Bitwarden infrastructure/backend (API, database, Docker, etc).
- aspnetcore
- aspnet
- sql-server
- api
Repository Index
55,140 visible repositories in the index
25–48 of 795 · Most stars
Loads environment variables from .env for nodejs projects.
- dotenv
- environment-variables
- javascript
- node
Daemon to ban hosts that cause multiple authentication errors
Collection of malware source code for a variety of platforms in an array of different programming languages.
- malware
- malware-research
- malware-development
- malware-detection
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
- security
- compliance
- log-analysis
- vulnerability-detection
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
- hydra
- oauth2
- openid-connect
- docker
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
A powerful obfuscator for JavaScript and Node.js
- javascript-obfuscator
- obfuscation
- uglify
- javascript
A 100% free modern JS SaaS boilerplate (React, NodeJS, Prisma). Full-featured: Auth (email, google, github, slack, MS), Email sending, Background jobs, Landing page, Payments (Stripe, Polar.sh), Shadcn UI, S3 file upload. AI-ready with tailored AGENTS.md, skills, and Claude Code plugin. One cmd deploy. Powered by Wasp full-stack framework.
- full-stack
- open-source
- saas
- nodejs
The ZAP by Checkmarx Core project
- zap
- zap-development
- dast
- appsec
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
Connect your users to their apps
holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
- information-gathering
- osint
- osint-tools
- open-source-intelligence
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
- osint
- osint-python
- python3
ZITADEL - Identity infrastructure, simplified for you.
- saml
- authentication
- authorization
- login
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Most advanced XSS scanner.
- xss
- xss-scanner
- xss-exploit
- xss-bruteforce
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
- authentication
- authorization
- identity
- openid-connect
Fast passive subdomain enumeration tool.
- subdomain-enumeration
- osint
- subdomains
- bugbounty
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
- owasp
- javascript
- vulnerable
- hacking
Directory/File, DNS and VHost busting tool written in Go
- go
- pentesting
- tool
- dns
Bitwarden client apps (web, browser extension, desktop, and cli).
- webextension
- javascript
- bitwarden
- typescript
A modern, portable, easy to use crypto library.
- crypto
- cryptography
- c
- zig-package