Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/jay-johnson/nerfball

Want to see how something like Internet Chemotherapy works without bricking your own vms? This is a jail to reduce the python runtime from doing bad things on the host when running untrusted code. Nerf what you do not need :space_invader: + :bug: :soccer: :football: :whale:

docker jail python reverse-engineering runtime-system security security-audit security-hardening untrusted-code

Last synced: 14 Apr 2025

https://github.com/nirmata/kyverno-policies

Curated Kyverno Policy Sets from Nirmata

kubernetes kyverno policy-as-code security

Last synced: 22 Sep 2025

https://github.com/alajusticia/laravel-logins

🔑 Sessions and Sanctum tokens tracking in Laravel apps. User notifications on new login, multiple remember tokens, IP geolocation, User-Agent parser.

authentication geolocation guard ip laravel login remember security session user-agent

Last synced: 10 Mar 2026

https://github.com/itaynir1/brute-force

This project is a Python script for conducting a brute-force attack on a login page. It takes a target URL, a username, and a password file as inputs, attempting to find the correct password through successive login attempts.

automation brute-force-attack command-line-tool ethical-hacking http-requests login-page password-cracking password-management python-libraries python-script requests security term-colors user-authentication web-application-testing web-development web-scraping web-security

Last synced: 01 May 2025

https://github.com/privacyidea/adfs-provider

Authentication provider for Microsoft AD FS to use with privacyIDEA.

2fa adfs authentication mfa multi-factor-authentication security

Last synced: 03 May 2025

https://github.com/goncalor/cve-ark

All published CVE and their recent changes, ready to be used by humans and machines

cve security security-vulnerability

Last synced: 12 Jul 2025

https://github.com/kosasih/pi-sentinel

Standing watch over the Pi Network, PiSentinel is a consensus algorithm that safeguards security, decentralization, and scalability.

pi-network pi-network-ecosystem security

Last synced: 22 Jun 2025

https://github.com/turbot/flowpipe-samples

Flowpipe sample mods, demonstrating common pipeline patterns and how to use the Flowpipe library mods. Run directly or use as examples for your own pipelines.

automation cloud devops flowpipe flowpipe-mod hacktoberfest hcl low-code orchestration security workflow

Last synced: 25 Feb 2026

https://github.com/may215/koa-protect

Security module for koa applications

koa nodejs security sql-injection xss

Last synced: 10 Jul 2025

https://github.com/thatsinewave/spy.pet-info

This repository serves as an index for all info the community has gathered on the Spy.pet situation and as well as my own tables and tools written for these investigations. Spy.pet was taken down by Discord on 11.08.2024, this is just an archive of what bots where in each server.

bot bots database discord discord-api discord-bot discord-data discord-py discord-token scrape scraper scraping scraping-websites scrapper security security-scanner security-tools spy-pet spypet thatsinewave

Last synced: 30 Apr 2025

https://github.com/JuliaLang/SecurityAdvisories.jl

The Julia Security Advisory Database

cve julia security

Last synced: 06 Apr 2026

https://github.com/mainframe-renewal-project/sear

SEAR (Security API for RACF) - A unified and standardized interface to RACF callable services.

api ibmz ibmzsystems mainframe mainframe-security racf security zos

Last synced: 06 Mar 2026

https://github.com/hahwul/vais

SWF Vulnerability & Information Scanner

hacking scanner security swf

Last synced: 30 Apr 2025

https://github.com/vantamnguyen/java-backend

Things I learn to become a Java backend engineer

database https java-backend restful-api security servlet spring testing

Last synced: 05 May 2025

https://github.com/futurragroup/securitykit

SecurityKit is a lightweight, easy-to-use Swift library that helps protect iOS apps according to the OWASP MASVS standard, chapter v8, providing an advanced security and anti-tampering layer.

cydia encryption-decryption jailbreak jailbreaking obfuscation owasp reverse-engineering security swift vpn

Last synced: 04 Mar 2026

https://github.com/ibrahmsql/gocat

Modern, cross-platform netcat alternative written in Go with enhanced features for network communication, debugging, and security testing.

