lsPass
leestripp/lspassLocal-first encrypted password manager for logins, notes, and API keys, using a SQLite vault sealed with Argon2id and XChaCha20-Poly1305; no cloud or…
encryption-decryption-toolscryptographyprivacy+1
Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
leestripp/lspassLocal-first encrypted password manager for logins, notes, and API keys, using a SQLite vault sealed with Argon2id and XChaCha20-Poly1305; no cloud or…
squidsec/bloodbashOffline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…
bishopfox/cirroCreating attacks paths across management and data planes
cloud-architekt/azuread-attack-defenseThis publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…
ovh/the-bastionAuthentication, authorization, traceability and auditability for SSH accesses.
tech4242/aquaman🔱 The only independent credential proxy for AI agents: bring-your-own-vault isolation & least-privilege request policies. Your keys stay where you…
strategic-automation/violinAgentic pentest profile for Hermes: 31 playbooks for authorised recon, web/access-control attacks, safe exploit validation, and evidence-driven…
jumpserver/jumpserverJumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH,…
signalapp/libsignalHome to the Signal Protocol as well as other cryptographic primitives which make Signal possible.
nolabs-ai/nonosafe execution paths for agents - zero trust, zero setup, zero latency.
inverse-inc/packetfencePacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…
umputun/reproxyLightweight edge HTTP(S) server and reverse proxy with automatic SSL, Docker/Consul discovery, per-route authentication, rate limiting, and…
rhinosecuritylabs/cvesProof-of-Concept exploits for CVEs found by the team at Rhino Security Labs
ory/talosScalable API key server for issuing, verifying, and revoking credentials with token derivation for fine-grained capability tokens. Supports…
pilot-protocol/pilotprotocolOverlay network protocol giving AI agents permanent addresses, authenticated encrypted tunnels, and a trust model over UDP. Includes NAT traversal,…
sap8899/reportlyAzureAD/EntraID user activity reporter for blue teams. Input a suspicious user and time frame to receive a detailed report of user info, actions, and…
opensc/opensc.tokendTokend module for OS X with support for all cards supported by OpenSC
digicred-oss/caos-osCustomer Assurance Operating System. Answer the security questionnaires your customers send you, once.