Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
The authentication glue you need.
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
Automatically provision and manage TLS certificates in Kubernetes
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.
Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
- doorkeeper
- oauth
- oauth2-provider
- oauth2-server
The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
- hacktoberfest
- abac
- access-control
- acl
OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js
Easy integration with OAuth 2.0 service providers.
SteamKit2 is a .NET library designed to interoperate with Valve's Steam network. It aims to provide a simple, yet extensible, interface to perform various actions on the network.
- steamkit2
- c-sharp
- nuget
- steam
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
Create randomly insecure VMs
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
- enterprise-software
- saml
- saml2
- saml-service-provider
Go login handlers for authentication providers (OAuth1, OAuth2)
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
goRBAC provides a lightweight role-based access control (RBAC) implementation in Golang.
Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!
PowerForensics provides an all in one platform for live disk forensic analysis
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity