Open Source Identity and Access Management For Modern Applications and Services
- keycloak
- oidc
- saml
Repository Index
55,640 visible repositories in the index
1–24 of 36 · Most stars
The ZAP by Checkmarx Core project
- zap
- zap-development
- dast
- appsec
Open source alternative to Auth0 / Firebase Auth / AWS Cognito
- authentication
- session-management
- login
- supertokens
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
- sso-authentication
- authentication
- authorization
- java
Java JWT: JSON Web Token for Java and Android
- jwt
- java
- java-jwt
- jjwt
Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
- security-audit
- build-tool
- maven-plugin
- jenkins-plugin
The modern Java bytecode editor
- java
- bytecode
- bytecode-engineering
- reverse-engineering
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
- android-application
- security-analysis
- dynamic-analysis
- xposed
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
Ephemeral root via the CVE-2026-43284 page-cache exploit
- android
- android-root
- android-security
- cve-2026-43284
🔐 A CLI tool to extract server certificates
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
- openam
- sso
- oauth
- saml
APKinspector is a powerful GUI tool for analysts to analyze the Android applications.
Zero-allocation hashing for Java
- java
- hashing
- high-performance
- farmhash
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
- application-security
- appsec
- bug-bounty
- burp-alternative
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance
- ldap-server
- ldap
- opendj
- rest
Generic Capacitor OAuth 2 client plugin. Stop the war in Ukraine!
- capacitor
- oauth2
- oauth2-client
- capacitor-plugin
A small and easy-to-use one-time password generator library for Java implementing RFC 4226 (HOTP) and RFC 6238 (TOTP).
- java
- otp
- totp
- hotp
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
- proxy
- tcp
- tcp-proxy
- penetration-testing
Ephemeral root via the CVE-2026-43284 page-cache exploit
A Java library that implements a ByteChannel interface over SSLEngine, enabling easy-to-use (socket-like) TLS for Java applications.
- java
- ssl
- tls
- networking
Nail in the JKS coffin - Cracking passwords of private key entries in a JKS file