Repository Index

A tool for secrets management, encryption as a service, and privileged access management

• vault
• go
• secrets

The easiest, and most secure way to access and protect all of your infrastructure.

• ssh
• go
• bastion
• teleport-binaries

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

• hydra
• oauth2
• openid-connect
• docker

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Automatically provision and manage TLS certificates in Kubernetes

• kubernetes
• letsencrypt
• tls
• certificate

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

• vuls
• vulnerability-scanners
• golang
• go

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

• kubernetes
• security
• nsa
• mitre-attack

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

• scanner
• security-audit
• security-tools
• vulnerability-scanner

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

• oidc
• kubernetes
• idp
• identity-provider

The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.

• idp
• oidc
• passkeys
• self-hosted

TranslatedAn open-source and free self-hosted SSL certificates ACME tool, automates the full-cycle of issuance, deployment, renewal, and monitoring visually. Supports all major mainstream cloud providers.

• ssl-certificate
• ssl-certificates
• ssl-cert
• https

A vault for securely storing and accessing AWS credentials in development environments

• aws
• iam
• temporary-credentials
• keychain

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.

• ai
• ai-agents
• ai-cybersecurity
• ai-penetration-testing

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

• gtfobins
• exploit
• privesc
• privilege-escalation

External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.

• external-secrets
• kubernetes
• kubernetes-secrets
• secrets-manager

Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.

Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.

• go
• uuid

An automated e-mail OSINT tool

• osint
• hacking
• email-checker
• social-media

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉

• access-control
• authorization
• rbac
• rebac

TranslatedAn API framework with a modular design based on Gin, which wraps commonly used features, is simple to use, and is dedicated to fast business development. For example, it supports cors cross-origin requests, jwt signature verification, zap log collection, panic exception capture, trace link tracing, prometheus monitoring metrics, swagger document generation, viper configuration file parsing, the gorm database component, the gormgen code generation tool, the graphql query language, errno unified definition of error codes, the use of gRPC, cron scheduled tasks, and so on.

• golang
• go
• api-gin
• gin

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

• hacktoberfest
• abac
• access-control
• acl

Cameradar hacks its way into RTSP videosurveillance cameras

• penetration-testing
• security
• hacking
• infosec

📦 Make security testing of K8s, Docker, and Containerd easier.

• penetration
• penetration-testing-tools
• kubernetes
• docker

Assembly and source viewer with goodies.