S

security

🔧🔗https://github.com/raspberrypi/rpi-sb-provisioner

A minimal-input automatic secure boot provisioning system for Raspberry Pi devices.

🔧🔗https://github.com/bytedance/vArmor vArmor is a cloud native container sandbox system based on AppArmor/BPF/Seccomp. It also includes multiple built-in protection rules that are ready to use out of the box.

🔧🔗https://github.com/bytedance/Elkeid Elkeid is an open source solution that can meet the security requirements of various workloads

https://github.com/firefart/stunner.git Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers.

🔧🔗https://github.com/invariantlabs-ai/invariant

Guardrails for secure and robust agent development

YubiKey Guide

https://github.com/drduh/YubiKey-Guide

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

MacOS Security and Privacy Guide

https://github.com/drduh/macOS-Security-and-Privacy-Guide Community guide to securing and improving privacy on macOS.

Trident

🔧🔗https://github.com/tbckr/trident

Trident is an OSINT and Threat Intel CLI tool

🔧🔗https://github.com/google/grr GRR Rapid Response: remote live forensics for incident response

Chamber

🔧🔗https://github.com/cirruslabs/chamber Chamber is a tool for running coding agents like Claude inside Tart macOS virtual machines with the current directory mounted. It provides a lightweight isol

🔧🔗https://github.com/kanidm/webauthn-rs An implementation of webauthn components for Rustlang servers

🔧🔗https://github.com/harishsg993010/damn-vulnerable-MCP-server

Damn Vulnerable MCP Server

https://github.com/aquasecurity/cloudsploit Cloud Security Posture Management (CSPM)

🔧🔗https://github.com/Infisical/infisical

♾️ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI

config

https://github.com/drduh/config Configuration files and scripts used in guides and for system setup.

🔧🔗https://github.com/goauthentik/authentik The authentication glue you need.

https://github.com/aquasecurity/traceeshark Deep Linux runtime visibility meets Wireshark

pwd.sh

https://github.com/drduh/pwd.sh GnuPG symmetric secrets manager using Bash.

Debian Privacy Server Guide

https://github.com/drduh/Debian-Privacy-Server-Guide Guide to using a remote Debian server for security and privacy services

Router Guide

https://github.com/drduh/Router-Guide

Guide to building a Linux or BSD router on the PC Engines APU platform