Security Libraries - Page 2

Find and verify credentials

Go 11386Updated: 2 y ago License: Strong Copyleft (AGPL-3.0)

Unlock encrypted music file in browser. 在浏览器中解锁加密的音乐文件。

TypeScript 11299Updated: 3 y ago License: Permissive (MIT)

Associate users with roles and permissions

PHP 11285Updated: 2 y ago License: Permissive (MIT)

Exploitation Framework for Embedded Devices

Python 11150Updated: 2 y ago License: Proprietary (Proprietary)

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

JavaScript 11141Updated: 2 y ago License: Proprietary (Proprietary)

A modern, portable, easy to use crypto library.

C 10984Updated: 2 y ago License: Proprietary (Proprietary)

The OWASP ZAP core project

Java 10937Updated: 2 y ago License: Permissive (Apache-2.0)

🔥 A well-tested feature-rich modular Firebase implementation for React Native. Supports both iOS & Android platforms for all Firebase services.

JavaScript 10887Updated: 2 y ago License: Proprietary (Proprietary)

🔐 JSON Web Token Authentication for Laravel & Lumen

PHP 10884Updated: 2 y ago License: Permissive (MIT)

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Shell 10880Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Android runtime permissions powered by RxJava2

Java 10440Updated: 2 y ago License: Permissive (Apache-2.0)

Automatically provision and manage TLS certificates in Kubernetes

Go 10430Updated: 2 y ago License: Permissive (Apache-2.0)

A set of Ansible playbooks to build and maintain your own private cloud: email, calendar, contacts, file sync, IRC bouncer, VPN, and more.

HTML 10340Updated: 2 y ago License: Proprietary (Proprietary)

CTF framework and exploit development library

Python 10297Updated: 2 y ago License: Proprietary (Proprietary)

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

Python 10297Updated: 2 y ago License: Strong Copyleft (CC-BY-SA-4.0)

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

Java 10184Updated: 2 y ago License: Permissive (Apache-2.0)

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

JavaScript 10077Updated: 2 y ago License: Strong Copyleft (AGPL-3.0)

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Python 9740Updated: 2 y ago License: Permissive (MIT)

Guide to using YubiKey for GPG and SSH

Shell 9664Updated: 2 y ago License: Permissive (MIT)

CryptoSwift is a growing collection of standard and secure cryptographic algorithms implemented in Swift

Swift 9615Updated: 2 y ago License: Proprietary (Proprietary)

Open source alternative to Auth0 / Firebase Auth / AWS Cognito

Java 9531Updated: 2 y ago License: Proprietary (Proprietary)

:flags: A curated collection of all country flags in SVG — plus the CSS for easier integration

CSS 9455Updated: 2 y ago License: Permissive (MIT)

Multi-platform transparent client-side encryption of your files in the cloud

Java 9437Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Firmware Analysis Tool

Python 9326Updated: 2 y ago License: Permissive (MIT)

VLESS(TCP_Vision、Reality、gRPC、WS)、VMess(WS)、Trojan(TCP、gRPC)、Hysteria、八合一共存脚本

Shell 9280Updated: 2 y ago License: Strong Copyleft (AGPL-3.0)

Open-Source Phishing Toolkit

Go 9130Updated: 2 y ago License: Proprietary (Proprietary)

Java JWT: JSON Web Token for Java and Android

Java 9117Updated: 2 y ago License: Permissive (Apache-2.0)

This is a webshell open source project

PHP 9058Updated: 2 y ago License: Permissive (MIT)

OpenID Connect and OAuth 2.0 Framework for ASP.NET Core

C# 9046Updated: 2 y ago License: Permissive (Apache-2.0)

In-depth Attack Surface Mapping and Asset Discovery

Go 9025Updated: 2 y ago License: Proprietary (Proprietary)

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods

Python 8870Updated: 2 y ago License: Permissive (MIT)

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

Python 8860Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Xray 基于 Nginx 的 VLESS + XTLS 一键安装脚本

Shell 8829Updated: 2 y ago License: Permissive (MIT)

Next-gen identity server (think Auth0, Okta, Firebase) with Ory-hardened authentication, MFA, FIDO2, TOTP, WebAuthn, profile management, identity schemas, social sign in, registration, account recovery, passwordless. Golang, headless, API-only - without templating or theming headaches. Available as a cloud service.

Go 8820Updated: 2 y ago License: Permissive (Apache-2.0)

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

Python 8710Updated: 3 y ago License: Strong Copyleft (CC-BY-SA-4.0)

fsociety Hacking Tools Pack – A Penetration Testing Framework

Python 8601Updated: 2 y ago License: Permissive (MIT)

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

Go 8544Updated: 2 y ago License: Permissive (Apache-2.0)

Keybase Go Library, Client, Service, OS X, iOS, Android, Electron

Go 8497Updated: 2 y ago License: Permissive (BSD-3-Clause)

Firebase Quickstart Samples for Android

Java 8491Updated: 2 y ago License: Permissive (Apache-2.0)

wallabag is a self hostable application for saving web pages: Save and classify articles. Read them later. Freely.

PHP 8474Updated: 2 y ago License: Permissive (MIT)

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

TypeScript 8328Updated: 2 y ago License: Permissive (MIT)

Unofficial Bitwarden compatible server written in Rust

Rust 8307Updated: 4 y ago License: Strong Copyleft (GPL-3.0)

Daemon to ban hosts that cause multiple authentication errors

Python 8305Updated: 2 y ago License: Proprietary (Proprietary)

Automatically provision and manage TLS certificates in Kubernetes

Go 8291Updated: 3 y ago License: Permissive (Apache-2.0)

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !

HTML 8288Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Server supporting the Signal Private Messenger applications on Android, Desktop, and iOS

Java 8263Updated: 2 y ago License: Strong Copyleft (AGPL-3.0)

Prowler is an Open Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more.

Python 8206Updated: 2 y ago License: Permissive (Apache-2.0)

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Shell 8193Updated: 2 y ago License: Permissive (Apache-2.0)

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

Go 8166Updated: 2 y ago License: Permissive (Apache-2.0)

Open-source feature management solution built for developers.

TypeScript 8162Updated: 2 y ago License: Permissive (Apache-2.0)