47,133 repositories indexed
1–24 of 81 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
Directory/File, DNS and VHost busting tool written in Go
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
Program for determining types of files for Windows, Linux and MacOS.
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/
PyInstaller Extractor
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
Investigate malicious Windows logon by visualizing and analyzing Windows event log
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
Reconnaissance Swiss Army Knife
A One Time Password Authentication package, compatible with Google Authenticator.
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
Imports Reconstructor
This is the development tree. Production downloads are at:
Bloodhound Reporting for Blue and Purple Teams
A .NET implementation of TOTP and HOTP for things like two-factor authentication codes.