Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
- go
- web-server
- caddyfile
- http
Repository Index
76,855 visible repositories in the index
1–24 of 271 · Most stars
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- ai-agents
- ai-security-tool
- autonomous-agents
- golang
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- cve-scanner
- subdomain-takeover
- nuclei-engine
- vulnerability-detection
Find secrets with Gitleaks 🔑
- security
- security-tools
- git
- golang
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
- totp
- ldap
- sso-authentication
- two-factor-authentication
Find, verify, and analyze leaked credentials
- secret
- trufflehog
- credentials
- security
Simple and flexible tool for managing secrets
Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
- password-sniffer
- mitm
- rogue-ap
- wifi
Information gathering framework for phone numbers
- information-gathering
- phone-number
- osint
- open-source-intelligence
Fast web fuzzer written in Go
- fuzzer
- pentesting
- infosec
- web
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
In-depth attack surface mapping and asset discovery
- go
- dns
- subdomain
- enumeration
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
Fast passive subdomain enumeration tool.
- subdomain-enumeration
- osint
- subdomains
- bugbounty
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
- fscan
- scanner
- scanning
- sec
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
- chrome
- macos
- windows
- pentest-tool
Open-Source Phishing Toolkit
- gophish
- phishing
- golang
- security
Directory/File, DNS and VHost busting tool written in Go
- go
- pentesting
- tool
- dns
A vulnerability scanner for container images and filesystems
An HTTP toolkit for security research.
- mitm
- proxy
- http
- pentesting
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
- opa
- policy
- declarative
- json