Repository Index

Cloud native secrets management for developers - never leave your command line for secrets.

• secrets
• secret-management
• vault
• hashicorp

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

• cloudflare
• pentest-tool
• pentest
• censys

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.

• ssl
• tls
• cryptography
• security

Th3Inspector 🕵️ Best Tool For Information Gathering 🔎

• information-gathering
• reverse-phone-lookup
• mx-lookup
• whois-lookup

A secure low code deception runtime framework, leveraging AI for System Virtualization.

• cybersecurity
• security
• honeypot
• framework

A little utility for managing credentials in the cloud

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

• aws
• cloud
• security
• big-data

Automated Red Team Infrastructure deployement using Docker

• offensive
• pentest
• bugbounty
• hacking

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

• openam
• sso
• oauth
• saml

Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.

• anti-crawling
• cloud-native
• crawler
• deception

Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes

• oauth2
• openid
• openid-connect
• oidc

OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI

• openid-connect
• admin-ui
• iam
• openid

:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

• security
• dfir
• forensics

Automated Attack Simulation in the Cloud, complete with detection use cases.

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

• blue-team
• detection-engineering
• edr
• endpoint-detection

Zero Infrastructure Password Cracking

• cloudtopolis
• cracking
• hashes
• cloud

Elixir package for Oauth authentication via Google Cloud APIs

• gcp
• google
• authentication
• google-cloud-platform

inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques

• forensics
• hypervisor
• memory-dump
• reverse-engineering

Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy

• browser-fingerprinting
• cloudflare-workers
• dns-leak
• network-tools

:vertical_traffic_light: Block malicious crawlers with Cloudflare Firewall Rules

• cloudflare
• firewall
• user-agent
• firewall-rules

Read-only, local-first cloud security scanner for AWS, Azure and GCP. Your scan data stays on your machine.

• aws
• azure
• gcp

Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts

• haveibeenpwned
• cloudflare
• zxcvbn
• serverless

Hush is a runtime configuration loader for Elixir applications

• elixir
• aws
• hush
• secret-management

Add a layer of active defense to your cloud applications.

• cybersecurity
• deception
• decoy
• honeytoken