Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
Repository Index
47,133 repositories indexed
1–24 of 39 · Most stars
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
- password-sniffer
- mitm
- rogue-ap
- wifi
In-depth attack surface mapping and asset discovery
- go
- dns
- subdomain
- enumeration
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
- chrome
- macos
- windows
- pentest-tool
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
- steampipe
- postgresql
- postgresql-fdw
- cloud
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- zanzibar
- permissions
- database
- distributed-systems
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
- authorization
- permissions
- security
- zanzibar
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
- access-control
- authorization
- rbac
- rebac
Cameradar hacks its way into RTSP videosurveillance cameras
Split your file into encrypted fragments so that you don't need to remember a passcode
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
The SPIFFE Runtime Environment
Security sensor for realtime threat detection and protection
captcha of base64 image string
- captcha
- image-captcha
- audio-captchas
- captcha-generator
goRBAC provides a lightweight role-based access control (RBAC) implementation in Golang.
- rbac
- go
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
- encryption-server
- encryption
- crypto
- cryptography
Secure Vault for Customer PII/PHI/PCI/KYC Records
- gdpr
- pii
- piidata
- security
Software Supply Chain Transparency Log
- supply-chain
- provenance
- security
- transparency-log
Lightweight Certificate Transparency Log Monitor
- certificate-transparency
- pki
- x509
- security
HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control