cli cross-platform go golang modern-netcat netcat network-debugging networking penetration-testing port-scanner security tcp udp

Last synced: 17 Mar 2026

https://github.com/zekiunal/openssl-certificate-authority-guide

Bu kılavuz, OpenSSL komut satırı araçlarını kullanarak kendi sertifika yetkilinizi (CA) kurup nasıl kullanacağınızı gösterir.

certificate-authority openssl security tls turkce turkish

Last synced: 28 Jan 2026

https://github.com/ctc-oss/fapolicy-analyzer

Tools to assist with the configuration and management of fapolicyd.

fapolicyd fedora pyo3 python rhel rust security whitelisting

Last synced: 01 Feb 2026

https://github.com/enigmatikk/torch

Torch is a fast, secure, and production-ready web framework for Rust. Built on Tokio and Hyper, it provides everything you need to build modern web applications with minimal configuration.

async backend hyper middleware performance rest-api rust security tokio tokio-rs web-framework

Last synced: 14 Oct 2025

https://github.com/eteissonniere/opsec-checklist

Checklist of simple and not so simple things to enhance your OPSEC.

checklist opsec security

Last synced: 27 Feb 2026

https://github.com/the-osint-toolbox/privacy-practitioners

Want to know more about Privacy & Security, you will find mnay helpful Subject Matter Experts as-well-as the resources they use.

encryption infosec mfa obfuscation opsec privacy security vpn

Last synced: 17 Mar 2026

https://github.com/subrose/thorn

🌹 Thorn is an open-source, data privacy vault to store and manage PII in a fully compliant manner.

ccpa data-privacy encryption gdpr hipaa pci pci-dss privacy privacy-by-default privacy-by-design privacy-engineering security subrose

Last synced: 10 Mar 2026

https://github.com/didinj/spring-boot-security-rest

Securing RESTful API with Spring Boot, Security, and Data MongoDB

api data example mongodb rest restful security spring springboot tutorial

Last synced: 05 Aug 2025

https://github.com/perimetersec/resources

Public resources on fuzzing services, methodologies, and benefits for protocol security.

echidna evm fuzzing medusa security solidity

Last synced: 14 Apr 2025

https://github.com/hardenedlinux/lego-hardening

Hardening your OS/Profile is like building with LEGO, incorporating a couple of Grsecurity features and implementing aggressive security settings

apparmor hardening linux nixos nixos-config security

Last synced: 22 Apr 2025

https://github.com/vietlq/smart-contract-audit

Guide to auditing EVM smart contracts using tools

cve-scanning ethereum evm security security-audit smart-contracts

Last synced: 16 Jan 2026

https://github.com/codingchili/enigmatic-mouse

The enigmatic mouse will keep your passwords safe - password manager on Android in Kotlin.

android android-application kotlin password-generator password-manager passwords security

Last synced: 11 Aug 2025

https://github.com/grapheneos-archive/kernel_msm-coral

Kernel sources for the Pixel 4, Pixel 4 XL and Pixel 4a.

android grapheneos privacy security

Last synced: 13 Apr 2025

https://github.com/kannkyo/epss-api

EPSS(Exploit Prediction Scoring System) API client

epss security vulnerability

Last synced: 16 Jan 2026

https://github.com/yojiwatanabe/networkalarm

A tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent in-the-clear, and shellshock attacks. Currently supports live monitoring and network capture (pcap) scanning.

hack-detection network-capture network-monitoring networking pcap scanning security security-automation security-scanner security-vulnerability

Last synced: 11 May 2025

https://github.com/ctnkaan/postman-sentinel

Postman Sentinel (Previously Postman Student Helper) is the Discord Bot that specializes in server security. It also has some fun commands to lighten up the mood. This bot has blocked more than 900 attacks!

bot discord discord-bot discord-js discrodjs javascript nodejs postman security typescript

Last synced: 23 Jun 2025

https://github.com/realorangeone/django-sri

Subresource Integrity for Django

django security sri subresource-integrity

Last synced: 08 May 2025

https://github.com/robertdebock/ansible-role-firewall

Manage firewall ports on all (known) Linux operating systems.

