An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/turbot/flowpipe-mod-jira

Jira pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Jira to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations jira jira-api jira-rest-api low-code orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 03 Mar 2026

https://github.com/skroutz/aws-securityhub-configuration

Configure AWS SecurityHub Subscriptions and Exceptions using GitOps

aws security securityhub terraform terragrunt

Last synced: 15 May 2026

https://github.com/maya-data-privacy/ai-safe-plugin

Real-time PII detection and redaction for AI chat interfaces.

chatgpt chrome-extension claude gemini gliner llm ner pii-detection pii-redaction security security-tools

Last synced: 23 Jun 2026

https://github.com/princiya/lightbeam-aframe

WebVR version for the Lightbeam web-extension

aframe aframevr lightbeam privacy security webextension

Last synced: 14 Mar 2026

https://github.com/hacrvlq/skeld

a tui tool for opening projects in a restricted sandbox to prevent supply chain attacks such as typosquatting

malicious-packages project-launcher sandbox sandboxing security security-tools software-supply-chain-security supply-chain-security tui typosquatting

Last synced: 08 Aug 2025

https://github.com/kou029w/websri

A universal Subresource Integrity (SRI) utility for Node.js, browsers, Cloudflare Workers, Deno, Bun, and other web-compatible runtimes.

browser bun cloudflare cloudflare-workers deno hashing integrity nodejs security sri subresource-integrity typescript

Last synced: 10 Apr 2025

https://github.com/sg-milad/audit-reports

This is a repo containing the smart contract security reviews that I've completed.

auditing blockchain security smart-contract solidity

Last synced: 15 May 2026

https://github.com/XiaomingX/simple-springboot-app

这是一个基于SpringBoot的安全教育框架,提供了清晰的教程,帮助用户快速部署和运行平台。 项目目标:打造一个简便的一站式平台,用于全面评估和提升系统的安全能力。

benchmark security springboot vulnerability

Last synced: 03 May 2025

https://github.com/neverbehave/rc_hcaptcha

Adds Hcaptcha to the RoundCube login form

captcha hcaptcha login plugin roundcube security

Last synced: 11 Apr 2025

https://github.com/carhartl/talisman-secrets-scan-action

Scan incoming commits for secrets with Talisman

appsec devsecops security

Last synced: 21 Aug 2025

https://github.com/ziming/laravel-zxcvbn

@dropbox Zxcvbn Password validation rule for Laravel 10 & 11

dropbox laravel security validation

Last synced: 04 May 2025

https://github.com/defguard/yubikey-provision

YubiKey provisioning tool used by defguard security platform

grpc security yubico yubico-otp yubikey

Last synced: 11 Apr 2025

https://github.com/joho1968/fail2wp

WordPress plugin providing security functionality, plays nicely with Fail2ban and Cloudflare. Verified with WordPress 5.5+/6.6.x and PHP 7.4/PHP 8.1.x

cloudflare fail2ban fail2ban-filter php php74 php81 security security-hardening webbplatsen wordpress wordpress-development wordpress-plugin wordpress-security wordpress-security-plugin wordpress5 wordpress55 wordpress6 wordpress66 wordpress67 xmlrpc

Last synced: 09 Apr 2025

https://github.com/irfaardy/lockout-account

Laravel Lockout Account. Lock user account automaticaly if login fails with json.

block json kunci laravel laravel-5-package laravel-framework laravel-package lock-account lockouts penguncian security

Last synced: 15 Jun 2025

https://github.com/aeticusdev/youngersibling

YoungerSibling is an OSINT command-line tool designed for educational purposes, featuring web scraping, DNS lookups, EXIF data extraction, and username availability checks to help users learn and explore networking and cybersecurity concepts.

cyberinvestigation cybersecurity footprinting informationgathering opensource osint osinttools pip privacy pypi pypi-package pypi-source python python3 recon reconnaissance security threatintelligence youngersibling

Last synced: 28 May 2026

https://github.com/federicoceratto/debian-debsecan

UNOFFICIAL MIRROR. Please use:

debian security

Last synced: 12 Jul 2025

https://github.com/rappie/portfolio

Rappie's Portfolio

evm fuzzing portfolio security solidity

Last synced: 02 Mar 2025

https://github.com/bad-antics/Fuzz.jl

Security fuzzing toolkit for Julia — mutation, generation, and coverage-guided fuzzing

fuzzing julia mutation-fuzzing security testing

Last synced: 06 Apr 2026

https://github.com/gyumeijie/securecodingrules

secure coding in c/c++

c coding cpp security

Last synced: 01 May 2026

https://github.com/doctena-org/octorules

Manage WAF rules across providers as code

firewall iac octorules security waf yaml

Last synced: 01 Jul 2026

https://github.com/destan0098/makehash4shodan

This Tools make favicon hash for shodan search

security security-tools shodan

Last synced: 03 Mar 2025

https://github.com/rsrdesarrollo/auto-ysoserial

Generate all ysoserial payloads with burp collaborator (or similar)

burp burpsuite exploit java python security security-tools ysoserial

Last synced: 15 May 2026

https://github.com/pavlakis/csp-middleware

Add Content-Security-Policy headers for PSR-7 requests. Uses the csp-builder library paragonie/csp-builder

content-security-policy csp middleware php php7 security

Last synced: 11 Jan 2026

https://github.com/arhcoder/denunciags

🚨 Aplicación que permite hacer denuncias federales de manera rápida y segura (Descripción pendiente).

