A simple zero-config tool to make locally trusted development certificates with any names you'd like.
- https
- tls
- certificates
- local-development
Repository Index
88,073 visible repositories in the index
1–23 of 23 · Most stars
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
- chrome
- macos
- windows
- pentest-tool
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
- identity
- identity-management
- user-management
- users
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
- gtfobins
- exploit
- privesc
- privilege-escalation
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
iOS/macOS Research Swiss Army Knife
A repository of sysmon configuration modules
- sysmon
- dfir
- threat-hunting
- mitre-attack
:fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.
- golang
- payload
- remote-control
- hacking-tool
Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.
Open source Auth0/Keycloak alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps
- 2fa
- auth0
- authentication
- identity
Stealthy, Linux-first multi-operator C2 with a self-healing mesh, in-memory execution, and an AI-driven MCP assistant.
- post-exploitation
- stealth
- linux
- hacking-tool
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
- owasp
- api-security
- security
- bugbounty
a digital safe with multiple keys, held by people you trust
- age-encryption
- shamir-secret-sharing
- dead-mans-switch
- deadmanswitch
An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.
- golang-development
- vscode-devcontainers
- golang
- go
Incident Response - Fast suspicious file finder
- dfir
- investigation
- incident-response
- threat-hunting
Read-only, local-first cloud security scanner for AWS, Azure and GCP. Your scan data stays on your machine.
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
- android-hacking
- baseband
- bootloader-unlock
- checkm8
Local-first policy gateway for coding agents. Allow, review, or block MCP, shell, SQL, GitHub, and HTTP actions with scoped credentials and signed evidence.
- golang
- observability
- opentelemetry
- policy-engine
Firebase Authentication Middleware for Go Fiber framework.
Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.