hulak
xaaha/hulakA lightweight, file-based CLI API client with age-encrypted secrets, first-class GraphQL support, and a built-in MCP server for AI agent workflows.
api-securityapi-security-testingauthentication+4
96
xaaha/hulakA lightweight, file-based CLI API client with age-encrypted secrets, first-class GraphQL support, and a built-in MCP server for AI agent workflows.
fariszr/knockerKnocker, a knock based access control service for your homelab
gdatasoftwareag/vaasVerdict-as-a-Service SDKs: Analyze files for malicious content
tuskira/ai-agent-gatewayOpen-source gateway that secures, governs, and observes AI agents' MCP tool calls and LLM traffic, with API-key authentication and an admin console…
mcp-shark/mcp-sharkWireshark-like forensic analysis for Model Context Protocol communications Capture, inspect, and investigate all HTTP requests and responses between…
agentguard-ai/tealtigerPowerful protection for AI agents - Open-source security and cost tracking for AI applications
mx-moth/flask-saml2Flask library for building SAML Service Providers and Identity Providers
sleuthco/clawshield-publicSecurity proxy for AI agents. Scans every message for prompt injection, PII, and secrets. Defense-in-depth: Go proxy + iptables firewall + eBPF…
coffinxp/gemini-api-key-hunterScans websites and JS files for exposed Gemini API keys, verifies them live, enumerates accessible services, and provides a browser client for direct…
nccgroup/web3-decoderBurp Suite extension for decoding Web3 JSON-RPC traffic, including smart contract function calls, responses, and ABI resolution with proxy-aware and…
blacksky-algorithms/atprotoFork of the AT Protocol reference implementation with performance-optimized AppView, Rust-based firehose indexer, Redis caching, and community…
oh-az/noargsWindows API hooking tool that dynamically spoofs and conceals process arguments via Detours library and PEB manipulation, enabling stealthy process…
liodeus/swaggerholeA python3 script searching for secret on swaggerhub
michaels1011/ephemora-cellCapability-based WASM runtime for executing untrusted AI-generated code with enforced CPU, memory, time, I/O, and filesystem limits. Provides…
agentrust-io/cmcpcMCP: Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.
portswigger/pentest-mapperA Burp Suite Extension for Application Penetration Testing to map flows and vulnerabilities
s4dhulabs/vimana-frameworkVimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to…
nccgroup/jwt-reauthCaches JWT authentication tokens from an auth URL and attaches them as headers to in-scope requests in Burp Suite for automated session handling.