Repository Index

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

• https
• tls
• certificates
• local-development

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

• cve-scanner
• subdomain-takeover
• nuclei-engine
• vulnerability-detection

Find, verify, and analyze leaked credentials

• secret
• trufflehog
• credentials
• security

The easiest, and most secure way to access and protect all of your infrastructure.

• ssh
• go
• bastion
• teleport-binaries

Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

• casbin
• access-control
• authorization
• rbac

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

• password-sniffer
• mitm
• rogue-ap
• wifi

Information gathering framework for phone numbers

• information-gathering
• phone-number
• osint
• open-source-intelligence

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

ZITADEL - Identity infrastructure, simplified for you.

• saml
• authentication
• authorization
• login

In-depth attack surface mapping and asset discovery

• go
• dns
• subdomain
• enumeration

An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

• oidc
• sso
• oauth
• iam

Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

• identity
• identity-management
• user-management
• users

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

• vuls
• vulnerability-scanners
• golang
• go

Adversary Emulation Framework

• security-tools
• implant
• golang
• dns-server

A Kubernetes controller and tool for one-way encrypted Secrets

• kubernetes
• kubernetes-secrets
• devops-workflow
• encrypt-secrets

Modern authentication, on your terms. Open source alternative to Auth0, Clerk, WorkOS, Stytch.

• passkeys
• webauthn
• fido2
• authentication

A vault for securely storing and accessing AWS credentials in development environments

• aws
• iam
• temporary-credentials
• keychain

The slightly more awesome standard unix password manager for teams

• go
• password-manager
• git
• gpg

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

• zanzibar
• permissions
• database
• distributed-systems

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

• gtfobins
• exploit
• privesc
• privilege-escalation

Upspin: A framework for naming everyone's everything.

• storage
• golang
• cryptography
• sharing

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

• access-control
• authorization
• rbac
• rebac

An open-source network stresser tool but it's Hatsune Miku

• ddos
• ddos-attack-tools
• ddos-attacks
• ddos-tool

Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal

• https
• acme
• letsencrypt
• golang