security

Live validation proxy tool for testing web app vulnerabilities

The best authentication plugin for the Bukkit/Spigot API!

awesome llvm security [Welcome to PR]

Your AI agent in 30 seconds. Not 30 hours. Self-hosted, open-source personal AI with desktop installer, multi-agent Command Center(Deep Work), and 7-layer security. Anthropic, OpenAI, or Ollama.

The source repository for the Trusted Platform Module (TPM2.0) tools

JavaSecLab is a comprehensive Java vulnerability platform｜​ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互UI……

Android keyboard for secure E2EE communication through the signal protocol in any messenger. Communicate securely and independent, regardless of the legal situation or whether messengers use E2EE

DevSec Linux Baseline - InSpec Profile

umbrella project for emulation of smart card readers or smart cards

DianXing - AI-Driven End-to-End Code Security Auditing

:satellite: A Mac menubar app that notifies you whenever SSH, VNC, sudo, or other auth events occur.

Powerful Privacy tool to secure your sensitive apps.

Set content security policy headers in a Laravel app

:lock: Chromium's HSTS preload list submission website.

🔒True end-to-end encrypted (E2EE) chat system in web. 🔒真正的网页端到端加密聊天系统

Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers.

One wifi password per device. Ad Blocking & Privacy Blocklists. Policy Based Network Access

Transform Linux Audit logs for SIEM usage

[Updated for AI 🤖] Continuous updates on how to stay safe from NPM supply chain attacks

ON NO! Someone put an RPG in a packet sniffer

Zip Slip Vulnerability (Arbitrary file write through archive extraction)

LAN Orangutan is a lightweight network scanner with persistent device labeling, multi-network support, and Tailscale integration. Built by 291 Group.

Sample implementations for cloud design patterns found in the Azure Architecture Center.

A basic tool to check security headers of a website

A tool to create firefox profiles with personalized defaults.

Vulnerability (CVE) scanner for Nix/NixOS [maintainer=@henrirosten]

Work in progress...

Dradis Framework: Collaboration and reporting for IT Security teams

The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.

The comprehensive guide for online anonymity and OpSec.