An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/pavanvaranasi02/ecommerce-website

"An e-commerce web app with user registration, login, responsive product listing, and a 'Buy Later' feature. Built using Java, Servlets, JSP, JDBC, and styled with CSS. Enhance your online shopping experience!"

java jdbc jsp security servlets

Last synced: 08 Oct 2025

https://github.com/cisagov/cool-sharedservices-cdm

Terraform code to create a site-to-site VPN tunnel between the COOL and the CISA CDM (Continuous Diagnostics and Mitigation) environment, as well as some related resources to feed COOL logging data to CDM.

cdm cisa security

Last synced: 14 Oct 2025

https://github.com/stormsinbrewing/savvy-devsecops

GitHub native DevSecOps CI/CD best practices include automated security testing, code analysis, and policy enforcement using GitHub Actions, coupled with secure IaC and container security measures. This entails managing secrets, enforcing access control, and implementing incident response and monitoring, all while fostering continuous learning.

aws build codeql dependab devops devsecops docker github github-actions kubernetes nodejs renovate sast security

Last synced: 01 Jun 2026

https://github.com/tink-crypto/tink-java-awskms

Extension to Tink Java that provides AWS-KMS integration

aws-kms crypto cryptography java security

Last synced: 27 Jan 2026

https://github.com/4thel00z/oneliners

Magic offsec/utility oneliners to make your red teaming/CTF/h4x0r life easier! 🤓

bash offsec oneline oneliner oneliners security sysadmin

Last synced: 30 Apr 2026

https://github.com/checkpointsw/sourceguard-action

SourceGuard is designed to leverage Check Point's varied prevention technologies and services, providing source-code security and visibility. With a simple, cross-platform CLI tool users can customize exclusions and control an ignore list with easy integration into any pipeline.

code-quality compliance oss security source-code

Last synced: 08 Mar 2026

https://github.com/nckslvrmn/whisper

Simple service for one time secret (and file) sharing

aes-gcm-256 container cryptography docker encryption golang scrypt secret-management security

Last synced: 16 Mar 2026

https://github.com/shaneutt/podtunnel

Secure Tunnels For Kubernetes Pods

kubernetes networking security

Last synced: 16 Mar 2026

https://github.com/nemisolv/spring-ecommerce-microservices

This repository showcases Spring Boot microservices for eCommerce, each handling tasks like user authentication/authorization, product management, and order processing within a cohesive distributed architecture, ensuring scalability and efficiency.

distributed-system-architecture ecommerce java load-balancing microservices scalability security spring-cloud-gateway springboot springboot-microservices

Last synced: 28 Feb 2026

https://github.com/fiware/tutorials.securing-access

:closed_book: FIWARE 403: IDM - Securing Access to Resources

access-control fiware fiware-keyrock oauth2 pdp pep security tutorial

Last synced: 11 Oct 2025

https://github.com/radlab-dev-group/llm-router

LLM Router is a service that can be deployed on‑premises or in the cloud. It adds a layer between any application and the LLM provider. In real time it controls traffic, distributes a load among providers of a specific LLM, and enables analysis of outgoing requests from a security perspective (masking, anonymization, prohibited content).

automation cloud genai llm llm-balancing llm-gateway llm-gateway-system llm-router llm-router-models llm-router-plugins load-balancing local-llm local-llm-integration model-management on-prem pii prometheus rest-api security

Last synced: 14 May 2026

https://github.com/kukoboris/ubuntu-security-setup

Скрипт для автоматизированной настройки безопасности и оптимизации серверов Ubuntu

bash-script hardening security server-setup ubuntu

Last synced: 29 Apr 2026

https://github.com/martinpankraz/sap-hacker-in-a-day

Content supporting the DSAG workshop "SAP hacker in a day" 3rd December 2024

azure entra-id hands-on-lab identity mfa-bypass red-teaming sap sap-hack security

Last synced: 19 Apr 2026

https://github.com/EricR/solanalyzer

SolAnalyzer is a static analyzer for the Solidity programming language, with a focus on finding security bugs.

ethereum security solidity static-analysis

Last synced: 21 Oct 2025

https://github.com/fabianferno/the-riot-protocol

It offers device authentication, data encryption, decentralized key generation, and blockchain-based authentication for secure and reliable communication between devices and users.

arduino blockchain cryptography data gateway iot security solidity university-project

Last synced: 18 Jan 2026

https://github.com/severityc/discord-2fa-receiver

This script receives Discord 2FA codes and outputs it via terminal. It refreshes the available codes for people to use for their Discord account.

