A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
- authorization
- permissions
- security
- zanzibar
Repository Index
71,372 visible repositories in the index
169–192 of 1,194 · Most stars
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
The Minimalistic x86/x64 API Hooking Library for Windows
:key: stateless open source password manager
- lesspass
- password-manager
- password
- passwords
An automated e-mail OSINT tool
Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
Fluxion is a remake of linset by vk496 with enhanced functionality.
- fluxion
- handshake
- linset
- fakeap
JPEXS Free Flash Decompiler (FFDec) is open-source Flash SWF decompiler and editor. Extract and edit ActionScript, images, sounds, shapes, fonts, and other SWF resources.
- flash
- swf
- decompiler
- editor
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
- access-control
- authorization
- rbac
- rebac
:mailbox_with_mail: Simple, private file sharing. Mirror of https://gitlab.com/timvisee/send
- firefox-send
- file-sharing
- file-upload
- encryption
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
- kubernetes
- vulnerable-app
- security
- hacking
Automated Αll-in-One OS command injection exploitation tool.
- python
- command-injection
- detection
- exploitation
a secure dotenv—from the creator of `dotenv`
- dotenv
- env
- dotenvx
- environment-variables
A lightweight, secure, and feature-rich Discord terminal (TUI) client.
- go
- discord
- golang
- discordo
A professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for browser-based intelligence gathering, hardware fingerprinting, and security research.
- browser-security
- cybersecurity
- de-anonymization
- ethical-hacking
Automate SSL/TLS certificates on Windows with ease
- acme
- certificates
- windows
- iis
UEFI firmware image viewer and editor
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
- phishing
- typosquatting
- domains
- dns
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
- python
- penetration-testing
- penetration-testing-framework
- owasp
Github.com/CryptoSignal - Trading & Technical Analysis Bot - 4,100+ stars, 1,100+ forks
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
- reverse-engineering
- malware-analysis
- binary-analysis
- parser
comment engine
- commenting
- comment-system
- self-hosted
- commenting-engines
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
- osint
- osint-tool
- python
- osint-tools
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
- http2
- command-and-control
- c2
- golang