application artificial-intelligence denuncias django flutter hackathon mysql python security web

Last synced: 29 Oct 2025

https://github.com/buanzo/crowdsec-dnsbl-service

DNSBL service that bases listing on crowdsec decisions

crowdsec dnsbl security

Last synced: 11 Apr 2025

https://github.com/pregress/tflint-ruleset-azurerm-security

TFLint ruleset to enforce security best practices on the AzureRM provider

azure azure-resource-manager azurerm azurerm-terraform-provider security terraform tflint tflint-ruleset

Last synced: 11 Apr 2025

https://github.com/radyakaze/nuxt-dompurify

A Nuxt 3 module for sanitizing HTML content using DOMPurify to protect against XSS attacks.

dompurify html-sanitization html-sanitizer nuxt nuxt3 sanitizer security xss

Last synced: 18 Mar 2025

https://github.com/alichtman/veripypi

WIP: Verify the package installed from PyPi is the same as the code on Github

pip pypi python-security security

Last synced: 19 Mar 2025

https://github.com/clarkio/pdfjs-vuln-demo

This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js (pdfjs-dist) library reported in CVE-2024-4367

application-security appsec astro astrojs pdf pdfjs pdfjs-dist react security svelte vue vuejs web

Last synced: 09 Sep 2025

https://github.com/tubenhirn/rasic

create issues for cve's found by trivy.

cve issues security

Last synced: 13 May 2026

https://github.com/jwilk/vcsnoop

Linux virtual console snooping via TIOCLINUX

security

Last synced: 20 Mar 2025

https://github.com/xunholy/k8s-workload-identity

Example setup of workload-identity into a Kubernetes cluster on GCP - https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity

gcp google-cloud iac kubernetes kubernetes-cluster kubernetes-setup pod security security-automation workload-identity

Last synced: 05 May 2025

https://github.com/artivain/reseau-discord-node

Node.js module for interacting with the Réseau Discord Artivain API.

api axios blacklist discord discord-api discord-bot free security sus

Last synced: 11 Apr 2025

https://github.com/sahilm/hived

hived is a honeypot

go golang honeypot security

Last synced: 11 Apr 2025

https://github.com/msaadshabir/pci-segment

Go CLI for PCI-DSS network segmentation. Validates YAML policies, enforces via eBPF (Linux) or pf (macOS), syncs to AWS/Azure, and generates compliance reports.

audit-logging aws azure cli compliance ebpf golang network-policy network-seg pci-dss pf security

Last synced: 05 Apr 2026

https://github.com/hernanmd/applicationsecurity

A Smalltalk domain-independent security model which you can easily instantiate in your applications

nacl pbkdf2 pharo pharo-smalltalk security security-tools smalltalk

Last synced: 11 Apr 2025

https://github.com/graphtylove/python_with_tor

Repo to demonstrate how to use TOR with python.

python python3 sec security tor

Last synced: 11 Jun 2026

https://github.com/sixarm/sixarm_shell_random_scripts

SixArm.com → Shell → Random scripts to generate text

encryption random script security shell unix

Last synced: 09 Sep 2025

https://github.com/artemrys/detect-gh-actions-unused-secrets

Detects secrets that are defined in the repository and are not used in GitHub Actions

github github-actions secrets security

Last synced: 10 Jul 2025

https://github.com/vsliouniaev/go-pass-cache

Better than sending passwords directly through your instant messaging client!

password password-manager password-store security security-tool small-business small-tools web website

Last synced: 02 Feb 2026

https://github.com/cmccandless/safepass

Check passwords against https://haveibeenpwned.com/API/v2#PwnedPasswords

password-safety python python3 security

Last synced: 06 May 2025

https://github.com/husseinfo/securitools

Useful security related tools

bash encryption security shell

Last synced: 04 Apr 2025

https://github.com/jokk-itu/authserver

Authorization server with OAuth 2.1 and OpenId Connect 1.0

csharp identity oauth2 oidc-server openid-connect security

Last synced: 09 Sep 2025

https://github.com/zerosonesfun/wp-email-blocker

Prevent people or bots from registering with certain email domains or full addresses.

