MongoDB session store for Express
Repository Index
47,133 repositories indexed
433–456 of 1,700 · Most stars
Go login handlers for authentication providers (OAuth1, OAuth2)
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
Golang OAuth2 server library
pwning IPv4 via IPv6
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
- jwt
- htpasswd
- service
- golang
Port of TweetNaCl cryptographic library to JavaScript
- crypto
- javascript
- authentication
- signature
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
A library for implementing authentication/authorization in Ember.js applications.
The new bridge between Burp Suite and Frida!
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
- php
- access-control
- audit
- browser-extension
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
- ida-plugin
- taint-analysis
- reverse-engineering
- disassembly
An authentication system generator for Rails applications.
- rails
- ruby
- authentication
- generator
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
Analyze the security of any domain by finding all the information possible. Made in python.
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
NIST Certified SCAP 1.2 toolkit
- scap
- xccdf
- oval
- cpe
Hashtopolis - distributed password cracking with Hashcat
- cracking
- distributed
- hashcat
- pentesting
Phishing catcher using Certstream
- phishing
- threat-intelligence
- certificate-transparency
- osint
yarGen is a generator for YARA rules
- python
- yara
- malware
- malware-research
PHP Captcha library
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
- graphql
- security-scanner
- graphql-security
- api-documentation-tool
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
- libtomcrypt
- cryptography
- c
- encryption
Rip web accessible (distributed) version control systems: SVN/GIT/HG...