The authentication glue you need.
- saml
- saml-idp
- saml-sp
- oauth2
Repository Index
47,133 repositories indexed
1–24 of 43 · Most stars
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
- footprinting
- osint
- threatintel
- python
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
Incredibly fast crawler designed for OSINT.
fsociety Hacking Tools Pack – A Penetration Testing Framework
- fsociety
- exploitation
- port-scanning
- fsociety-hacking
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
Automated Adversary Emulation Platform
- adversary-emulation
- caldera
- security-automation
- red-team
The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.
Dark Web OSINT Tool
- tor
- tor-network
- deepweb
- dark-web
PyInstaller Extractor
- python
- pyinstaller
- decompile
- reverse-engineering
A python script that finds endpoints in JavaScript files
- infosec
- endpoints
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
- python
- python3
- python-3
- authentication
Modern Honey Network
- hacktoberfest
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Modern(-ish) password hashing for your software and your servers
- python
ThePhish: an automated phishing email analysis tool
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
Generate smart and powerful wordlists
- wordlist
- password
- hacking-tool
- password-cracking
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
Autonomous pentest legion — AI commander + worker swarm + layered fact-intent graph. 3rd Tencent Intelligent Attack-Defense online champion (634 teams · 8h unattended · 1B tokens beat 4.5B). The Nüwa Test: give AIs Create/Language/History, let a civilization grow.
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
- anti-crawling
- cloud-native
- crawler
- deception
Script to create templates to use with VirtualBox to make vm detection harder
- virtualbox
- antivm
- sandbox
- malware-analysis