Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
- go
- web-server
- caddyfile
- http
Repository Index
75,360 visible repositories in the index
1–24 of 108 · Most stars
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
- hex-editor
- reverse-engineering
- ips
- dear-imgui
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- ai-agents
- ai-security-tool
- autonomous-agents
- golang
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
- totp
- ldap
- sso-authentication
- two-factor-authentication
Daemon to ban hosts that cause multiple authentication errors
ZITADEL - Identity infrastructure, simplified for you.
- saml
- authentication
- authorization
- login
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
- security
- security-tools
- security-audit
- security-hardening
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
- authentication
- authorization
- identity
- openid-connect
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
- identity
- identity-management
- user-management
- users
Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes.
🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
This is a multi-use bash script for Linux systems to audit wireless networks.
- evil-twin
- wps
- security
- beef
Multi-Cloud Security Auditing Tool
🚀🎉📚 SaaS Boilerplate built with Next.js + Tailwind CSS + Shadcn UI + TypeScript. ⚡️ Full-stack React application with Auth, Multi-tenancy, Roles & Permissions, i18n, Landing Page, DB, Logging, Testing
- authentication
- boilerplate
- multi-tenancy
- nextjs
autonomous red teaming platform; multi-agent offensive-security meta-harness
- agents
- ai
- multi-agent
- offensive-security
The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.
- authentication
- nextjs
- oauth
- auth0
TranslatedAn all-ages-friendly universal C# utility library, 码数吐司库 (Masuit Toast Library, "code number toast library"), containing commonly used operation classes, mostly static classes: encryption and decryption, reflection operations, weighted random selection algorithm, distributed short IDs, expression trees, LINQ extensions, file compression, multi-threaded downloading, hardware information, string extension methods, date and time extension operations, Chinese lunar calendar, large file copying, image cropping, captcha, resumable downloads, collection extensions, Excel export and other commonly used wrappers. Many features in one, with a code size of less than 2MB!
- lambda
- reflection
- datetime
- expression
AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
A collaborative, multi-platform, red teaming framework
a lightweight, multi-platform, multi-architecture hook framework.
- hook
- hook-framework
Open-source AI red teaming toolkit from Microsoft. Test generative AI systems with automated scans, adaptive multi-turn attacks, and a web UI.
- ai-red-team
- generative-ai
- red-team-tools
- responsible-ai
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
- open-source
- pentest
- pentesting
- readteaming
ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32