Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
Repository Index
58,632 visible repositories in the index
1–24 of 49 · Most stars
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
- totp
- ldap
- sso-authentication
- two-factor-authentication
The easiest, and most secure way to access and protect all of your infrastructure.
- ssh
- go
- bastion
- teleport-binaries
A 100% free modern JS SaaS boilerplate (React, NodeJS, Prisma). Full-featured: Auth (email, google, github, slack, MS), Email sending, Background jobs, Landing page, Payments (Stripe, Polar.sh), Shadcn UI, S3 file upload. AI-ready with tailored AGENTS.md, skills, and Claude Code plugin. One cmd deploy. Powered by Wasp full-stack framework.
- full-stack
- open-source
- saas
- nodejs
fsociety Hacking Tools Pack – A Penetration Testing Framework
- fsociety
- exploitation
- port-scanning
- fsociety-hacking
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
- thefatrat
- bypass
- linux
- autorun
Hash-based post quantum signatures in Rust
Solidity contracts implementing hash based post quantum signatures
An open-source post-exploitation framework for students, researchers and developers.
- encrypted-connections
- platform-independent
- no-dependencies
- reverse-shells
📱 objection - runtime mobile exploration
The user infrastructure platform. You choose the frontend, backend, and database. Hexclave handles everything else.
- authentication
- nextjs
- oauth
- auth0
TranslatedA cryptographic toolkit supporting the Chinese national cryptographic standards SM2/SM3/SM4/SM9/SSL
- encryption
- sm2
- sm3
- sm4
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
- http2
- command-and-control
- c2
- golang
Adversary simulation and Red teaming platform with AI
- metasploit-framework
- post-exploitation
- redteam
- cobalt-strike
Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
- empire
- c2
- redteam-infrastructure
- hacktoberfest
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
NestJS boilerplate. Auth, TypeORM, Mongoose, Postgres, MongoDB, Mailing, I18N, Docker.
A tool to dump the login password from the current linux user
- post-exploitation
- password-extraction
Cloud Security Posture Management (CSPM)
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
- security
- limit
- ratelimter
- bruteforce
Automated Security Testing For REST API's
- security
- restapiautomation
- python
- owasp
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
A tool to abuse Exchange services
- mapi
- exchange
- shells
- pentesting