Easy integration with OAuth 2.0 service providers.
- php
- oauth2
- oauth
- authorization
Repository Index
74,860 visible repositories in the index
313–336 of 1,237 · Most stars
Arsenal is just a quick inventory and launcher for hacking programs
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
- endpoints
- endpoint-discovery
- bugbounty
- crawler
Python APNs and iMessage client
- imessage
- proof-of-concept
- reverse-engineering
Advanced vulnerability scanning with Nmap NSE
- vulnerability
- vulnerability-scanners
- vulnerability-detection
- vulnerability-identification
Optimized bcrypt in JavaScript with zero dependencies, with TypeScript support.
- javascript
- bcrypt
- authentication
Cloud Security Posture Management (CSPM)
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
EMBA - The firmware security analyzer
- firmware
- linux
- embedded-linux
- security-tools
Nginx webserver and reverse proxy with php support and a built-in Certbot (Let's Encrypt) client. It also contains fail2ban for intrusion prevention.
- hacktoberfest
Database documentation built easy
- schemaspy
- java
- documentation
- database
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
Rails authentication with email & password.
- clearance
- ruby
- thoughtbot
- rails
Automation for internal Windows Penetrationtest / AD-Security
- pentesting
- automation
- adsecurity
- privilege-escalation
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
- agent-skills
- claude-code-skills
- ctf
- security
A ruby implementation of the RFC 7519 OAuth JSON Web Token (JWT) standard.
- jwt
- ruby-jwt
- oauth-json-web
- ruby
Flask user session management.
- authentication
- login-system
- session-management
Tool to find metadata and hidden information in the documents.
A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
- dns
- dns-resolver
- dns-resolution
- dns-bruteforcer
Automatic SSRF fuzzer and exploitation tool
- ssrf
- server-side-request-forgery
- exploitation
- vulnerability
Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
AllinSSL 是一个集证书申请、管理、部署和监控于一体的SSL证书全生命周期管理工具。AllinSSL is an all-in-one SSL certificate lifecycle management tool that integrates certificate application, management, deployment, and monitoring.
- acme
- go
- ssl
- ssl-certificates
OAuth 2.0 server library for the Go programming language.
- oauth2
- oauth2-server
- go-oauth2
- go-oauth2-server
A fast sub domain brute tool for pentesters