2024 2fa 2fa-bypass 2fa-client-python 2fa-codes 2fa-receiver 2fabypass 2factor beta codes cybersecurity discord discord-2fa discord-script online-safety python safety security topt

Last synced: 09 Apr 2025

https://github.com/erbsland-dev/fast-file-encryption

Fast, secure, and minimal file encryption for large files using RSA and AES.

asymetric-cryptography decryption encryption large-files security signature verification

Last synced: 14 Jan 2026

https://github.com/nis2shield/django-nis2-shield

🛡️ Security-First Middleware for Django NIS2 Compliance

compliance django forensic gdpr logging middleware nis2 python security

Last synced: 29 Apr 2026

https://github.com/kumarvna/terraform-azurerm-security-center

Terraform module to create Azure Security Center resources for Azure Landing Zones

azure azure-security azure-security-center security terraform terraform-module

Last synced: 24 Oct 2025

https://github.com/webmd-health-services/carbon.cryptography

Cross-platform PowerShell module that makes encrypting and decrypting strings (using standard cryptographic algorithms) and managing certificates easy.

aes-crypto aes-encryption certificates cryptography dpapi powershell powershell-core powershell-module rsa-cryptography rsa-encryption securestring security x509 x509certificates

Last synced: 15 Oct 2025

https://github.com/vijayymmeena/passwordx

Use the cli to generate strong passwords or add them to nodejs projects

nodejs password-generator security

Last synced: 05 Jul 2025

https://github.com/arduino/arduino-cvd-policy

Coordinated Vulnerability Disclosure Policy

cvd-policy responsible-disclosure security

Last synced: 19 Oct 2025

https://github.com/marc-shade/fraud-detection-mcp

Advanced fraud detection MCP server with behavioral biometrics, real-time anomaly detection, and explainable AI for comprehensive fraud prevention

anthropic behavioral-biometrics claude fraud-detection fraud-prevention fraudulent-transactions mcp model-context-protocol security

Last synced: 05 Apr 2026

https://github.com/byxor/passflip

Lightweight password manager that doesn't store anything

password-manager python3 security

Last synced: 24 Oct 2025

https://github.com/kliu128/staplechain

Signed, In-band Annotations for Language Model Outputs

gpt-4 openai security

Last synced: 01 Mar 2025

https://github.com/practicalparticle/sandblox

**EXPERIMENTAL SOFTWARE** SandBlox: A secure blockchain development platform using pre-built components called Blox & Particle's State Abstraction. Build dApps quickly and safely with React & TypeScript.

account-abstraction blockchain security smart-contracts web3

Last synced: 10 Oct 2025

https://github.com/aegisjsproject/component

Base component using `@shgysk8zer0/aegis` & `@shgysk8zer0/aegis-styles`

aegis constructable-stylesheets custom-elements sanitizer-api security web-components

Last synced: 23 Oct 2025

https://github.com/elongl/ac

A game I researched, got arbitrary code execution on the game server.

code-execution exploitation security vulnerability

Last synced: 17 Oct 2025

https://github.com/petritbahtiri123/leakguard

Local-only Chrome extension that detects and redacts secrets before prompts are sent to AI chat tools.

ai browser-extension chatgpt chrome-extension dlp infosec privacy redaction security

Last synced: 10 May 2026

https://github.com/tonikelope/passport-trace-attack

Proof of concept of traceability attack against e-passport

epassport passport security traceability

Last synced: 23 Apr 2026

https://github.com/wikid82/charon

A lightweight, user-friendly web interface for managing Caddy as a reverse proxy. It simplifies SSL management and host routing for self-hosters who want the power of Caddy without the manual configuration.

caddy crowdsec docker docker-compose homelab proxy-manager reverse-proxy security self-hosted sso tailscale waf web-ui

Last synced: 02 May 2026

https://github.com/basis-theory-labs/vgs-migration-guide

Migration Guide to move from Very Good Security to Basis Theory

guide migration security tokenization

Last synced: 04 Mar 2026

https://github.com/chitinhq/shellforge

🔥 Forge local AI agents. Governed. Private. Unstoppable. — Ollama + AgentGuard + OpenShell + DefenseClaw

agentguard agentic-ai ai-agents apple-silicon defenseclaw governance local-llm ollama openshell security

