.com/chrissmartin/onvifscout
A comprehensive ONVIF device discovery and analysis tool that helps you find, authenticate, and examine ONVIF-compatible devices on your network.
hacktoberfest home-assistant home-automation onvif onvif-camera onvif-discovery pypi security security-camera
Last synced: 06 Jul 2025
https://github.com/go-aah/security
Security library by aah framework
aah aah-framework golang-library security session-management session-store
Last synced: 12 Apr 2025
https://github.com/johnsalazar/microservices-go-authentication
Authentication service. Part of an e-commerce built in Golang.
assymetric-key-cryptography clean-code discovery-service docker golang grpc hexagonal-architecture jwt-token kubernetes metrics microservices nats nosql rest-api security solid telemetry
Last synced: 12 Apr 2025
https://github.com/samiahmedsiddiqui/prevent-xss-vulnerability
This WordPress plugin enhances website security by preventing Cross-Site Scripting (XSS) vulnerabilities. It blocks and encodes malicious characters in URLs, escapes HTML in `$_GET` variables, and provides customizable settings for website owners.
encoding escape-html reflected-xss-vulnerabilities reflective reflective-injection security security-vulnerability self-xss wordpress xss xss-detection xss-vulnerability
Last synced: 12 Apr 2025
https://github.com/advanced-security/demo-java
GitHub Advanced Security scanning tutorial repository for Java
advanced-security demo devsecops example security static-analysis
Last synced: 12 Apr 2025
https://github.com/actions-rust-lang/audit
Audit Rust Dependencies using the RustSec Advisory DB
cargo-audit ci github-actions hacktoberfest rust rust-lang rustsec security
Last synced: 10 Apr 2025
https://github.com/tspascoal/dependabot-alerts-helper
A set of (simple) scripts to help manage dependabot alerts
dependabot scripts-collection security
Last synced: 07 May 2025
https://github.com/codestates-seb/seb39_main_013
고오급 남성 쇼핑몰 STATE MALL 입니다 https://statemall.click/
jpa mysql react reactquery security spring-boot styled-components
Last synced: 13 Apr 2025
https://github.com/sk3pp3r/devsecops-arsenal
A curated hub of DevSecOps tools to secure workflows, optimized for CI/CD and more
cybersecurity devops devsecops devsecops-pipeline infrastructure sdlc security ssdlc
Last synced: 12 Jan 2026
https://github.com/mablanco/docker-reconftw
Docker image for reconftw, a simple script intended to perform a full recon on an objective with multiple subdomains
Last synced: 11 Jul 2025
https://github.com/alphaville/safemsg
SafeMessage - Secure web-based message exchange system
encryption javascript message-exchange secure-by-default security
Last synced: 10 Apr 2025
https://github.com/intuneadmin/intunebaselines
Intunebaselines.com by Wolkenman.nl
baseline baselines intune intune-administrator intunebaselines mdm microsoft mwp security windows windows11
Last synced: 07 Mar 2026
https://github.com/issif/falco-rules-explorer
A dashboard to explore Falco Rules
Last synced: 07 Mar 2026
https://github.com/timoa/secure-go-backend-clean-architecture
Project that provides DevSecOps best practices on the Go Backend Clean Architecture
devsecops go golang security security-automation
Last synced: 08 May 2025
https://github.com/kitabisa/gokart-action
Integrate GoKart security static analysis to GitHub Actions
actions advanced-security ci code-review gokart golang security static-analysis static-code-analysis static-code-analyzer
Last synced: 12 Apr 2025
https://github.com/piraces/kube-score-ga
Github action to execute kube-score with selected manifests (YAML, Helm or Kustomize)
analysis automation charts ci github-actions helm kube-score kubernetes linter security static-code-analysis
Last synced: 15 Apr 2025
https://github.com/trackit/s3-acl-viewer
Tool to generate a report about AWS S3 bucket permissions. CSV, Excel and Google Spreadsheet output available.
Last synced: 12 May 2025
https://github.com/brosck/rpi4-covenant-c2-installer
「🖥️」Covenant C2 Installer for RPI 4
bash-script c2 command control hacking post-exploitation powershell red-team security
Last synced: 09 Mar 2026
https://github.com/ansibleguy/sw_proxmox_mail_gw
Role to install Proxmox Mail Gateway on a linux server
ansible ansible-role anti-spam anti-spoofing iac infrastructure-as-code mailing proxmox proxmox-mail-gateway security
Last synced: 31 Aug 2025
https://github.com/theAkito/userdef
A more advanced adduser for your Alpine based Docker images.
