47,133 repositories indexed
49–72 of 489 · Most stars
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
CTF framework and exploit development library
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Exploitation Framework for Embedded Devices
A vulnerability scanner for container images and filesystems
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
Small and highly portable detection tests based on MITRE's ATT&CK.
hydra
fsociety Hacking Tools Pack – A Penetration Testing Framework
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
Adversary Emulation Framework
Program for determining types of files for Windows, Linux and MacOS.
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
Java JWT: JSON Web Token for Java and Android
The recursive internet scanner for hackers. 🧡
Firefox user.js for optimal privacy and security. Your favorite browser, but better.
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
Cloud Native Runtime Security