SearXNG is a free internet metasearch engine which aggregates results from various search services and databases. Users are neither tracked nor profiled.
- metasearch
- search
- python
- searxng
Repository Index
72,862 visible repositories in the index
1–24 of 303 · Most stars
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- cve-scanner
- subdomain-takeover
- nuclei-engine
- vulnerability-detection
Main repo for hosting release binaries
- frida
- instrumentation
- vala
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
Bitwarden infrastructure/backend (API, database, Docker, etc).
- aspnetcore
- aspnet
- sql-server
- api
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
- hydra
- oauth2
- openid-connect
- docker
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Open source alternative to Auth0 / Firebase Auth / AWS Cognito
- authentication
- session-management
- login
- supertokens
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
- identity
- identity-management
- user-management
- users
Small and highly portable detection tests based on MITRE's ATT&CK.
- mitre
- mitre-attack
Scapy: the Python-based interactive packet manipulation program & library.
- scapy
- python
- network
- network-analysis
Disk encryption with strong security based on TrueCrypt
- encryption
- encryption-decryption
- encryption-algorithms
- veracrypt
Socket-based TS/JavaScript API for WhatsApp Web
Hash-based post quantum signatures in Rust
Solidity contracts implementing hash based post quantum signatures
Hash-based signatures in typescript, WOTS+
A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.
- investigation
- osint
- recon
- python
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
- security-tools
- osint
- recon
- recon-engine
RetDec is a retargetable machine-code decompiler based on LLVM.
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]
- penetration-testing
- red-teaming
- windows
- fireeye-flare
Token-based AngularJS Authentication