Showing 36 of 1290 projects
A cross-platform static code analysis tool for mobile applications (APK/IPA) to find security vulnerabilities like hardcoded credentials and API keys.
A standalone Python tool for applying SIGMA detection rules to EVTX, Auditd, Sysmon for Linux, and other log formats.
A security linter for npm and yarn lockfiles to detect malicious package injections and enforce trust policies.
An iOS library for reading NFC-enabled passports using CoreNFC APIs, supporting BAC, PACE, and multiple data groups.
A rootkit that leverages eBPF to implement offensive security techniques like container breakouts, network scanning, and RASP bypass.
A library that simplifies integrating Keycloak authentication and authorization into Angular applications.
A Laravel package for handling user email verification with token generation, email sending, and verification management.
A Kustomize plugin that seamlessly decrypts SOPS-encrypted Kubernetes secrets and configs during GitOps workflows.
A concise DSL for role-based authorization in Rails applications, focused on clarity and testability.
A concise DSL for role-based authorization in Rails applications, focused on clarity and testability.
An Objective-C utility class for securely storing sensitive data like passwords and tokens in the iOS keychain.
A comprehensive netlist reverse engineering and manipulation framework for hardware analysis, akin to IDA or Ghidra for hardware.
A Rust library and UI suite for accessing and decrypting passwords stored in the pass format.
A robust, spec-compliant Node.js library for reading ZIP archives with async APIs and memory safety.
Go library for accessing and controlling Tor clients and servers, including embedding Tor statically.
A hypervisor-based runtime for OCI containers, enabling virtualized container execution with KVM, Xen, or QEMU.
A simple Swift library for adding Apple Face ID and Touch ID authentication to iOS apps with comprehensive error handling.
A security middleware library for FastAPI providing IP control, rate limiting, penetration detection, and security headers.
An AWS IAM to least privilege Terraform execution framework that analyzes usage patterns and generates right-sized IAM configurations.
A low-interaction honeypot that emulates vulnerable services to capture malware and analyze attacks.
A comprehensive JSON Web Token (JWT) library for Elixir applications.
A Deno web framework built with ES decorators for modular, secure, and dependency-injected applications.
Hologram brings AWS IAM Roles to developer laptops by exposing an EC2-like metadata service for temporary credentials.
A free web browser that enables anonymous internet communication by routing traffic through the Tor network.
Simple authorization conventions for Phoenix applications with context-based policies and schema scoping.
Adds two-factor authentication to SSH servers using Authy's API for enhanced security.
A Bluetooth experimentation framework for Broadcom and Cypress chips that enables firmware patching and packet injection.
A low-level, dependency-free JavaScript library for implementing OAuth 2.1, OAuth 2.0, OpenID Connect, and FAPI 2.0 clients.
A lightweight, secure, easy-to-use cryptographic library for constrained environments like microcontrollers.
A toolkit for easily deploying HTTP and HTTPS onion services (Tor hidden services) for existing websites.
An automatic, platform-independent unpacker for Windows binaries using emulation to analyze packed malware.
A lightweight, multi-role, whitelist-based authorization gem for Rails and other Ruby applications.
A lightweight Bash script for scanning Linux/Unix/OSX systems for Indicators of Compromise (IOCs) without installation.
An ATT&CK-like threat matrix mapping adversary tactics and techniques specific to CI/CD pipeline security.
A data pipeline engine for security teams to collect, transform, enrich, and route telemetry data at scale.
A free and open-source Ruby toolkit for security research and development, featuring CLI commands and libraries for encoding, networking, exploits, and more.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.