ansible firewall firewalld molecule playbook security server system tox

Last synced: 24 Apr 2025

https://github.com/christosgalano/skaleql

sKaleQL is an opinionated template repository for managing, executing, and organizing Kusto Query Language (KQL) queries against Azure Log Analytics Workspaces.

automation azure devops devsecops github-actions kql kusto-query-language log-analytics security template-repository

Last synced: 07 Mar 2026

https://github.com/caputomarcos/node-red-contrib-oauth2

The node-red-contrib-oauth2 is a Node-RED node that provides an OAuth2 authentication flow. This node uses the OAuth2 protocol to obtain an access token, which can be used to make authenticated API requests.

node-red oauth2 security

Last synced: 16 Jan 2026

https://github.com/davidwells/dom-guard

🔐 Lock DOM node contents to protect people against scammers using browser devtools

dom-manipulation security

Last synced: 12 Apr 2025

https://github.com/jasondrawdy/shellgen

Dynamic and extensible shell code generator with multiple output types which can be formatted in binary, hexadecimal, and the typical shellcode output standard.

cryptography dotnet dynamic generator library security shellcode utilities

Last synced: 22 Apr 2025

https://github.com/seemoo-lab/wisec2017_nexmon_jammer_demo_app

This project contains source code of our Nexmon-based jammer app presented as a demo at WiSec 2017.

android-application jamming nexmon security wireless

Last synced: 05 Apr 2025

https://github.com/ekeih/kube-shodan

Register your Kubernetes IPs to monitor.shodan.io

audit kubernetes monitoring security shodan

Last synced: 14 Jan 2026

https://github.com/sagi/node-dns-over-tls

DNS-over-TLS API for Node.js

dns dns-over-tls dnstls nodejs privacy security tls

Last synced: 05 May 2025

https://github.com/matchilling/aws-kms-boilerplate

🔐 This repository contains the example code for the blog post "Painlessly storing security sensitive data using AWS KMS and OpenSSL"

aws-kms encryption key-management openssl security

Last synced: 02 Apr 2025

https://github.com/mk-fg/acme-cert-tool

Simple one-stop tool to manage X.509/TLS certs and all the ACME CA authorization stuff

acme-client certificates cryptography letsencrypt python security sysadmin tls tool web-pki x509

Last synced: 23 Apr 2025

https://github.com/tolitius/hubble

hubbling the universe nebula by nebula

clojure configuration consul security vault

Last synced: 23 Apr 2025

https://github.com/Perufitlife/supabase-security-skill

Open-source Supabase security auditor: detects RLS-disabled tables, public buckets, exposed SECURITY DEFINER functions. Active anonymous probe confirms each leak with the anon key.

audit auditor cli devsecops leak mit-license nodejs open-source penetration-testing postgres rls scanner security security-audit supabase typescript vulnerability

Last synced: 25 Jun 2026

https://github.com/sozercan/guac-ai-mole

🥑 Inspect and understand an organization's software supply chain that enables stakeholders to make actionable decisions about software supply chain security

ai chatgpt gpt-4 guac openai sbom secure-supply-chain security security-tools streamlit supply-chain-security

Last synced: 28 Sep 2025

https://github.com/rasoolsomji/django-security

Django is great! Here are some ways to make it safer

audit csrf cybersecurity django nginx owasp pentest python security vulnerabilities xss

Last synced: 14 Mar 2025

https://github.com/xi/ximatrix

filter net requests according to source, destination and type

ad-block firefox-extension security umatrix webextension

Last synced: 29 Jul 2025

https://github.com/cipherstash/encrypt-query-language

Index and search encrypted data in PostgreSQL with SQL

encryption encryption-in-use postgres postgresql security

Last synced: 09 Apr 2025

https://github.com/sebastienrousseau/password-generator

A fast, simple, and powerful open-source utility tool for generating strong, unique, and random passwords. The Password Generator supports various types of passwords including base64-encoded, memorable, and complex strong passwords.

crypto cryptography dictionary dictionary-tools generator javascript memorable-passphrases memorable-passwords nodejs npm passgen passgenerator password password-generator passwords security security-tools yeoman

