Repository Index

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

ZITADEL - Identity infrastructure, simplified for you.

• saml
• authentication
• authorization
• login

Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

• identity
• identity-management
• user-management
• users

Complete implementation of JWx (Javascript Object Signing and Encryption/JOSE) technologies for Go. #golang #jwt #jws #jwk #jwe

• jwt
• jwe
• jws
• jwk

Go login handlers for authentication providers (OAuth1, OAuth2)

JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..

• jwt
• htpasswd
• service
• golang

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

• ssh
• honeypot
• go
• golang

Software Supply Chain Transparency Log

• supply-chain
• provenance
• security
• transparency-log

Lightweight Certificate Transparency Log Monitor

• certificate-transparency
• pki
• x509
• security

Easy, painless AWS credentials on developer laptops.

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

• beacons
• blue-team
• c2
• command-and-control

Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️

• devsecops
• entropy
• gdpr
• golang

This plugin implements Telegram WebApp Auth and Telegram Login Widget for the pocketbase

• pocketbase
• telegram
• telegram-bot
• pocketbase-plugins

A SSH Server in Go that logs username/password combos

Prevent your secrets from leaking into logs, std* etc.

• go
• secrets

A low/zero interaction ssh authentication logging honeypot

• ssh-server
• honeynet

Tamper-evident audit log for Go: an append-only, hash-chained, optionally Ed25519-signed log/slog handler, with offline logx verify. Built on the standard library, zero third-party dependencies. Also a full slog toolkit (colored output, JSON, rotation, fan-out, CLI).

• cli
• go
• golang
• slog