The ultimate WinRM shell for hacking/pentesting
Repository Index
57,138 visible repositories in the index
97–120 of 397 · Most stars
Kanidm: A simple, secure, and fast identity management platform
- identity
- identity-management
- idm
- rust
Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)
- authorization
- policy-as-code
- policy
- realtime
A small PHP library to generate YouTube-like ids from numbers. Use it when you don't want to expose your database ids to the user.
- php
- hashids
- database-ids
- php-library
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
Adversary simulation and Red teaming platform with AI
- metasploit-framework
- post-exploitation
- redteam
- cobalt-strike
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
- crypto
- cryptography
- x509
- message-digest
Open Source Cloud Native Application Protection Platform (CNAPP)
- cloud-native
- vulnerability-management
- threat-analysis
- devsecops
Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
- python3
- machine-learning
- face-recognition
- social-media
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.
- golang
- package-inventory
- supply-chain-security
Tool for partial deblobbing of Intel ME/TXE firmware images
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- hids
- security
- pci-dss
- nist800-53
Cairn is a general-purpose AI state-space search engine, validated first on autonomous penetration testing. Sometimes misspelled as Carin.
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
- case-management
- cyber-security
- endpoint-security
- information-security
AI-safe .env files: Schemas for agents, Secrets for humans.
- configuration
- dotenv
- env
- env-vars
This repository contains the scanner component for Greenbone Community Edition.
- openvas
- vulnerability
- vulnerability-scanners
- vulnerability-detection
Execution rails for agents. Equip your AI to work with sensitive enterprise systems. Give agents precise permissions and custom tools that work faster with fewer tokens.
IntelOwl: manage your Threat Intelligence at scale
- security-tools
- python
- threat-intelligence
- ioc
An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified endpoint with centralized discovery, guardrails and management. Optimizes Agent & Tool calling, and supports plugins.
- agents
- ai
- api-gateway
- asyncio
The first AI agent that builds permissionless integrations through reverse engineering platforms' internal APIs.
Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor with syntax highlighting support for *.smali code files.
- android
- reverse-engineering
- smali
- apk-studio
Enterprise-grade Shopify Admin API authentication adapter — OAuth 2.0 Client Credentials Grant with automatic token refresh.
- authentication
- client-credentials
- httpx
- oauth2
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.