AlyRagab

electron

:electron: Build cross-platform desktop apps with JavaScript, HTML, and CSS

drawio-desktop

Official electron build of draw.io

MailHog

Web and API based SMTP testing

XSStrike

Most advanced XSS scanner.

authentik

The authentication glue you need.

phpstan

PHP Static Analysis Tool - discover bugs in your code without running it!

nix

Nix, the purely functional package manager

tview

Terminal UI library with rich, interactive widgets — written in Golang

Havoc

The Havoc Framework.

permify

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application.

agent-zero

Agent Zero AI framework

ssh

Easy SSH servers in Golang

king-phisher

Phishing Campaign Toolkit

coraza

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

cloudflare-go

The official Go library for the Cloudflare API

Red-Teaming-TTPs

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!

chart-testing

CLI tool for linting and testing Helm charts

awesome-nginx

A curated list of awesome Nginx distributions, 3rd party modules, Active developers, etc. :octocat:

OpenAM

OpenAM is an open access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements and Web Services Security.

openbas

Open Breach and Attack Simulation Platform

medusa

A cli tool for importing and exporting Hashicorp Vault secrets

domscan

Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.

libsodium-go

A complete overhaul of the Golang wrapper for libsodium

example-api-authz-go

Example Go service that uses OPA for API authorization.

vault-client-go

HashiCorp Vault Go Client Library generated from OpenAPI spec.

go-secure-stdlib

vault-secrets-webhook

A Kubernetes mutating webhook that makes direct secret injection into Pods possible.

Vsync

A command-line tool to replicate KV Secrets between two HashiCorp Vault instances

k8s-auditing

kubernetes auditing playground