CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
An JWT based API for managing users and issuing JWT tokens.
Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management
P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
A simple ruby authentication solution.
A JSON Web Token authentication plugin for the Django REST Framework.
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
- malware
- deobfuscation
- strings
- flare
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
企业级的 Go 语言实战项目:认证和授权系统(带配套课程)
Your web application for managing personal data.
- dashboard
- dashboards
- manager
- symfony
OAuth Proxy
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
Microsoft Authentication Library (MSAL) for JS
ipsets dynamically updated with firehol's update-ipsets.sh script
- blocklists
- ipset
- ipset-lists
- attacks
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
Easy integration with OAuth 2.0 service providers.
Advanced vulnerability scanning with Nmap NSE
Optimized bcrypt in JavaScript with zero dependencies, with TypeScript support.
Application Security Verification Standard
Rails authentication with email & password.
- clearance
- ruby
- thoughtbot
- rails