Find secrets with Gitleaks 🔑
- security
- security-tools
- git
- golang
Repository Index
56,638 visible repositories in the index
1–24 of 24 · Most stars
A little tool to play with Windows security
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
- security-tools
- osint
- recon
- recon-engine
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
- zanzibar
- permissions
- database
- distributed-systems
[DEPRECATED] Stanford Javascript Crypto Library
Iceman Fork - Proxmark3
- nfc
- rfid
- mifare
- proxmark3
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
- authorization
- permissions
- security
- zanzibar
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
- security
- limit
- ratelimter
- bruteforce
Find leaked secrets everywhere.
- cicd
- credentials
- developer-tools
- devops
A little utility for managing credentials in the cloud
One rule to crack all passwords. or atleast we hope so.
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
- digital-human-rights
- anonymity
- security
- python
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
Codesign Electron macOS apps
- electron-osx-sign
- macos
- entitlements
- provisioning-profiles
Cyber Incident Response Team Playbook Battle Cards
- playbook-battle-cards
- cybersecurity
- cyber-threats
- cyber-security-team
No-jailbreak iOS privacy, entitlement, sandbox & telemetry forensic auditor (inspired by Verlintas/NOIR)
Portable version of Bouncy Castle with support for .NET 4, .NET Standard 2.0, MonoAndroid, Xamarin.iOS, .NET Core
Malware/IOC ingestion and processing engine
Integrates Spiffe and Vault to have secretless authentication
- spire
- spiffe
- vault
- hashicorp
A mirror of the nettle repository
Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.
Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.
- aho-corasick
- cybersecurity
- devops
- git-hook