Authentication plugin for CakePHP. Can also be used in PSR7 based applications.
Repository Index
57,138 visible repositories in the index
697–720 of 965 · Most stars
Standardized multi-provider OAuth authentication
- oauth2
- omniauth
- multiauth
- crystal-lang
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
- authentication
- authorization
- identity-management
- oauth2
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
Read-only check for traces of the November 2026 NIKKE PC launcher compromise. Windows, Linux (Proton, Steam Deck) and macOS.
- iced
- incident-response
- indicators-of-compromise
- infostealer
HEhub is a library for homomorphic encryption and its applications, and is part of the PrimiHub project.
- bgv
- ckks
- cryptography
- fhe
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Add a layer of active defense to your cloud applications.
- cybersecurity
- deception
- decoy
- honeytoken
Collection of ssl verification functions for Erlang
OCaml cryptographic library
Sectiv is a skill-driven AI security review for Burp Suite. Pick captured traffic and a review goal (IDOR, XSS, SQLi, SSRF…), and get a severity dashboard with description, steps to reproduce, impact, PoC, CWE/CVE and HTML/MD/JSON export. Built with Kotlin + Swing on the Montoya API.
A library of cryptographic primitives (ciphers, hashes, etc) for OCaml
Process HTTP Pcaps With YARA
Deprecated repo for PANDA 1.0 – see PANDA 2.0 repository
This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.
- car-hacking
- automotive-security
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
DEPRECATED - Phoenix Authentication library that wraps Guardian for extra functionality
- elixir
- phoenix-framework
- guardian
- authentication
Reverse proxy with automatically obtains TLS certificates from Let's Encrypt
High-interaction Honeypot for PLCs and Industrial Control Systems
A library designed to generate cryptographically strong random numbers suitable for managing data such as passwords, account authentication, security tokens, and related secrets.
Integrates Spiffe and Vault to have secretless authentication
- spire
- spiffe
- vault
- hashicorp
Web interface to explore Suricata EVE outputs
- attack-defense-ctf
- ctf
- network-monitor
- suricata