Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
- http2
- command-and-control
- c2
- golang
Repository Index
58,632 visible repositories in the index
409–432 of 2,381 · Most stars
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
- osint
- osint-tool
- python
- osint-tools
Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal
- https
- acme
- letsencrypt
- golang
PHP Secure Communications Library
The ultimate WinRM shell for hacking/pentesting
Bloaty: a size profiler for binaries
Kanidm: A simple, secure, and fast identity management platform
- identity
- identity-management
- idm
- rust
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
- doorkeeper
- oauth
- oauth2-provider
- oauth2-server
free C++ class library of cryptographic schemes
- cryptography
- crypto
- c-plus-plus
Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)
- authorization
- policy-as-code
- policy
- realtime
Windows memory hacking library
Dshell is a network forensic analysis framework.
The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.
The full stack toolkit to build onchain app UX
- walletconnect
- plugin
- widget
- ethereum
Simple OAuth library for Java
Blazingly 🔥 fast 🚀 memory vulnerabilities, written in 100% safe Rust. 🦀
Modlishka. Reverse Proxy.
- penetration-testing-tools
- mitm
- reverse-proxy
- security-tools
AIMSICD • Fight IMSI-Catcher, StingRay and silent SMS!
TranslatedPrivilege escalation code embedded in the Pinduoduo apk, and analysis of dynamically delivered dex
- pdd
A small PHP library to generate YouTube-like ids from numbers. Use it when you don't want to expose your database ids to the user.
- php
- hashids
- database-ids
- php-library
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
The password hash Argon2, winner of PHC
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
- aws-security
- penetration-testing
- aws
- security
Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email