Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
Repository Index
69,259 visible repositories in the index
1–24 of 31 · Most stars
Loads environment variables from .env for nodejs projects.
- dotenv
- environment-variables
- javascript
- node
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
- security
- security-tools
- security-audit
- security-hardening
A vault for securely storing and accessing AWS credentials in development environments
- aws
- iam
- temporary-credentials
- keychain
BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds.
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
- kubernetes
- vulnerable-app
- security
- hacking
a secure dotenv—from the creator of `dotenv`
- dotenv
- env
- dotenvx
- environment-variables
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
- aws-security
- penetration-testing
- aws
- security
⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips
- pentesting
- pentesting-tools
- pentesting-windows
- security
🚀Vulfocus 是一个漏洞集成平台，将漏洞环境 docker 镜像，放入即可使用，开箱即用。
- vulfocus
- docker
- vulnerability-environment
- vulfocus-docker
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)
- exploits
- cve
- cve-2021-33739
- cve-2021-26868
Safely pass trusted data to untrusted environments and back.
- python
- security
- hmac
- serialization
Fully featured and community-driven hacking environment
The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.
Evil-M5Project is an innovative tool developed for ethical hacking and exploration of WiFi networks. It's compatible with Cardputer, Atoms3, Fire, core2. You can scan, monitor, and interact with WiFi networks in a controlled environment. This project is designed for educational purposes, aiding in understanding network security and vulnerabilities
The SPIFFE Runtime Environment
A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk
- attack-range
- attack-simulation
- adversary
- simulation
Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
A key value store for storing per-developer environment and application keys
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
Sandboxed Execution Environment