Tool to scan for secret files on HTTP servers
- security
- websecurity
Repository Index
47,133 repositories indexed
337–360 of 1,231 · Most stars
:lock: acmetool, an automatic certificate acquisition tool for ACME (Let's Encrypt)
- acmetool
- certificate
- acme-server
- acme
Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
Go package captcha implements generation and verification of image and audio CAPTCHAs.
- captcha
- image-captcha
- go
- audio-captchas
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
- malloc
- security
- memory-allocation
- malloc-library
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
- security-vulnerabilities
- security
- vulnerabilities
- lighthouse
Your Everyday Threat Intelligence
- infosec
- threatintel
- threat-sharing
- threat-hunting
A helm plugin that help manage secrets with Git workflow and store them anywhere
- helm
- helm-plugin
- helm-plugins
- kubernetes
Indicators of Compromises (IOC) of our various investigations
- ioc
- malware
- yara
- misp
The most complete open-source tool for Twitter intelligence analysis
Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications
- oidc
- oidc-client
- typescript
Go login handlers for authentication providers (OAuth1, OAuth2)
Ruby's Most Advanced Authentication Framework
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
Golang OAuth2 server library
pwning IPv4 via IPv6
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
- jwt
- htpasswd
- service
- golang
Port of TweetNaCl cryptographic library to JavaScript
- crypto
- javascript
- authentication
- signature
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
A library for implementing authentication/authorization in Ember.js applications.
The new bridge between Burp Suite and Frida!