ALL IN ONE Hacking Tool For Hackers
- allinonehackingtool
- web-attack
- password-attack
- hacking
Repository Index
47,133 repositories indexed
1–24 of 445 · Most stars
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
A simple zero-config tool to make locally trusted development certificates with any names you'd like.
- https
- tls
- certificates
- local-development
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
- hex-editor
- reverse-engineering
- ips
- dear-imgui
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
- penetration-testing
- pentesting
- security-audit
- security-automation
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
A pure Unix shell script ACME client for SSL / TLS certificate automation
- acme
- acme-protocol
- certbot
- shell
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- cve-scanner
- subdomain-takeover
- nuclei-engine
- vulnerability-detection
Find, verify, and analyze leaked credentials
- secret
- trufflehog
- credentials
- security
⚙️ NGINX config generator on steroids 💉
DNS-Blocklists: For a better internet - keep the internet clean!
- dns
- ads
- blacklist
- blocklist
The authentication glue you need.
- saml
- saml-idp
- saml-sp
- oauth2
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
- osint
- social-media
- analyzer
- username
Simple and flexible tool for managing secrets
Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.
A little tool to play with Windows security
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
- casbin
- access-control
- authorization
- rbac
Free and Open Source Reverse Engineering Platform powered by rizin
Translated✨ An open-source, free, one-stop Java permission authentication framework that makes authentication and authorization simple and elegant! — Login authentication, permission authentication, distributed Session, microservice gateway authentication, SSO single sign-on, OAuth2.0 unified authentication, jwt integration, API Key authorization, API parameter signing
- java
- token
- authorization
- sso
Daemon to ban hosts that cause multiple authentication errors
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Translated🏆Gitee's most valuable open source project 🚀:100: A small, comprehensive and elegant open source component for third-party login. It currently supports authorized login via third-party platforms including Github, Gitee, Weibo, DingTalk, Baidu, Coding, Tencent Cloud Developer Platform, OSChina, Alipay, QQ, WeChat, Taobao, Google, Facebook, Douyin, LinkedIn, Xiaomi, Microsoft, Toutiao, Teambition, StackOverflow, Pinterest, Renren, Huawei, WeCom, Kujiale, Gitlab, Meituan, Ele.me, Twitter, Feishu, JD.com, Alibaba Cloud, Ximalaya, Amazon, Slack and Line. Login, so easy!
- justauth
- oauth2
- qqlogin
- googlelogin
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo: