Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Repository Index
47,133 repositories indexed
1–24 of 26 · Most stars
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
Sandbox for developing and testing UI components in isolation
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
- authorization
- permissions
- acl
- cancan
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
Patch-level verification for Bundler
- bundler-audit
- ruby-advisory-db
- ruby
- dependency-checker
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
- adversarial-ai
- claude-code
- cursor
- electron-security
Interactive CTF Exploration Tool
- security
- reverse-engineering
- windows
- windows-internals
Laravel Ban simplify blocking and banning Eloquent models.
- laravel
- eloquent
- cog
- trait
Tiny hashing module that uses the native crypto API in Node.js and the browser
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
- forensics
- hypervisor
- memory-dump
- reverse-engineering
Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.
- cve
- security
- security-alerts
- vulnerability
:articulated_lorry: An awesome LIN bus tools, hardware and resources. It helps a reverse engineering LIN bus devices with lightly specializing in automotive embedded controller software and communication understanding.
- automotive
- lin
- lin-bus
- ldf
Lightweight Dockerfile linter that helps you write better Dockerfiles. Get instant feedback with quality scores, security checks, and 60+ best practice rules.
Minimal code to connect to a CEF debugger.
Bouncy Hsm is a software simulator of HSM and smartcard simulator with HTML UI, REST API and PKCS#11 interface.
- blazor
- blazor-webassembly
- bouncycastle
- cryptography
Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.
A mysqldump anonymizer
- mysqldump
- anonymizer
- database-anonymizer
- rgpd
Audit and fix your Mac's security in one command. No agent, no signup, open source.
- cli
- compliance
- endpoint-security
- golang
CLI tool for running coding agents inside hardware-isolated microVMs
A docker container to simplify and secure the use of Infrastructure as Code (IaC)
Give the agent a cage, not your keys. One-command Docker sandbox for AI coding agents: full autonomous permissions, per-project isolation, your host stays untouched.
One isolated Lima VM per GitHub project — sandboxed Claude Code/Codex, Docker, Node, signed git