47,133 repositories indexed
289–312 of 1,115 · Most stars
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
Your Everyday Threat Intelligence
A helm plugin that help manage secrets with Git workflow and store them anywhere
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
A One Time Password Authentication package, compatible with Google Authenticator.
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
The most complete open-source tool for Twitter intelligence analysis
Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
Support for OAuth 2 and OpenId Connect (OIDC) in Angular.
Awesome Django authorization, without the database
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
A library for implementing authentication/authorization in Ember.js applications.
The new bridge between Burp Suite and Frida!
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
An authentication system generator for Rails applications.
The Offensive Manual Web Application Penetration Testing Framework.
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
Hashtopolis - distributed password cracking with Hashcat
Phishing catcher using Certstream
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
Rip web accessible (distributed) version control systems: SVN/GIT/HG...