Project
Dockerscan
Enterprise-grade security scanner for Docker containers. Detects vulnerabilities, analyzes configurations, and prevents secret leaks in real-time. +1,400 stars.
Open source
Open Source Tools
I have published more than a hundred open source tools over the years.
Here I show just a few, the ones people actually use: security, APIs and performance.
Project
Aiotasks
High-performance distributed task manager for Python Asyncio. Massive real-time event processing with horizontal scaling. Modern Celery alternative without overhead. +400 stars.
Project
Plecost
WordPress security scanner: core, plugins and themes checked against a daily-updated local CVE database. No API key, no data sent to third parties. +380 stars.
Project
NoSQL Injection Wordlists
Enterprise payload collection for NoSQL database pentesting (MongoDB, Cassandra, CouchDB, Redis). Used in bug bounties with critical findings up to $50K. +370 stars. Global reference.
Project
FestIn
Enterprise scanner for misconfigured S3 buckets. Prevents data leaks and multi-million GDPR fines. Detects exposed medical records, backups, and confidential data. +230 stars.
Project
Aiohttp-Swagger
Automatic OpenAPI/Swagger documentation generation for high-performance aiohttp APIs. Reduces documentation time by 90%. Used in APIs handling millions of daily requests. +180 stars.
Project
Enteletaor
Specialized pentesting framework for Message Queues (RabbitMQ, Redis, Kafka). Detects insecure configurations in critical financial systems. Prevents malicious message injection. +150 stars.
Project
Dockerfile Security
Static security analysis for Dockerfiles in seconds. Detects hardcoded secrets, excessive privileges, and outdated software before build. CI/CD integration. +95 stars.
Project
Vulnerable Node
NodeJS web shop with real vulnerabilities in the code, not simulated, to benchmark security analyzers and practice pentesting. OWASP Top 10. 480 stars.
Project
Aiohttp-Cache
Cache system for aiohttp servers
Project
OpenVAS to Report
Convert OpenVAS XML reports into professional reports
Project
ja-shortener
Self-hosted URL shortener with no external dependencies. Lightweight, fast, easy to deploy. 43 stars.
Project
RSM - Redis Security Map
Anti-hacking tool for Redis. Detects and blocks attacks against exposed Redis instances. 31 stars.
Project
EasyLogs
Real-time log dashboard that starts with one docker run: filters, search, grouping and a PWA for your phone. For people who do not need Kibana. 26 stars.
Project
wordpress-docker-sec
Anti-hacking Docker configuration for WordPress. Automated hardening with nmap, wpscan and plecost. 13 stars.
Project
LAPIS
Lightweight API Specification for Intelligent Systems. Reduces LLM token overhead by 85% compared to OpenAPI. Published paper on arXiv. 12 stars.
Project
nginx-wordpress-docker-sec
Secure Nginx configuration for WordPress on Docker. Anti-hacking tools deployed automatically. 12 stars.
Project
realtime-redis-backup
Realtime Redis data backup to S3. Uses asyncio to avoid performance impact. 11 stars.