47,133 repositories indexed
1–24 of 48 · Most stars
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Simple and flexible tool for managing secrets
The easiest, and most secure way to access and protect all of your infrastructure.
In-depth attack surface mapping and asset discovery
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
Fast passive subdomain enumeration tool.
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
Directory/File, DNS and VHost busting tool written in Go
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
Digging Deeper....
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
captcha of base64 image string
Go package captcha implements generation and verification of image and audio CAPTCHAs.
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.
Advanced crypto library for the Go language
Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.
Discover internet-wide misconfigurations while drinking coffee
A collection of useful utility functions