OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
Small package to allow adding security headers to ASP.NET Core websites
A KeePass-compatible password and secrets manager for people who work with AI agents.
One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser
Simple Bash IOC Scanner
C++23 procedure hooking library.
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
Usable, easy and safe pure-Rust crypto
Safe, simple and fast JSON Web Tokens for Go
- jwt
- jwt-token
- jwt-claims
- dependency-free
List DTDs and generate XXE payloads using those local DTDs.
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
Documenting the unofficial and internal Steam Web API
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
:white_check_mark: .NET crypto done right. Professionally audited.
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
Users Plugin for CakePHP
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
Super Next generation Advanced Reactive honEypot
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
- owasp
- ctf
- ctfd
- application-security