bots email registration security spam wordpress

Last synced: 06 May 2025

https://github.com/nathanhi/avrlarm

AVRlarm is an open source alarm system for 8-Bit Atmel CPUs (ATmega2560).

alarm avr burglar gsm gsm-based monitoring security sensor sms sms-notifications

Last synced: 10 Jul 2025

https://github.com/ichhabrecht/devtools

Adds nice developer tools to your TYPO3 installation

changes developement extension integrity manager security typo3 typo3-cms typo3-extension

Last synced: 12 Apr 2025

https://github.com/exortek/fastify-mongo-sanitize

A comprehensive Fastify plugin designed to protect your No(n)SQL queries from injection attacks by sanitizing request data. This plugin provides flexible sanitization options for request bodies, parameters, and query strings.

fastify fastify-plugin injection mongodb mongoose nosql nosql-injection security

Last synced: 12 Apr 2025

https://github.com/sug0/git-signify

Harness the power of signify(1) to sign arbitrary git objects

cryptography git openbsd rust security signature signify

Last synced: 07 May 2025

https://github.com/tigera-solutions/cc-aks-strengthen-security-workshop

In this AKS-focused workshop, you will work with Calico Cloud to learn how to strengthen your Microsoft AKS cluster security posture.

aks azure cc regismartins security workshop

Last synced: 13 Apr 2025

https://github.com/manelli/ex_bcrypt

Elixir wrapper for the OpenBSD bcrypt password hashing algorithm

bcrypt cryptography elixir password security

Last synced: 20 Jun 2025

https://github.com/nystudio107/craft-twig-sandbox

Allows you to easily create a sandboxed Twig environment where you can control what tags, filters, functions, and object methods/properties are allowed

craftcms sandbox security twig

Last synced: 14 Jul 2025

https://github.com/lirantal/goof-container-breaking-in

A Snyk-based goof application to demonstrate breaking into containers

container docker security security-vulnerability snyk

Last synced: 16 Jul 2025

https://github.com/isovalent/cilium-up-and-running

This repository contains manifests, scripts, and configurations referenced in the O'Reilly book Cilium Up and Running. These resources are intended to help readers experiment with Cilium features, reproduce demonstrations, and deepen their understanding of Kubernetes networking, security, and observability.

cilium ebpf kubernetes networking observability security

Last synced: 17 Jul 2025

https://github.com/geolffreym/jwtauth

Django JWT auth middleware

api django jwt jwt-authentication python python-3 security

Last synced: 17 May 2026

https://github.com/mbrn/dbmixer

A project that mask database columns by several algorithms

data database mask security

Last synced: 19 Jul 2025

https://github.com/catman85/arduino-gsm-pir-alarm

Arduino Uno + GSM Shield + PIR sensor = sweet simple alarm!

alarm arduino-uno gsm-shield physical pir-sensor security

Last synced: 05 Apr 2025

https://github.com/bnomei/kirby3-htmlpurifier

Static class method, Uniform-Guard and Field-Method to filter your "dirty" HTML inputs to "clean" HTML.

filter form headless html htmlawed input kirby3 kirby3-cms kirby3-plugin kql kses safe sanitize security striptags submit uniform xss

Last synced: 13 Mar 2025

https://github.com/merci-libre/genpass-rs

A password management tool written in Rust. Generates Extended ASCII, ASCII, and alphanumeric strings, and uses steganography to store passwords into images as pixels.

cli cryptographically-secure linux modular password-generator password-manager rust security security-tools steganography windows

Last synced: 03 Apr 2026

https://github.com/hamedstack/hamedstack.aspnetcore.security

Enhance ASP.NET Core applications with a comprehensive security library, packed with essential utilities, dynamic permissions, API key management, and more.

apikey apikey-authentication asp-net-core aspnet-core aspnetcore authentication authorization csharp csharp-library dotnet dotnet-core dotnetcore dynamic-permission dynamic-permissions privacy privilege security utilities utility utility-library

Last synced: 15 Apr 2025

https://github.com/silinternational/ssp-base

Base Docker image for simpleSAMLphp

hub idp security simplesamlphp

Last synced: 05 Jul 2025

https://github.com/destan0098/ipshow

This tool checks and show domains IP to you

ip security security-tools tcp-ip

Last synced: 03 Mar 2025

https://github.com/jankapunkt/js-class-privacy

Create a given ES6 class with private members using Proxy and closures. Keeps class code clean, encourages SRP and DRY.

abstract-factory es6-class es6-classes es6-javascript es6-proxy factory-method-pattern javascript private-members security

Last synced: 20 Jan 2026

https://github.com/debricked/vs-code-extension

A Visual Studio Code extension that integrates the Debricked CLI to provide security vulnerability scanning and license compliance directly within the editor.

