A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
Repository Index
47,133 repositories indexed
385–408 of 1,637 · Most stars
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
- vulnerabilities
- scanner
- firefox-extension
- grunt-plugins
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
- bro
- scans
- nmap
- network
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
Valet lets you securely store data in the iOS, tvOS, watchOS, or macOS Keychain without knowing a thing about how the Keychain works. It’s easy. We promise.
- keychain
- touch-id
- face-id
- security
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
- nextjs
- authentication
- session
- stateless
UNIX-like reverse engineering framework and command-line toolset.
- reverse-engineering
- program-analysis
- security
- exploitation
An experiment.
A curated list of awesome responsible machine learning resources.
- fairness
- xai
- interpretability
- transparency
A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
Fast, secure image processing server and Go library, using libvips
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
- coraza
- waf
- coraza-waf
- owasp-crs
An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.
- containers
- container-runtimes
- container-runtime-security
- docker
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
- cryptography
- steganography
- compression
- functional-programming
💚🇺🇸🗽Secure remote browsing anywhere, any way you like it. Since 2018.
- embeddable
- chrome
- cobrowsing
- proxy-server
An step by step fuzzing tutorial. A GitHub Security Lab initiative
Recursive Mono & Sans is a variable font family for code & UI
- font
- variable-font
- type-design
- fonttools
Cloud Security Posture Management (CSPM)
The first UI framework for the agentic era — tiny, performant, with WASM sandboxes for safe code execution.
- declarative
- reactive
- rendering
- ui
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
Library for OpenAPI 3 with spring-boot
- openapi3
- spring-boot
- springdoc-openapi
- swagger-ui
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
Deprecated in favour of Video.js 10; security fixes only until January 2028. UI components and hooks for building video and audio players on the web.
- player
- web-components
- html
- javascript
A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
- cli
- encryption
- zero-configuration
- secure-by-default