Last synced: 19 Apr 2026

https://github.com/cpulvermacher/secret-scanner

Browser extension to scan web pages for API keys or passwords

browser-extension chrome-extension firefox-extension secret security security-tools web-development

Last synced: 17 May 2026

https://github.com/eclipse-theia/security-audit

Automated Security Audit for Theia framework dependencies

audit eclipse-theia security theia theia-ide

Last synced: 11 Apr 2025

https://github.com/JerryLinLinLin/Huorong-HIPS-Rule-Schema

The project includes two json schemas of Huorong Host-based Intrusion Prevention System (HIPS) custom rule files (json). They can be used to validate Huorong HIPS rules and speed up editing.

anti-malware antivirus antivirus-software hips huorong security security-tools

Last synced: 11 Jul 2025

https://github.com/maandree/autopasswd

Reproducable password generator

password-generator security

Last synced: 24 Feb 2025

https://github.com/federicoceratto/nim-libu2f

FIDO U2F server-side and client-side library for Nim

authentication fido nim nim-lang security u2f

Last synced: 03 Oct 2025

https://github.com/acutaia/goeasy-serengeti

Secure trusted collection and exchange of position Information proxy

cloud fastapi goeasy position-information proxy python satellite security

Last synced: 09 Apr 2025

https://github.com/faalantir/mcp-agent-identity

The open standard for cryptographic provenance and attribution for AI Agents.

agent identity mcp mcp-server security smithery

Last synced: 16 Jan 2026

https://github.com/nikstur/libxcrypt-rs

Rust bindings for libxcrypt

libxcrypt linux rust security users

Last synced: 10 Apr 2025

https://github.com/paloaltonetworks/aws-traffic-mirroring

Detect and respond to attacks in AWS by sending packets to VM-Series without putting the firewall inline

aws mirroring paloaltonetworks prisma security span traffic visibility vm-series vpc vtap

Last synced: 03 May 2025

https://github.com/chizhg/secureim

A secure Instant Message System.

python security socket

Last synced: 04 Apr 2025

https://github.com/fdekeers/iot-firewall

Dynamic IoT firewall, based on nftables

firewall iot nftables security

Last synced: 19 Mar 2025

https://github.com/chrisamanse/Codegen

An open source one-time password generator for iOS.

authentication authenticator cryptography generator hmac ios one-time-passwords qrcode security swift

Last synced: 22 Jul 2025

https://github.com/authress/authress-sdk.rs

The Authress SDK for Rust provides authorization as a service with fully compatible REST apis.

api authentication authentication-middleware authorization authorization-framework authorization-server credentials keys security user-identity user-management

Last synced: 13 May 2025

https://github.com/tobycm/loginfc

Login with NFC tags xddd

linux nfc nodejs pcsc security ubuntu

Last synced: 20 Mar 2025

https://github.com/joxit/dns-server

Block ads and malwares at DNS level with your private DNS Server

dns dns-over-https dns-over-tls dns-server privacy rust rust-lang security security-tools

Last synced: 14 May 2026

https://github.com/biffalo/bettersecdefaults

An interactive powershell script for Azure/Entra. Creates a set of conditional access policies that will provide improved security over Microsoft's "Security Defaults". This script is primarily for less mature orgs that are perhaps still using Microsofts "Security Defaults" or only have very basic conditional access policies in place.

azure conditional-access entra-id identity-management powershell security

Last synced: 10 Apr 2025

https://github.com/tegridydev/multi-agent-secops-llm

This project is a multi-agent security framework that utilizes multiple LLM models to analyze and generate comprehensive security briefs.

ai llm local localllm ollama secops security

Last synced: 11 Jul 2025

https://github.com/grapheneos-archive/device_google_bonito-sepolicy

Pixel 3a and Pixel 3a XL SELinux policy extensions.

android grapheneos security

Last synced: 11 Jan 2026

https://github.com/opcod3r/godan

Shodan tool subdomains with rotation keys.. 🎩

bugbounty bugbounty-tool golang pentest recon security shodan subdomains

Last synced: 18 Jun 2025

https://github.com/wultra/powerauth-admin

This reporitory was moved to https://github.com/wultra/powerauth-server repository

administration authentication mobile-security security

Last synced: 11 Jul 2025

https://github.com/aerabi/hackdockerfest

Docker best practices created by the community

docker hacktoberfest security

Last synced: 10 Apr 2025

https://github.com/abdullahkhawer/find-and-report-secrets-in-code

Security solution to find secrets in a git repository and report about them. It uses Gitleaks and some custom scripts to generate a JSON report for secrets found with only relevant information along with commit ids and commit authors. It can be used to update an Atlassian Confluence page and send an alert on Slack based on the findings.