auditing compliance dependency license productivity risk-mitigation scan security vulnerability-scanners

Last synced: 27 Jul 2025

https://github.com/skorotkiewicz/is-password-secure

Check password security using Ollama API

ai ollama password safety security typescript

Last synced: 23 Jul 2025

https://github.com/teezzan/ohtp

A secured and extensible authentication service with support for multiple media and integration forms.

open-source otp-generator otp-verification security

Last synced: 12 Jun 2025

https://github.com/gitanat/securepickle

Secure pickling. Arbitrary code execution be gone

authentication encryption pickle pickled-data python security unpickle

Last synced: 26 Jun 2025

https://github.com/protosec-research/tree-of-ast

Tree-of-AST: Python Security Analysis framework inspired by ToT (Tree-of-Thoughts) of Deliberate Code analysing states using ToT-based ways.

ai gpt-4 ml python security security-audit security-tools source-to-sink static-code-analysis tree-of-thoughts

Last synced: 04 Sep 2025

https://github.com/valoran-m/keylogger

it is a keylogger with two different clients one for linux and the other for windows and a server that compiles under linux only

c explain keylogger schema security socket

Last synced: 27 Aug 2025

https://github.com/eth-sri/insec

Reproduction Package for "Black-Box Adversarial Attacks on LLM-Based Code Completion" [ICML 2025]

adverserial-attack code-completion llm security

Last synced: 23 Jul 2025

https://github.com/kaiiyer/emailrep

This is a go library for interacting with the EmailRep service

api email emailrep golang json-api security

Last synced: 16 Jan 2026

https://github.com/allisterb/tigergraph.net

.NET libraries for building graph-powered multi-target apps in C# and F# using TigerGraph.

graph gsql security tigergraph

Last synced: 26 Jul 2025

https://github.com/edivangalindo/gistz

An easy way to dump gists

bugbounty osint red-team secrets security

Last synced: 25 Jan 2026

https://github.com/lazorfuzz/eye-of-providence

A web app made with react, redux, redux-saga, and bundled with webpack. Served on Express and stores data with neDB. Displays a grid list of cams found with the Shodan API.

api express iot nedb react redux redux-saga security shodan

Last synced: 08 Apr 2026

https://github.com/robertdebock/ansible-role-collectd

Install and configure collectd on your system.

ansible collectd molecule playbook security tox

Last synced: 24 Apr 2025

https://github.com/pelock/stringencrypt-vscode-extension

Encrypt and hide plain text strings & file contents within your source code in a secure & encrypted form with the help of a polymorphic engine, generating random-looking decryption code every time.

cryptography encryption file-encryption polymorphic-engine security string-encoding string-encryption string-generator

Last synced: 30 Jul 2025

https://github.com/umutcamliyurt/i2proxy

A web browser extension for accessing I2P network anonymously

anonymity firefox-addon i2p i2p-browser i2p-browsing javascript privacy security

Last synced: 14 May 2025

https://github.com/szgabsz91/oauth2-authorization-proxy-server-spring-boot

Library for easily securing REST API endpoints in a Spring Boot applications using the reactive Spring WebFlux stack

facebook google oauth2 security spring-boot

Last synced: 20 Feb 2026

https://github.com/giosil/saml-idp

Boilerplate for SAML Identity Provider implementation.

authentication java javaee saml saml-authentication saml-identity-provider saml-idp saml2 security

Last synced: 05 Nov 2025

https://github.com/ayemunhossain/secure-session-based-jwt-authentication

🔒 Introducing an authentication project crafted with Node.js, featuring session-based JWT token authentication and fortified with CSRF protection. Elevate your security measures while enjoying the seamless user experience provided by this robust solution.

ayemunhossain csrf-protection jwt jwt-token jwt-vs-session security session session-management token

Last synced: 24 Mar 2025

https://github.com/spy86/owaspwebapplicationsecuritytestingchecklist

🛡️📝 OWASP Web Application Security Testing Checklist

application application-security checklist owasp security testing

Last synced: 11 Feb 2026

https://github.com/ddosolitary/sunpkcs11wrapper

A wrapper of SunPKCS11 which is compatible with Java 8

android android-sdk java pkcs11 security yubikey

Last synced: 19 May 2026

https://github.com/jonzeolla/lab-smartcontractsecurity

A lab that focuses on smart contract security

ethereum lab security smart-contract

Last synced: 18 Oct 2025

https://github.com/skyf0l/sveltekit-helmet

Important security headers for SvelteKit

csp headers helmet hsts http-headers security sveltekit

Last synced: 11 Apr 2025

https://github.com/xiosec/leakguard

LeakGuard is a project to prevent the use of leaked passwords.

active-directory hardening ldap leak leakguard lsa lsass security windows windows-internals

Last synced: 03 May 2026