Awesome GitHub RepositoriesSecure Coding Practices

Masscan is a command-line network scanner designed for large-scale discovery and infrastructure reconnaissance. It identifies open ports across specific network segments or the entire internet by probing vast address ranges with high efficiency. The tool functions as an asynchronous packet engine, bypassing standard operating system kernel networking stacks to transmit raw packets directly from application memory. The project distinguishes itself through a specialized architecture that manages millions of concurrent connections by separating packet transmission and reception into independent

This project is a web application security guide and developer training resource. It serves as a secure coding framework and vulnerability remediation manual, providing software engineers with the tools to identify, prioritize, and fix common security holes across different application layers. The resource utilizes a structured verification framework and security audit checklists to systematically find vulnerabilities. It features a technical reference that maps specific security flaws to step-by-step instructions for remediation, supported by vulnerability statistics to help determine which

Grav is a flat-file content management system that eliminates the need for a traditional database by storing site content and configuration in human-readable Markdown and YAML files. Built as a modular PHP web framework, it uses a hierarchical page routing system where the physical directory structure directly determines the site's URL paths. The platform is distinguished by its event-driven plugin architecture and a command-line interface that prioritizes system administration, deployment, and maintenance tasks. It utilizes a blueprint-driven system to generate administrative forms from stru

Secguide is an API security hardening framework and a comprehensive knowledge base of secure coding guidelines. It provides a multi-language security standard and a set of static analysis rules designed to identify security flaws and protect application programming interfaces from common exploits. The project functions as a reference library of security patterns and remediation guides, maintaining consistent security requirements across various programming languages. It utilizes rule-based pattern matching and a static analysis pipeline to detect dangerous API calls and vulnerabilities within

Bandit is a static analysis security testing tool and vulnerability detection scanner for Python source code. It functions as a security-focused linter and static analyzer that identifies common vulnerabilities and architectural flaws without executing the program. The tool utilizes an abstract syntax tree to analyze code patterns and identifies risky function calls or insecure configurations. It employs a plugin-based rule engine to decouple scanning logic from individual security checks and supports configuration-driven filtering to exclude specific files or ignore certain warnings. The sy

Go-SCP هو دليل ترميز آمن وإطار عمل لمنع الثغرات للغة البرمجة Go. يعمل كدليل تقني لتنفيذ أنماط البرمجة الدفاعية ومعايير الأمان لمنع ثغرات البرمجيات الشائعة. يعمل المشروع كمرجع أمان ثابت، حيث يربط نقاط ضعف البرمجيات المعروفة بأنماط معالجة محددة في Go. ويوفر مستودعًا منسقًا لمعايير الترميز الآمن وممارسات التنفيذ المعتمدة التي تركز بشكل خاص على أمان تطبيقات الويب. يغطي إطار العمل تدقيق الأمان من خلال مقارنة الكود المصدري مقابل المعايير المحددة ويستخدم تعيين الثغرات القائم على الأنماط لتحديد عيوب البرمجة. يتم توزيع التوجيهات من خلال بنية مرجعية مهيكلة ومتاحة بتنسيقات محمولة مثل PDF وePub للرجوع إليها دون اتصال بالإنترنت.