Last synced: 16 Mar 2025

https://github.com/veinar/envcloak

A secure and easy-to-use tool for managing sensitive data with built-in encryption, decryption, and key management. Protect your secrets during development, testing, and deployment with CLI command + Python library support.

cicd cicd-pipeline cli-tool decryption devops encryption encryption-decryption env environment-variables python-library secret-management secret-sharing secrets security sensitive-data-security tool tooling tools validation

Last synced: 11 Sep 2025

https://github.com/fphammerle/docker-onion-service

hidden tor .onion service 🐳

docker network onion-service podman security tor

Last synced: 04 May 2025

https://github.com/m-thirumal/oauth-authorization-server

New OAuth2.1 Authorization Server using Spring Boot & PostgreSQL

authentication oauth oauth2 oauth2-1 oauth2-server postgresql security spring-boot

Last synced: 14 Aug 2025

https://github.com/FrozenAssassine/EasePass

A powerful but simple, password manager that stores all your passwords locally and offline. Written in C# WinUI3

2fa-client 2factor app csharp password password-manager passwordmanager security totp windows winui3

Last synced: 31 Mar 2025

https://github.com/prawee/cyber-security

Note for cyber security class

docker git security strapi

Last synced: 22 Sep 2025

https://github.com/mikaelvesavuori/better-apis-workshop

Workshop and demo for improving API quality, stability, and observability.

apis aws demo learning observability quality security serverless stability workshop

Last synced: 21 Mar 2025

https://github.com/sitebatch/waffle-go

Waffle is a library for integrating a Web Application Firewall (WAF) into Go applications.

golang security waf

Last synced: 12 Jan 2026

https://github.com/multiform-validator/docs

Multilingual library made for validation, various form fields, such as: email, telephone, password, cpf, cnpj, credit card, magic numbers for image mimetype validation and much more.

collaborate communityexchange filter form-validator github github-pages multiform-validator safe safety security security-tools student-vscode valid valid-fields validador validator

Last synced: 15 Apr 2025

https://github.com/fortify/ssc-restapi-client

Communicate with Fortify Software Security Center through REST API in java, a swagger generated client

api api-client application-security fortify fortify-api fortify-ssc integration openapi security

Last synced: 08 Apr 2026

https://github.com/adrianlshaw/lightverifier

Simple and scalable Linux tools for verifying TPM-based remote attestations 🔬⚖️🔐⛓📏📜

attestation hacktoberfest ima security security-audit tcg tpm tpm-quote

Last synced: 01 Apr 2025

https://github.com/marcosimioni/omigood

OMIGOD! OM I GOOD? A free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research team, specifically CVE-2021-38647.

cve-2021-38647 omigod omigood security

Last synced: 12 May 2025

https://github.com/nebulab/umarell

All in one Ruby static code analyzer

linter rails ruby security static-analysis

Last synced: 14 Apr 2025

https://github.com/slok/bilrost

Kubernetes controller/operator to set up OAUTH2/OIDC security on any ingress based service

controller ingress k8s kubernetes oauth2 oidc operator proxy security

Last synced: 25 Mar 2025

https://github.com/kasukusakura/kimiroyli

Kimiroyli 是一个致力于 JVM 安全的安全管理框架, 致力于保护整个系统不受恶意外部代码攻击 (WIP)

java javaagent jvm security

Last synced: 26 Apr 2025

https://github.com/yosaiproject/yosai_alchemystore

SQLAlchemy-enabled Account Store for Yosai that features a flat Role-Based Access Control (RBAC) data model

security sqlalchemy yosai

Last synced: 14 Jan 2026

https://github.com/geeknik/cve-fuzzing-poc

PoCs discovered through fuzzing which resulted in a CVE assignment.

cve fuzzing infosec poc security testcase

Last synced: 10 Mar 2025

https://github.com/x13a/py-minisign

Missing python minisign library.

crypto ed25519 minisign python security

Last synced: 24 Jul 2025

https://github.com/plackemacher/secure_compare

A secure compare for Elixir.

