Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Repository Index
47,133 repositories indexed
1–24 of 113 · Most stars
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- ai-agents
- ai-security-tool
- autonomous-agents
- golang
Find secrets with Gitleaks 🔑
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
- totp
- ldap
- sso-authentication
- two-factor-authentication
Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
In-depth attack surface mapping and asset discovery
- go
- dns
- subdomain
- enumeration
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
- chrome
- macos
- windows
- pentest-tool
Open-Source Phishing Toolkit
- gophish
- phishing
- golang
- security
A vulnerability scanner for container images and filesystems
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
- vuls
- vulnerability-scanners
- golang
- go
Adversary Emulation Framework
- security-tools
- implant
- golang
- dns-server
Go implementation of JSON Web Tokens (JWT).
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
- steampipe
- postgresql
- postgresql-fdw
- cloud
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
- authorization
- permissions
- security
- zanzibar
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
- access-control
- authorization
- rbac
- rebac
Go OAuth2
- go
- golang
- oauth2
- oauth2-client
Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal
- https
- acme
- letsencrypt
- golang
Linux Runtime Security and Forensics using eBPF
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
Software sandbox for storage of sensitive information in memory.
- security
- golang
- go
- cryptography
HTTP Session Management for Go
- go
- golang
- session
- sessions
A Go OpenID Connect client.
- golang
Complete implementation of JWx (Javascript Object Signing and Encryption/JOSE) technologies for Go. #golang #jwt #jws #jwk #jwe
- jwt
- jwe
- jws
- jwk