Ghidra is a software reverse engineering (SRE) framework
- software-analysis
- disassembler
- reverse-engineering
Repository Index
47,133 repositories indexed
1–24 of 487 · Most stars
Dex to Java decompiler
- android
- dex
- java
- decompiler
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
- penetration-testing
- pentesting
- security-audit
- security-automation
🕵️♂️ Collect a dossier on a person by username from 6K websites
- osint
- social-network
- identification
- socmint
Metasploit Framework
- hacktoberfest
Open Source Identity and Access Management For Modern Applications and Services
- keycloak
- oidc
- saml
The most comprehensive authentication framework
- authentication
- oauth
- oauth2
- typescript
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
- totp
- ldap
- sso-authentication
- two-factor-authentication
Authentication for the Web.
⚙️ NGINX config generator on steroids 💉
A tool for reverse engineering Android apk files
- apktool
- apk
- android
- reverse-engineering
The authentication glue you need.
- saml
- saml-idp
- saml-sp
- oauth2
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- agent-security
- agent-skills
- agentic-ai
- ai-security
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
- footprinting
- osint
- threatintel
- python
Simple, unobtrusive authentication for Node.js.
Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.
Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
Main repo for hosting release binaries
- frida
- instrumentation
- vala
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
- casbin
- access-control
- authorization
- rbac
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
- password-sniffer
- mitm
- rogue-ap
- wifi
🕵️♂️ Offensive Google framework.
- osint
- hideandsec
Daemon to ban hosts that cause multiple authentication errors
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.