Awesome Django authorization, without the database
- python
- django
- permissions
- rules
47,133 repositories indexed
457–480 of 1,786 · Most stars
Awesome Django authorization, without the database
MongoDB session store for Express
OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications
Go login handlers for authentication providers (OAuth1, OAuth2)
Ruby's Most Advanced Authentication Framework
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
pwning IPv4 via IPv6
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
Port of TweetNaCl cryptographic library to JavaScript
Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
The new bridge between Burp Suite and Frida!
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
The Offensive Manual Web Application Penetration Testing Framework.
Analyze the security of any domain by finding all the information possible. Made in python.
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
NIST Certified SCAP 1.2 toolkit
Hashtopolis - distributed password cracking with Hashcat
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
Rip web accessible (distributed) version control systems: SVN/GIT/HG...
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.