Repository Index

Modern(-ish) password hashing for your software and your servers

• python

An OpenID Connect reference implementation in Java on the Spring platform.

Secure Vault for Customer PII/PHI/PCI/KYC Records

• gdpr
• pii
• piidata
• security

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

• encryption-server
• encryption
• crypto
• cryptography

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

• security
• yara
• serverless
• terraform

HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.

• honeypot
• http
• web
• deception

A server side OAuth2 Bundle for Symfony

• php
• symfony
• symfony-bundle
• oauth2

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.

• golang
• http-server
• https-server
• ctf

🔐 A CLI tool to extract server certificates

• certificate
• ssl
• x509
• tls

ScopeWeaver: English and Korean localization of ARTEX, with preserved AGPL-3.0 attribution.

A KeePass-compatible password and secrets manager for people who work with AI agents.

• dotenv
• keepass
• mcp-server
• password-manager

Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.

• anti-crawling
• cloud-native
• crawler
• deception

OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI

• openid-connect
• admin-ui
• iam
• openid

A mostly-serverless distributed hash cracking platform

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

• dns
• dns-rebinding
• hacking
• malicious-domains

An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.

• golang-development
• vscode-devcontainers
• golang
• go

🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️

• apollo
• apollo-server
• graphql
• security

🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more

• tls
• ssl
• certificate
• keystore

The Ultimate Boilerplate for Products.

• boilerplate
• meteor
• meteorjs
• nodejs

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

• honeytoken
• honeypot
• security
• deception

OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance

• ldap-server
• ldap
• opendj
• rest

OpenID Connect Server & Client Library

• openid
• openid-connect

Python telnet honeypot for catching botnet binaries

• honeypot
• telnet-server
• malware
• botnet

A Rails 6 boilerplate to create your next Saas product. Preloaded with graphQL, devise, JWT, CanCanCan, RailsAdmin, Rubocop, Rspec, i18n and more.

• ruby-on-rails
• api-only
• rubyonrails
• saas-boilerplate