alpine docker linux musl permissions security
Last synced: 21 Mar 2025
https://github.com/strongjz/devsecopspipeline
DevSecOps Container Pipeline Demo
aws aws-codepipeline aws-ecr falco firelens kubernetes security workflow
Last synced: 14 Apr 2025
https://github.com/madmegsox1/python-bot-net-script
This is educational purposes ONLY
attack botnet ddos ddos-attacks ping python security
Last synced: 07 Apr 2025
https://github.com/plumsydev/neptune-waf.app
Neptune is a Web Application Firewall that you can use to protect your domains against common attacks (XSS, SSRF, SQLI, Path Traversal) and many others, it also can be used to hide your web server backend IP and protect against most DDoS attacks, come visit us !
api api-security application ddos firewall http-proxy letsencrypt neptune neptunewaf owasp security tcp-proxy waap waf web web-application-firewall xss
Last synced: 13 Jan 2026
https://github.com/spiderpig86/blog
:thought_balloon: Maybe some extraterrestrial will read this someday.
blog blog-theme frontend gatsby security software-engineering tech
Last synced: 30 Aug 2025
https://github.com/ventz/docker-dns-over-https
Docker Hub ventz/dns-over-https - DNS (tcp+udp 53) to CloudFlare and Google's HTTPS APIs
api dns dns-over-https https proxy security
Last synced: 16 Sep 2025
https://github.com/josehelps/blackcert
Blackcert monitors Certificate Transparency Logs for a keyword. Blackcert collects any certificate changes for this keyword and also checks if any domain changes with that keyword look like a phishing domain.
certificate monitoring security
Last synced: 14 Apr 2025
https://github.com/krishpranav/sshpot
A simple ssh honey pot, fake ssh server that lets anyone to connect and monitor their activty
go golang honeypot security security-tools ssh
Last synced: 14 Apr 2025
https://github.com/grapheneos-archive/device_google_redfin
Pixel 5 device sources.
Last synced: 13 Apr 2025
https://github.com/VolkanSah/Implementing-AI-Systems-Whitepaper
This whitepaper provides best practices and concrete examples for the secure implementation of artificial intelligence in web applications. It covers topics such as security, data protection, ethics, AI models and algorithms, development process, user training, and regulation.
ai api artificial-intelligence artificial-neural-networks chatgpt gpt gpt4 how-to security whitepaper whitepapers
Last synced: 12 May 2025
https://github.com/mh37/Argos
A passive WiFi tracking and profiling based on probe request frames.
linux pentesting probe-requests python reconnaissance security sniffing tracking wifi wireless
Last synced: 23 Jul 2025
https://github.com/thecalcaholic/bash-utils
Various shell script utilities I've come to write over the years to make life easier
bash csv dyndns gcp gsutil inotify iperf3 keepass-mounter nautilus networking pulseaudio security utility
Last synced: 15 May 2025
https://github.com/bytexenon/securityresearchwriteups
All Public vulns/bugs/exploits I found and discolsed.
bugbounty documentation github markdown poc report research security vulnerability writeups xss
Last synced: 31 Jul 2025
https://github.com/volkansah/implementing-ai-systems-whitepaper
This whitepaper provides best practices and concrete examples for the secure implementation of artificial intelligence in web applications. It covers topics such as security, data protection, ethics, AI models and algorithms, development process, user training, and regulation.
ai api artificial-intelligence artificial-neural-networks chatgpt gpt gpt4 how-to security whitepaper whitepapers
Last synced: 12 Sep 2025
https://github.com/m3nu/wp-audit
Audit the versions of your Wordpress sites to find old, vulnerable versions.
golang security security-audit security-tools wordpress
Last synced: 24 Oct 2025
https://github.com/apocas/wireguarode
Wireguard with ACLs and TOTP 2FA
acls iptables javascript nodejs security vpn wireguard
Last synced: 03 Oct 2025
https://github.com/ongoingai/gateway
Headless, OpenAI-compatible AI gateway in Go. Multi-tenant auth, tracing, cost tracking, rate limits, and optional PII redaction. Single binary, self-hosted, audit-ready by design.
ai-gateway audit-logs cost-tracking go golang llm-gateway observability openai-compatible opentelemetry pii-redaction policy-enforcement privacy rate-limiting security tracing
Last synced: 24 Feb 2026
https://github.com/rodnt/portswiggerlabs
Solutions from @PortSwigger labs
infosec portswigger portswigger-labs security websecurity
Last synced: 25 Jul 2025
https://github.com/1hehaq/oty
Oty is a fast, customizable, CLI tool designed to streamline your Bug Bounty and Pentesting workflows. Powered by a simple yet flexible YAML based DSL, Oty allows you to integrate your tools into it
automation bugbounty developer devops pentest security
Last synced: 26 Jan 2026
https://github.com/oktadev/okta-spring-boot-angular-pwa-example
Angular PWA with Authentication via Okta
angular authentication offline oidc okta security spring-boot
Last synced: 03 Jul 2025
