🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
- nextjs
- authentication
- session
- stateless
Repository Index
47,133 repositories indexed
25–48 of 119 · Most stars
LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
- php
- blade
- laravel
- self-hosted
OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js
- openid
- oidc
- openid-provider
- openid-connect
Nginx webserver and reverse proxy with php support and a built-in Certbot (Let's Encrypt) client. It also contains fail2ban for intrusion prevention.
- hacktoberfest
🛡 A GraphQL tool to ease the creation of permission layer.
- graphql
- permissions
- server
- shield
Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.
- argon2id
- blazor
- dotnet
- password-manager
Chrome extension and Express server that exploits keylogging abilities of CSS.
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
Entity Framework Core Power Tools - reverse engineering, migrations and model visualization in Visual Studio & CLI
- entity-framework-core
- visual-studio
- entity-framework
- model-visualization
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
An OAuth 2.0 bridge for Laravel and Lumen [DEPRECATED FOR LARAVEL 5.3+]
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
- adversarial-ai
- claude-code
- cursor
- electron-security
Tool to scan for secret files on HTTP servers
- security
- websecurity
:lock: acmetool, an automatic certificate acquisition tool for ACME (Let's Encrypt)
- acmetool
- certificate
- acme-server
- acme
Golang OAuth2 server library
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
- jwt
- htpasswd
- service
- golang
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
Hashtopolis - distributed password cracking with Hashcat
- cracking
- distributed
- hashcat
- pentesting
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
A network sniffer that logs all DNS server replies for use in a passive DNS setup
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
self-hosted tag-based time tracking
- golang
- selfhosted
- freesoftware
- privacy
Fake Protocol Server