Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Repository Index
47,133 repositories indexed
1–24 of 27 · Most stars
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
Information gathering framework for phone numbers
- information-gathering
- phone-number
- osint
- open-source-intelligence
In-depth attack surface mapping and asset discovery
- go
- dns
- subdomain
- enumeration
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
- identity
- identity-management
- user-management
- users
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
- kubernetes
- openshift
- configmap
- secrets
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
A repository of sysmon configuration modules
- sysmon
- dfir
- threat-hunting
- mitre-attack
A tool to abuse Exchange services
- mapi
- exchange
- shells
- pentesting
A secure low code deception runtime framework, leveraging AI for System Virtualization.
- cybersecurity
- security
- honeypot
- framework
HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.
Protect against malicious open source packages 🤖
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
Safe, simple and fast JSON Web Tokens for Go
- jwt
- jwt-token
- jwt-claims
- dependency-free
Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend
A clean room recreation of Auth0 with 1:1 drop in replacement feature parity.
:elephant: :busts_in_silhouette: Manage PostgreSQL roles and privileges from YAML or LDAP
- ldap
- postgresql
- yaml
- roles
⚡️ SharePoint SDK for Go
- sharepoint
- sharepoint-online
- golang
- go
The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
Simple tool to extract the most common substrings from an input text. Built for password cracking.
- passwords
- cracking
- string-manipulation
- wordlist-generator
Troje is a honeypot built around lxc containers. It will run each connection with the service within a seperate lxc container.
Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.
- aho-corasick
- cybersecurity
- devops
- git-hook
DICOM Honeypot
- dicom
- honeypot
- medical
- medical-imaging