General Rack Authentication Framework
Repository Index
75,859 visible repositories in the index
481–504 of 1,263 · Most stars
Search and browse documents and data; find the people and companies you look for.
- python
- data-search
- graph-database
- journalism
SSRF (Server Side Request Forgery) testing resources
OAuth 2.0 social authentication providers for ASP.NET Core
- aspnetcore
- oauth2
- social-authentication
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
A HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
A Go OpenID Connect client.
- golang
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.
- sudo-exploitation
- abuse-sudo
- ctf
- exploits
Provides a tight integration of the Security component into the Symfony full-stack framework
ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.
- vulnerability-assessment
- vulnerabilities
- scanning
- pentesting
gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
- security-tools
- monitor
- bugbounty
- security-automation
A simple keylogger for Windows, Linux and Mac
Conference presentation slides
- blackhat
- cybersecurity
- cybersecurity-conference
- offensivecon
OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
- oidc
- openid
- openid-client
- openid-connect
Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
- bugbounty
- subdomain-enumeration
- scanner
- enumeration
Complete implementation of JWx (Javascript Object Signing and Encryption/JOSE) technologies for Go. #golang #jwt #jws #jwk #jwe
- jwt
- jwe
- jws
- jwk
Offline FairPlay App Store IPA decryption with independent key derivation
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
- ai-agents
- ai-security
- bug-bounty
- claude-code
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
- pe-sieve
- anti-malware
- malware-analysis
- malware-detection
Reconstruct and validate C/C++ code from compiled programs with AI.
- ai-agent
- autonomous-agent
- binary-analysis
- c-plus-plus
Social networking platform with automated content moderation and context-based authentication system
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.
- ai
- bug-bounty
- bugbounty-tools
- security-research
An evil RAT (Remote Administration Tool) for macOS / OS X.
- rat
- reverse-shell
- macos
- macosx