elixir library package security

Last synced: 12 Apr 2025

https://github.com/reinershir/lui-auth

一个使用简单的安全防护、权限验证、身份验证工具，无复杂配置，只需依赖jar并简单配置即可使用，目前拥有功能：角色、菜单、权限集成管理，IP限流，内部服务双向验证、自动打印请求日志等。 A simple and secure protection tool that is easy to use, with permission verification and identity authentication. No complex configuration is required, just rely on the jar file and simple configuration to use it.

authentication-backend lui-auth modified-preorder-tree-traversal permission security

Last synced: 14 Jan 2026

https://github.com/jpcertcc/toolanalysisresultsheet_jp

分析ツール結果シート

security

Last synced: 09 Apr 2025

https://github.com/joshuaquek/quickencrypt

Easily generate RSA Public-Private Keypairs and use them for secure asymmetric one-way encryption and decryption! - npmjs.com/package/quick-encrypt

asymmetric-cryptography cryptography decrypt decryption encrypt encryption javascript nodejs npm-package rsa security

Last synced: 05 May 2025

https://github.com/hackeralert/paircrypt

A simple tool to securely communicate with others.

encryption password privacy security security-tools tweetnacl-js x25519 xsalsa20poly1305

Last synced: 10 Apr 2025

https://github.com/aydinnyunus/cve-2024-24576-exploit

CVE-2024-24576 Proof of Concept

1-day exploit rust security

Last synced: 29 Apr 2025

https://github.com/dutchcoders/identify

Identify web application versions

fingerprint security

Last synced: 11 Apr 2025

https://github.com/mohammad-taheri1/youtube-jwtauthaspnet7webapi

In this repository, we implement authentication and authorization using JWT in a new Asp.NET 7 WebAPI project.

asp-net-core jwt security webapi

Last synced: 11 Jul 2025

https://github.com/MindPatch/pmg

Extract parameters/paths from urls

bugbounty bugbounty-tool bughunting python regex security

Last synced: 11 Jul 2025

Security Awesome Lists
the-book-of-secret-knowledge 74 Awesome-Hacking 83 awesome-security 330 awesome-web-security 424 awesome-ctf 220 awesome-hacker-search-engines 566 awesome-privacy 641 android-security-awesome 230 awesome-incident-response 221 Awesome-WAF 175 awesome-web-hacking 31 DevSecOps 187 awesome-security-hardening 207 awesome-infosec 215 awesome-cybersecurity-blueteam 252 WebHackersWeapons 431 backend-cheats 961 awesome-vehicle-security 227 awesome-sec-talks 265 awesome-game-security 92 awesome-nodejs-security 221 awesome-cloud-security 154 awesome-iot-hacks 70 awesome-embedded-and-iot-security 131 alternative-frontends 119 DevSecOps 48 Awesome-FL 4,069 Awesome-Cybersecurity-Datasets 54 awesome-golang-security 34 awesome-windows-domain-hardening 70 Crypto-OpSec-SelfGuard-RoadMap 473 awesome-azure-architecture 311 awesome-lists 737 osx-and-ios-security-awesome 59 awesome-llm-security 101 awesome-executable-packing 756 awesome-aws-security 173 awesome-ethereum-security 81 awesome-vulnerable-apps 100 Awesome-Jailbreak-on-LLMs 427 awesome-he 90 MobileHackersWeapons 73 npm-security-best-practices 33 awesome-security-GRC 81 awesome-anti-forensic 143 security-apis 114 awesome-python-security 35 awesome-opa 226 awesome-runners 38 graph-adversarial-learning-literature 314
Security Categories
Uncategorized 3,554 fl in top-tier journal 3,255 :books: Literature 2,575 fl in top ml conference and journal 1,564 Tools 1,414 Pentesting 1,143 Operating Systems 1,136 Attack 1,071 Other Lists 797 fl in top ai conference and journal 759 カテゴリ 720 fl in top cv conference and journal 673 Papers 602 Weapons 515 Resources 507 Official 497 Threat Hunting: 480 **Мероприятия** 465 Defense 449 Malware Analysis 434