Repository Index

Ghidra is a software reverse engineering (SRE) framework

• software-analysis
• disassembler
• reverse-engineering

Open Source Identity and Access Management For Modern Applications and Services

• keycloak
• oidc
• saml

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

• cryptomator
• java
• cloud-storage
• cryptography

Open source alternative to Auth0 / Firebase Auth / AWS Cognito

• authentication
• session-management
• login
• supertokens

The modern Java bytecode editor

• java
• bytecode
• bytecode-engineering
• reverse-engineering

↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.

• oauth2
• spring-boot
• spring-cloud
• spring-cloud-alibaba

JPEXS Free Flash Decompiler (FFDec) is open-source Flash SWF decompiler and editor. Extract and edit ActionScript, images, sounds, shapes, fonts, and other SWF resources.

• flash
• swf
• decompiler
• editor

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

• android-application
• security-analysis
• dynamic-analysis
• xposed

Ephemeral root via the CVE-2026-43284 page-cache exploit

• android
• android-root
• android-security
• cve-2026-43284

🔐 A CLI tool to extract server certificates

• certificate
• ssl
• x509
• tls

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

• openam
• sso
• oauth
• saml

OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance

• ldap-server
• ldap
• opendj
• rest

Ephemeral root via the CVE-2026-43284 page-cache exploit

User management for Play! framework (authentication, registration, password management)

Honeypot that mimics Tomcat manager endpoints. Logs requests and saves attacker's WAR file for later study

• honeypot
• spring-boot
• tomcat

Native Shamir Secret Sharing. Securely split & restore secrets on iOS, Android, and Web with a single Capacitor plugin.

• capacitor
• capacitor-android
• capacitor-ios
• capacitor-plugin