Repository Index

Dromara MaxKey 🗝️ SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。

• saml
• jwt
• cas
• rbac

Directory Services Internals (DSInternals) PowerShell Module and Framework

• security-audit
• penetration-testing
• active-directory
• nuget-packages

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.

• cryptography-library
• cryptography
• security
• golang

NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Redirects, leveraging advanced scanning and URL enumeration techniques

• nuclei
• nuclei-templates
• fuzzing-templates
• nucleifuzzer

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

• security
• owasp
• owtf
• python

Supply-chain Levels for Software Artifacts

• security
• supply-chain-security
• devops

The SpecterOps project management and reporting engine

• reporting
• penetration-testing
• red-team
• informationsecurity

ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server

• asn
• asn-lookup
• autonomous-systems
• ip-lookup

Ruby's Most Advanced Authentication Framework

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

• pentesting
• vulnerability-scanner
• exploitation

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

• pentesting
• redteam
• security-tools
• exploit

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

• anti-reversing
• import
• export
• windows

instahack is a bash & python based script which is officially made to test password strength of Instagram account from termux and kali with bruteforce attack and. it based on tor This tool works on both rooted Android device and Non-rooted Android device. Best Tool For Instagram Bruteforce hacking Tool By Waseem Akram.

• hacking-tool
• termux-hacking
• bruteforce-password-cracker
• worldlist

Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。

• payload
• security
• dictionary
• fuzz

JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..

• jwt
• htpasswd
• service
• golang

A simple python library to interact with Microsoft Graph and Office 365 API

• python
• microsoft-graph-api
• onedrive
• mailbox

hacking-tool termux-tools termux noob-friendly instagram-bot bruteforce-password-cracker wordlist-technique

• hacking
• tool
• hacking-tool
• termux

BBT - Bug Bounty Tools (examples💡)

Check if phone numbers are connected to Telegram accounts.

• command-line
• open-source-research
• phone-number
• python

OSINT Tool: Generate username lists for companies on LinkedIn

• hacking
• pentesting
• osint
• penetration-testing

Advanced Red Team techniques focused on Rust

• rust
• windows
• offensive-security
• redteam

:snowflake: PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction

• forensics
• pcap
• network
• python

Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.

• php
• access-control
• audit
• browser-extension

All in One Hacking Tool for Linux & Android (Termux). Make your linux environment into a Hacking Machine. Hackers are welcome in our blog

• python
• script
• linux
• termux