Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
Repository Index
47,133 repositories indexed
313–336 of 421 · Most stars
Integrates Spiffe and Vault to have secretless authentication
- spire
- spiffe
- vault
- hashicorp
Rule based authorization for Elixir
🦅 EACL: Enterprise Access ControL is a ReBAC Authorization library inspired by SpiceDB, built in Clojure and backed by Datomic Pro, Datahike, Datalevin or DataScript.
- access-control
- clojure
- datalog
- authorization
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
A honeypot for the Log4Shell vulnerability (CVE-2021-44228).
A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.
Delphi basic library for validation and authentication of LDAP users in Active Directory.
- activedirectory
- delphi
- adsi
- ldap
Blazor.BFF.AzureAD.Template, Blazor WASM hosted in ASP.NET Core using Microsoft Entra ID BFF (server authentication)
- blazor
- aad
- azuread
- template
:camera: Instagram API client for the Elixir language (elixir-lang)
- elixir
- instagram-client
- oauth
Vulnerable Web applications Generator
- vulnerabilities
- docker
- python
- generator
Middleware based authorization for Absinthe GraphQL powered by Bodyguard
analyze a web-based network traffic 🕶 to detect central command and control servers
- squid
- network-traffic
- proxy-server
- incident-response
Declarative Prisma Authorization layer
A dead simple, highly performant, highly customizable sessions middleware for go http servers.
A docker container to simplify and secure the use of Infrastructure as Code (IaC)
AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.
- ai-agents
- document-processing
- dspy
- entity-extraction
Package passwap provides a unified implementation between different password hashing algorithms. It allows for easy swapping between algorithms, using the same API for all of them.
- argon2
- bcrypt
- go
- hashing
PSR7 Middleware for authorization
Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.
🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.
Framework agnostic set of sqlalchemy classes that make building applications that require permissions an easy task.
- python
- pyramid
- flask
- sqlalchemy
Paper vault for passwords and secrets
- cryptocurrency
- cryptography
- cybersecurity
- digital-asset-security
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents