Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Information gathering framework for phone numbers
- information-gathering
- phone-number
- osint
- open-source-intelligence
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
In-depth attack surface mapping and asset discovery
- go
- dns
- subdomain
- enumeration
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
一款内网综合扫描工具,方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
Fast passive subdomain enumeration tool.
- subdomain-enumeration
- osint
- subdomains
- bugbounty
Cameradar hacks its way into RTSP videosurveillance cameras
Split your file into encrypted fragments so that you don't need to remember a passcode
Digging Deeper....
Security sensor for realtime threat detection and protection
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
A utility to safely generate malicious network traffic patterns and evaluate controls.
Program to reverse Docker images into Dockerfiles
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.
- golang-development
- vscode-devcontainers
- golang
- go
Discover internet-wide misconfigurations while drinking coffee
Generic Low Interaction Honeypot
Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
High-interaction MitM SSH honeypot
⚡️ SharePoint SDK for Go
- sharepoint
- sharepoint-online
- golang
- go
A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
Integrates Spiffe and Vault to have secretless authentication
- spire
- spiffe
- vault
- hashicorp