Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Simple and flexible tool for managing secrets
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
ZITADEL - Identity infrastructure, simplified for you.
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
- identity
- identity-management
- user-management
- users
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
comment engine
Digging Deeper....
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
CLI for managing secrets
Security sensor for realtime threat detection and protection
A secure low code deception runtime framework, leveraging AI for System Virtualization.
Go login handlers for authentication providers (OAuth1, OAuth2)
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
Program to reverse Docker images into Dockerfiles
HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.
KSOPS - A Flexible Kustomize Plugin for SOPS Encrypted Resources
Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend
BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one.
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
Go session management for web servers (including support for Google App Engine - GAE).
- gae
- http-session
- session-management
Kustomize generator plugin that generates Secrets from sops-encrypted files
A discord bot for reverse engineers and exploit developers.