Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

206 results

kcmapper

synacktiv/kcmapper

KcMapper is a security auditing tool for Keycloak. It exports your Keycloak configuration (realms, clients, users, roles, etc.) into a Neo4j graph…

authentication-authorizationconfiguration-auditingidentity-access-management+3

146 months ago

conduit

anee769/conduit

On-prem API gateway for AI coding agents with per-engineer cost attribution, hard budgets, egress governance (secrets/entity scanning), context-rot…

api-securitycloud-infrastructure-securitycloud-security+4

81 month ago

authproof-sdk

commonguy25/authproof-sdk

Cryptographically signed delegation receipts for AI agents. Define exactly what an AI can and can't do — signed, verifiable, tamper-proof.

ai-securityapi-securityauthentication-authorization+3

62 months ago

azpim

tapanmeena/azpim

A command-line interface tool for managing Azure Privileged Identity Management (PIM) role activations directly from your terminal.

authentication-authorizationcloud-infrastructure-securitycloud-security+3

66 months ago

SecureCivic

roxanne_ardary/securecivic

SecureCivic is a citizen-built, open source identity verification platform designed for SSA adoption. It replaces private data brokers with a secure,…

api-securityauthentication-authorizationcloud-security+7

1 month ago

legion

deadends/legion

Legion is a Zero-Knowledge Authentication Fabric built for privacy

authenticationcryptographyhardware-security+3

108 months ago

pared

renich/pared

Lightweight, secure control plane & real-time web dashboard in Crystal for Linux firewalld and NetworkManager host security.

authentication-authorizationdefensive-toolsidentity-access-management+2

13 days ago

Galdralag-firmware

supermagnum/galdralag-firmware

A attempt at cryptographic framework for Baochip-1x .

authenticationcryptographyembedded-systems-security+4

31 month ago

Nimbus Vestige

dobybaxter127/nimbus-vestige

A forensic reconstruction engine for cloud and identity incident response.

cloud-securitydigital-forensicseducation+6

212 days ago

AA Discord Audit

eveo7/aa-discord-audit

Reconciliation audit for Alliance Auth's Discord integration: finds guild members holding AA-managed roles that Auth never granted and strips or…

configuration-auditingdefensive-toolsidentity-access-management+1

1 month ago

Pribado

0xrlawrence/pribado

Zero-knowledge privacy platform for confidential API key management, encrypted vault, and secure chat. Built on Oasis Sapphire TEEs

api-securityauthentication-authorizationcloud-security+5

58 months ago

Dop2Mop

h4wkst3r/dop2mop

OpenGraph collector for BloodHound that maps attack paths from DevOps to MLOps infrastructure, collecting CI/CD pipeline, service principal, and ML…

cloud-infrastructure-securitycloud-securitycontainer-security+8

44 months ago

hermetic

hermetic-sys/hermetic

Agent-Isolated Credential Broker for AI Agents

api-securityauthentication-authorizationcloud-security+7

111 days ago

UAP-protocol

rajsidwadkar/uap-protocol

A unified, security-first wire protocol for tool access and agent coordination. UAP eliminates CVE-2025-49596 and MCP tool-poisoning vulnerabilities…

api-securityauthentication-authorizationcloud-security+8

12 months ago

AETHER-PROTOCOL-P

aetherai3/aether-protocol-p

Working implementation: cryptographically verified short-lived identities for AI decision authentication — CVE-2025-59536 (Patent Pending US…

ai-securityauthenticationcryptography+3

12 days ago

acp-framework-en

chelof100/acp-framework-en

Agent Control Protocol (ACP) — Official English specification. Cryptographically verifiable authorization architecture for autonomous AI agents.

ai-securityauthentication-authorizationcloud-security+5

214 days ago

CVE-2021-3754

7ragnarok7/cve-2021-3754

Vulnerability details and exploit for CVE-2021-3754

authenticationauthentication-authorizationexploitation+3

11 year ago

webui

baram01/webui

WebUI for AAA

authentication-authorizationidentity-access-managementnetwork-access-control+1

11 year ago