A 100% free modern JS SaaS boilerplate (React, NodeJS, Prisma). Full-featured: Auth (email, google, github, slack, MS), Email sending, Background jobs, Landing page, Payments (Stripe, Polar.sh), Shadcn UI, S3 file upload. AI-ready with tailored AGENTS.md, skills, and Claude Code plugin. One cmd deploy. Powered by Wasp full-stack framework.
- full-stack
- open-source
- saas
- nodejs
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
- identity
- identity-management
- user-management
- users
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
A library for patching, replacing and decorating .NET and Mono methods during runtime
- csharp
- patcher
- detour
- detours
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
A network sniffer that logs all DNS server replies for use in a passive DNS setup
Automated Red Team Infrastructure deployement using Docker
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend
A tool for deploying and detecting use of Active Directory honeytokens
🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀
- enterprise-software
- kubernetes
- audit-logs
- enterprise-ready
OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance
- ldap-server
- ldap
- opendj
- rest
Guardian DB integration for tracking tokens and ensuring logout cannot be replayed.
A clean room recreation of Auth0 with 1:1 drop in replacement feature parity.
Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
Latest hashcat docker for CUDA, OpenCL, and POCL. Deployed on Vast.ai
Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts
A CTF framework to create, build, deploy and monitor challenges
A tool to assist IoT developers in securing MQTT-based IoT deployments
PocketBase + SvelteKit (Static): minimalistic template with configured authorization featuring a single binary or Docker image for deploying.
Cloverleaf is a free, open source app to replace your password manager without storing your passwords anywhere.