Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
- totp
- ldap
- sso-authentication
- two-factor-authentication
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
ARTEX - AI autonomous penetration testing system (English translation)
Program to reverse Docker images into Dockerfiles
A simple, semantic and developer-friendly crypto package for golang
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
Platform-Agnostic Security Tokens implementation in GO (Golang)
ScopeWeaver: English and Korean localization of ARTEX, with preserved AGPL-3.0 attribution.
Generic Low Interaction Honeypot
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
:sunglasses:Package captcha provides an easy to use, unopinionated API for captcha generation
- golang
- captcha
- captcha-generator
- image-captcha
Go session management for web servers (including support for Google App Engine - GAE).
- gae
- http-session
- session-management
The repository host gives no description.
Time-Based One-Time Password (TOTP) and HMAC-Based One-Time Password (HOTP) library for Go.
- hotp
- totp
- totp-codes
- authenticator
hashgen - the blazingly fast hash generator