openvpn
openvpn/openvpnSecure tunneling daemon implementing VPN protocols with TLS encryption, certificate authentication, and routing/firewall configuration for private…
authentication-authorizationnetwork-securitycryptography+2
14.4k
Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
openvpn/openvpnSecure tunneling daemon implementing VPN protocols with TLS encryption, certificate authentication, and routing/firewall configuration for private…
umputun/reproxyLightweight edge HTTP(S) server and reverse proxy with automatic SSL, Docker/Consul discovery, per-route authentication, rate limiting, and…
agentguard-ai/tealtigerPowerful protection for AI agents - Open-source security and cost tracking for AI applications
wso2/carbon-identity-framework
0xterror/cve-2026-8181Exploit PoC for WordPress Burst Statistics authentication bypass allowing unauthenticated admin impersonation via crafted Authorization header.
flythenimbus/brambleOffline-first password manager with direct device-to-device sync
leestripp/lspassLocal-first encrypted password manager for logins, notes, and API keys, using a SQLite vault sealed with Argon2id and XChaCha20-Poly1305; no cloud or…
rezivure/grid-mobileGrid: Private Location Sharing mobile app for iOS/Android. E2EE with Matrix.
microsoft/agent-governance-toolkitPolicy enforcement, zero-trust identity, execution sandboxing, and audit logging for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10 with…
owasp/owasp-subtractive-hardening-top-10The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber…
sigstore/cosignCode signing and transparency for containers and binaries
scille/parsec-cloudOpen source Dropbox-like file sharing with full client encryption !
godliveanton/cve-2026-61241Oracle OID LDAP Server Privileges Management Exploit
lanicer/cve-2026-41940-pocExploits cPanel/WHM CVE-2026-41940 authentication bypass via CRLF session injection for unauthenticated root-level WHM access, then lists accounts,…
squidsec/bloodbashOffline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…
cosai-oasis/ws4-secure-design-agentic-systemsRepository for CoSAI Workstream 4, Secure Design Patterns for Agentic Systems
turtlearm/ksmbraceksmbd CVEs: CVE-2026-31717, CVE-2026-68083
tech4242/aquaman🔱 The only independent credential proxy for AI agents: bring-your-own-vault isolation & least-privilege request policies. Your keys stay where you…