Tools

whgojp/javaseclab

Comprehensive Java vulnerability lab with vulnerable and fixed code, attack scenarios, source/sink audit notes, and secure coding guidance for…

dev-sec/chef-ssh-hardening

This chef cookbook provides secure ssh-client and ssh-server configurations.

lore-hex/quill-router

TrustedRouter.com repo for secure LLM proxying

eth0izzle/security-skills

A collection of Claude Code skills that help security teams stay secure

dev-sec/puppet-ssh-hardening

This puppet module provides secure ssh-client and ssh-server configurations.

owasp/application-security-curriculum

Structured curriculum for learning application security, covering secure coding, threat modeling, and DevSecOps practices. Designed for self-paced…

ransomleak/training-application-security

Interactive secure coding training with hands-on SCORM exercises covering OWASP Top 10 web and API vulnerabilities, Git/secrets exposure, and…

davidnussio/envsec

Secure CLI tool for managing environment secrets using native OS credential stores (macOS Keychain, Linux Secret Service, Windows Credential Manager)

viralmaniar/vulnvault

Developer-focused knowledge base of application security vulnerabilities with insecure vs secure code examples, prevention guidance, and OWASP/CWE…

jduck/csw-slides-2024

Slides for Developing Secure Software in 2024 at CanSecWest

omerati/almalinux-fix-cve-2026-31431

Automates kernel patching for CVE-2026-31431 and Dirty Frag, sets secure kernel as default in GRUB, and disables testing repo for production safety.

kavin71725/cve-2025-12543-fix-for-wildfly

Docker base image with backported Host header validation fix for CVE-2025-12543 in Undertow 1.4.x, enabling secure deployment of WildFly 11…

owasp/teach-appsec

OWASP teaching modules covering application security fundamentals including risk management, secure software development, and operations security for…

j3ssie/osmedeus

A Modern Orchestration Engine for Security

dev-sec/puppet-os-hardening

This puppet module provides numerous security-related configurations, providing all-round base protection.

ory/talos

Scalable API key server for issuing, verifying, and revoking credentials with token derivation for fine-grained capability tokens. Supports…

owasp/agent-security-regression-harness

Executable security regression testing for agentic applications and MCP-integrated systems.

xenoncyber/envy

A terminal based tool for managing secrets with both tui and cli support