Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Repository Index
70,234 visible repositories in the index
1–24 of 35 · Most stars
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- cve-scanner
- subdomain-takeover
- nuclei-engine
- vulnerability-detection
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
- chrome
- macos
- windows
- pentest-tool
An HTTP toolkit for security research.
- mitm
- proxy
- http
- pentesting
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
- kubernetes
- openshift
- configmap
- secrets
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
- external-secrets
- kubernetes
- kubernetes-secrets
- secrets-manager
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
- attack
- auto
- golang
- hacker
Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.
- go
- uuid
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
- go
- golang
- security
- policy
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
Package gorilla/sessions provides cookie and filesystem sessions and infrastructure for custom session backends.
- gorilla
- cookie
- go
- golang
Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.
- hids
- security
- rasp
- edr
Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
- tls
- clienthello
- parrot
- low-level-tls
HTTP Session Management for Go
- go
- golang
- session
- sessions
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- rita
- network-traffic
- threat
- scanning
A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).
- vault
- kubernetes
- kubernetes-secrets
- golang
A secure low code deception runtime framework, leveraging AI for System Virtualization.
- cybersecurity
- security
- honeypot
- framework
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
- jwt
- htpasswd
- service
- golang
Secure Vault for Customer PII/PHI/PCI/KYC Records
- gdpr
- pii
- piidata
- security
Program to reverse Docker images into Dockerfiles
- security-tools
- security
- docker-security
- reverse-engineering
An implementation of JOSE standards (JWE, JWS, JWT) in Go
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids