A vault for securely storing and accessing AWS credentials in development environments
- aws
- iam
- temporary-credentials
- keychain
Repository Index
47,133 repositories indexed
49–72 of 422 · Most stars
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
- self-hosted
- self-hosting
- pastebin
- security
Sandbox for developing and testing UI components in isolation
Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
- javascript
- mithril
- encryption
Multi-Cloud Security Auditing Tool
Automated ACME SSL certificate generation for nginx-proxy
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- zanzibar
- permissions
- database
- distributed-systems
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
- authorization
- permissions
- acl
- cancan
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
Scanning APK file for URIs, endpoints & secrets.
- mobile-security
- android-security
- reverse-engineering
- bugbounty
An agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its work. Works with Claude Code, Codex, Cursor, Gemini CLI, OpenCode and GitHub Copilot.
- claude-code
- geoguessr
- geolocation
- osint
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
- authorization
- permissions
- security
- zanzibar
Sysmon configuration file template with default high-quality event tracing
- sysmon
- threatintel
- threat-hunting
- sysinternals
comment engine
- commenting
- comment-system
- self-hosted
- commenting-engines
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
- reverse-engineering
- malware-analysis
- binary-analysis
- parser
Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal
- https
- acme
- letsencrypt
- golang
PHP Secure Communications Library
The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
Cameradar hacks its way into RTSP videosurveillance cameras
Dark Web OSINT Tool
- tor
- tor-network
- deepweb
- dark-web
Split your file into encrypted fragments so that you don't need to remember a passcode
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets