Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Repository Index
47,133 repositories indexed
1–23 of 23 · Most stars
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
Sandbox for developing and testing UI components in isolation
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
- authorization
- permissions
- acl
- cancan
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
Patch-level verification for Bundler
- bundler-audit
- ruby-advisory-db
- ruby
- dependency-checker
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
- adversarial-ai
- claude-code
- cursor
- electron-security
Interactive CTF Exploration Tool
- security
- reverse-engineering
- windows
- windows-internals
Laravel Ban simplify blocking and banning Eloquent models.
- laravel
- eloquent
- cog
- trait
Tiny hashing module that uses the native crypto API in Node.js and the browser
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
- forensics
- hypervisor
- memory-dump
- reverse-engineering
Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.
- cve
- security
- security-alerts
- vulnerability
macOS persistence tool
- persistence
- macos
Minimal code to connect to a CEF debugger.
A mysqldump anonymizer
- mysqldump
- anonymizer
- database-anonymizer
- rgpd
Audit and fix your Mac's security in one command. No agent, no signup, open source.
- cli
- compliance
- endpoint-security
- golang
CLI tool for running coding agents inside hardware-isolated microVMs
A docker container to simplify and secure the use of Infrastructure as Code (IaC)
Give the agent a cage, not your keys. One-command Docker sandbox for AI coding agents: full autonomous permissions, per-project isolation, your host stays untouched.
One isolated Lima VM per GitHub project — sandboxed Claude Code/Codex, Docker, Node, signed git
🔥 n01d-forge - Secure Cross-Platform Image Burner with Encryption | LUKS, VeraCrypt, Secure Erase, Hash Verification
- bootable-usb
- cross-platform
- encryption
- etcher-alternative
Stream-first CAN & J1939 toolkit for security research and AI agents — typed JSONL events, CLI, TUI, fuzzing, MCP server.
- automotive-security
- can-bus
- can-bus-hacking
- can-bus-security