▦ Universal, standards-based auth provider.
Repository Index
72,862 visible repositories in the index
25–48 of 303 · Most stars
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
- ai
- bug-detection
- code-audit
- code-quality
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- zanzibar
- permissions
- database
- distributed-systems
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
- anti-analysis
- anti-debugging
- anti-sandbox
- anti-vm
An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.
- authentication
- nextjs
- oauth
- auth0
↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.
- oauth2
- spring-boot
- spring-cloud
- spring-cloud-alibaba
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
Full-featured Social Engineering Framework with Page Cloning, MITM Proxy, Credential Capture, Session Extraction, and Real-time Monitoring.
- hack
- hacking-tool
- social-engineering
- social-engineering-attacks
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
- exploit
- 0day
- poc
- getshell
Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.
- go
- uuid
Role-based Permissions for Laravel 5
A lightweight, secure, and feature-rich Discord terminal (TUI) client.
- go
- discord
- golang
- discordo
A professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for browser-based intelligence gathering, hardware fingerprinting, and security research.
- browser-security
- cybersecurity
- de-anonymization
- ethical-hacking
Automate SSL/TLS certificates on Windows with ease
- acme
- certificates
- windows
- iis
An ACME-based certificate authority, written in Go.
- boulder
- go
- acme
- certificate-authority
Github.com/CryptoSignal - Trading & Technical Analysis Bot - 4,100+ stars, 1,100+ forks
A small PHP library to generate YouTube-like ids from numbers. Use it when you don't want to expose your database ids to the user.
- php
- hashids
- database-ids
- php-library
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
- crypto
- cryptography
- x509
- message-digest
🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL unpinning for all apps.
- frida
- android
- xposed
- apk
TranslatedA knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.
- poc
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.
eBPF-based Security Observability and Runtime Enforcement