OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI
- openid-connect
- admin-ui
- iam
- openid
Repository Index
47,133 repositories indexed
337–360 of 695 · Most stars
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
RSA public/private key generation, RSA, AES encryption/decryption, RSA sign/verify in Swift with CommonCrypto in iOS and OS X
- ios
- crypt
- swift
- rsa
ObjectivePGP is an open-source library for iOS and macOS that provides developers with tools for implementing OpenPGP encryption and decryption, digital signing, and signature verification in their applications, thereby enhancing security and data integrity.
- openpgp
- objective-c
- encryption
- pgp
RegRipper3.0
Fast and dependency-free cryptographic hashing library for node.js and browsers (supports MD5, SHA1, SHA256, SHA512, RIPEMD, HMAC)
- hashing-algorithm
- javascript
- hmac
- hexadecimal
Malicious HTTP traffic explorer
MIRACL Cryptographic SDK: Multiprecision Integer and Rational Arithmetic Cryptographic Library is a C software library that is widely regarded by developers as the gold standard open source SDK for elliptic curve cryptography (ECC).
OpenXPKI Code
- pki
- enterprise-software
- workflow-based
- x509
Security Auditor Utility for GraphQL APIs
TranslatedFull-Chain Sentinel (全链哨兵, "full-chain sentinel") is a cybersecurity Agent that integrates web penetration testing, Android app security testing, iOS app security testing, batch target probing for offensive and defensive operations, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.
- agent
- blue-team
- cybersecurity
- cybersecurity-tools
Scalpel is an open source data carving tool. It is not being actively maintained.
Safe, simple and fast JSON Web Tokens for Go
- jwt
- jwt-token
- jwt-claims
- dependency-free
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
- clamscan
- file-scanner
- virus-scan
- docker-compose
Galah: An LLM-powered web honeypot.
A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
OpenID Connect Library for Rust
- oauth2-client
- oauth2-authentication
- openid-connect
- openid-client
GUI frontend to John the Ripper password cracker
Codesign Electron macOS apps
- electron-osx-sign
- macos
- entitlements
- provisioning-profiles
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
- ai
- attack-surface-management
- bbot
- cybersecurity
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️