game of active directory
- active-directory
- infrastructure-as-code
- pentest
- ansible
Repository Index
60,121 visible repositories in the index
97–120 of 799 · Most stars
TranslatedA public-network tool for software and hardware routers: ipv6/ipv4 port forwarding, reverse proxy, DDNS, WOL, ipv4 stun intranet penetration, cron, acme, rclone, ftp, webdav, filebrowser
- ddns
- ipv6
- socat
- stun
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
The open-source, privacy-friendly CAPTCHA you host yourself. Bots and AI agents out, people in.
- captcha
- javascript
- proof-of-work
- antispam
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]
- penetration-testing
- red-teaming
- windows
- fireeye-flare
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
- security-audit
- build-tool
- maven-plugin
- jenkins-plugin
A guide to smart contract security best practices
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
- ai-security
- alert-triage
- cybersecurity
- detection-engineering
🚀🎉📚 SaaS Boilerplate built with Next.js + Tailwind CSS + Shadcn UI + TypeScript. ⚡️ Full-stack React application with Auth, Multi-tenancy, Roles & Permissions, i18n, Landing Page, DB, Logging, Testing
- authentication
- boilerplate
- multi-tenancy
- nextjs
A simple library to work with JSON Web Token and JSON Web Signature
- php
- jwt
- tokens
- hacktoberfest
BleachBit system cleaner for Windows and Linux
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- zanzibar
- permissions
- database
- distributed-systems
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
- gtfobins
- exploit
- privesc
- privilege-escalation
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
- authorization
- permissions
- acl
- cancan
The all-in-one browser extension for offensive security professionals 🛠
- reverse-shell
- hacking
- hack-tools
- chrome-extension
autonomous red teaming platform; multi-agent offensive-security meta-harness
- agents
- ai
- multi-agent
- offensive-security
The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.
- authentication
- nextjs
- oauth
- auth0
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
- security
- ids
- ips
- nsm
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
- devops
- penetration-testing
- vulnerability
- vulnerability-scanners
:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens
A tiny (18.5 kB gzip), zero-dependency, Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
Golang gRPC Middlewares: interceptor chaining, auth, logging, retries and more.
- grpc
- golang
- middleware
- generic-functions
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.