The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
Repository Index
80,339 visible repositories in the index
217–240 of 665 · Most stars
Tools to bootstrap CAs, certificate requests, and signed certificates.
An NFC research toolkit application for Android
- nfc
- android-nfc
- security
- security-audit
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
- ai-agents
- ai-security
- bug-bounty
- claude-code
Social networking platform with automated content moderation and context-based authentication system
This app makes it extremely easy to build Django powered SPA's (Single Page App) or Mobile apps exposing all registration and authentication related functionality as CBV's (Class Base View) and REST (JSON)
- authentication
- rest
- social-login
- django
Minimal forward authentication service that provides Google/OpenID oauth based login and authentication for the traefik reverse proxy
The Swiss Army knife for automated Web Application Testing
- golang
- hacking
- bugbounty
- jaeles
OAuth client integration for Symfony. Supports both OAuth1.0a and OAuth2.
A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.
- authentication
- automatic
- call
- coerce
SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
- bash
- exploitation
- exploitation-tool
- hacking
Laravel Impersonate is a plugin that allows you to authenticate as your users.
- laravel-package
- impersonate
- php
- user-management
PHP class to generate and verify Google Authenticator 2-factor authentication
Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic
- android
- frida
- certificate
- interception
Automatically brute force all services running on a target.
- brute-force
- bruteforce
- bruteforcing
- bruteforce-attacks
One Time Password (OTP) / 2FA for Node.js and Browser - Supports HOTP, TOTP and Google Authenticator
- hotp
- hmac
- otp
- authenticator
SpringBoot single sign-on authentication and authorization, implemented with OAuth 2.0, supporting cross-domain and distributed deployment.
- sso
- authentication
- authorization
- java
Magical authentication for Rails 3 & 4
- ruby
- rails
- authentication
Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.
- bypass-cloudflare
- bypass-hostname
- bypass-waf
- dnssec
FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐
Handle roles and permissions in your Laravel application
- laratrust
- laravel
- roles
- authorization
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
- enterprise-software
- saml
- saml2
- saml-service-provider
Binary Analysis Platform
- binary-analysis
- reverse-engineering
- program-analysis
- static-analysis