Open source alternative to Auth0 / Firebase Auth / AWS Cognito
- authentication
- session-management
- login
- supertokens
Repository Index
77,852 visible repositories in the index
73–96 of 1,662 · Most stars
Most advanced XSS scanner.
- xss
- xss-scanner
- xss-exploit
- xss-bruteforce
Web path scanner
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
- authentication
- authorization
- identity
- openid-connect
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
Fast passive subdomain enumeration tool.
- subdomain-enumeration
- osint
- subdomains
- bugbounty
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
- owasp
- javascript
- vulnerable
- hacking
Damn Vulnerable Web Application (DVWA)
- dvwa
- php
- sql-injection
- security
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
- identity
- identity-management
- user-management
- users
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Incredibly fast crawler designed for OSINT.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- nuclei-templates
- nuclei
- bugbounty
- security
Exploitation Framework for Embedded Devices
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
Small and highly portable detection tests based on MITRE's ATT&CK.
- mitre
- mitre-attack
Scapy: the Python-based interactive packet manipulation program & library.
- scapy
- python
- network
- network-analysis
hydra
- penetration-testing
- password-cracker
- network-security
- hydra
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
- opa
- policy
- declarative
- json
fsociety Hacking Tools Pack – A Penetration Testing Framework
- fsociety
- exploitation
- port-scanning
- fsociety-hacking
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
- vuls
- vulnerability-scanners
- golang
- go
Adversary Emulation Framework
- security-tools
- implant
- golang
- dns-server
Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.
- google-api
- nodejs
- client