atlassian-confluence bash confluence docker git github github-actions gitlab gitlab-ci gitleaks json linux macos python python3 secrets secrets-detection security shell slack

Last synced: 29 Oct 2025

https://github.com/nigelhorne/sniff2ban

Dynamically change firewall

ban-hosts firewall security

Last synced: 08 May 2025

https://github.com/doucol/clyde

Project Calico Observability Tools

calico k8s kubernetes networking observability projectcalico security tigera

Last synced: 02 Feb 2026

https://github.com/f5devcentral/f5-agility-labs-ddos

F5 Agility Labs for Distributed Denial of Service Protection Use Cases

ddos-protection documentation f5-afm f5-agility-labs f5-asm f5-ltm security training-labs

Last synced: 11 Apr 2025

https://github.com/kevcui/password-meter

:lock_with_ink_pen: A password meter evaluates the strength of passwords

password password-meter password-safety password-strength security security-tools

Last synced: 12 Apr 2025

https://github.com/turbot/steampipe-mod-oci-compliance

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS across all of your Oracle Cloud Infrastructure accounts using Powerpipe and Steampipe.

cis cis-benchmark compliance hacktoberfest oci oracle-cloud oracle-cloud-infrastructure powerpipe powerpipe-mod security sql steampipe steampipe-mod

Last synced: 06 Mar 2026

https://github.com/gnh1201/plcsim2016

A simple PLC simulator using C++/MFC

security simulation stuxnet

Last synced: 13 Sep 2025

https://github.com/declan94/secret-share

A secret sharing tool based on Shamir's Secret Sharing algorithm implemented with pure Golang

golang secure secure-sharing security security-tools

Last synced: 17 Jan 2026

https://github.com/alisaduncan/angular-owasp-secure-coding

Code for Pluralsight course "Secure Coding with OWASP in Angular"

angular security

Last synced: 30 Oct 2025

https://github.com/circl/odfcleaner

Python module to cleanup ODF files.

cleanup-odf-files odf odfcleaner security

Last synced: 07 Mar 2026

https://github.com/mxncson/pnpm-audit-html

A tool to generate an HTML report from pnpm audit.

audit html pnpm report security

Last synced: 12 Jan 2026

https://github.com/fiware/tutorials.xacml-access-rules

:closed_book: FIWARE 405: Ruleset Based Permissions

access-control authzforce fiware pdp security tutorial xacml xacml-policies

Last synced: 30 Apr 2025

https://github.com/youhaveme9/ctfinfo

Mobile app for CTF information, resources and updates, build in flutter

ctf dart flutter security

Last synced: 14 Sep 2025

https://github.com/toolisticon/kalilinux

Prepared Kali Docker Image with kalilinux-full preinstalled

express kali kali-linux security

Last synced: 28 Oct 2025

https://github.com/el-abdel/abelkeycloakbeareronlyadapterbundle

[Symfony Bundle]: Keycloak security adapter for bearer-only clients

api authentication hacktoberfest keycloak oauth security symfony symfony-bundle

Last synced: 30 Apr 2025

https://github.com/cerbos/demo-python

Demo of using Cerbos with Python to check access to a holiday request system.

access-control cerbos policy python security

Last synced: 12 Apr 2025

https://github.com/anderseknert/opa-sign-verify

Demo of OPA bundle signature creation and verification

bundle-signing bundle-verification bundles opa open-policy-agent security

Last synced: 07 Sep 2025

https://github.com/hashgraph-online/hol-codex-plugin-scanner-action

Legacy compatibility GitHub Action slug for AI Plugin Scanner

codex github-action marketplace scanner security

Last synced: 17 Jun 2026

https://github.com/makenowjust-labs/memo-regex

ReDoS-less Regex Implementation Using Memoization

redos regex regexp security

Last synced: 10 Apr 2025

https://github.com/cryxnet/crawnet

CRAWNET is a graph-based domain discovery tool by CRYXNET that helps you gather information about domains and potential relationships with other actors.

cybersecurity data-mining docker flask fullstack graph information-gathering neo4j nextjs osint python red-teaming security

Last synced: 10 Apr 2026