OAuth 2.x and OpenID Connect C library
Repository Index
47,133 repositories indexed
265–288 of 334 · Most stars
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Detect hidden files and text in images
- steganography
- ctf
- stego
- capture-the-flag
Security library for Vert.x: OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Ziti SDK for Golang
- golang
- networking
- sdk
- zero-trust
Open-source agentic security operations platform:
- agentic-security
- cyber-security
- cyber-threat-intelligence
- cybersecurity
Writeups of Capture The Flag Competitions
- ctf
- picoctf
- writeups
- glug
A flexible playground for Android CTF challenges.
- android
- ctf
- cybersecurity
- playground
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
- authentication
- authorization
- identity-management
- oauth2
TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)
Git manager for pentesters
Open Source Telnet Honeypot
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.
The repository host gives no description.
Library for working with OpenID Connect and implementing clients.
A whole bunch of public pentest reports & papers
Repo for the Open Source version of NOVA
brute force SSH public-key authentication
- ssh
- penetration-testing
- remote-admin-tool
- ssh-key
Welcome to HackTheArch! A free open source scoring server for cyber Capture the Flag competitions!
- ctf-scoreboard
- ctf-framework
- ctf-platform
- ctf-events
DEPRECATED, Nozzlr is a bruteforce framework, trully modular and script-friendly
- pentesting
- bruteforce
- python
- infosec
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
- golang
- go
- supply-chain
- security