Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Translated🏆Gitee's most valuable open source project 🚀:100: A small, comprehensive and elegant open source component for third-party login. It currently supports authorized login via third-party platforms including Github, Gitee, Weibo, DingTalk, Baidu, Coding, Tencent Cloud Developer Platform, OSChina, Alipay, QQ, WeChat, Taobao, Google, Facebook, Douyin, LinkedIn, Xiaomi, Microsoft, Toutiao, Teambition, StackOverflow, Pinterest, Renren, Huawei, WeCom, Kujiale, Gitlab, Meituan, Ele.me, Twitter, Feishu, JD.com, Alibaba Cloud, Ximalaya, Amazon, Slack and Line. Login, so easy!
- justauth
- oauth2
- qqlogin
- googlelogin
Firmware Analysis Tool
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
Prevents you from committing secrets and credentials into git repositories
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
An all-in-one hacking tool to remotely take over Android devices.
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
Dshell is a network forensic analysis framework.
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
The Leading Security Assessment Framework for Android.
Android Reverse-Engineering Workbench for VS Code
- apktool
- apk-decompiler
- apk-editor
- smali
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
Collaborative forensic timeline analysis
.NET language playground
Create randomly insecure VMs
Laravel Impersonate is a plugin that allows you to authenticate as your users.
- laravel-package
- impersonate
- php
- user-management
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Bleeding edge django template focused on code quality and security.
A secure low code deception runtime framework, leveraging AI for System Virtualization.
Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
- malloc
- security
- memory-allocation
- malloc-library