#security

WAF evasion testing toolkit. Grammar + encoding mutation, dialect-specific bypasses, evolutionary search, per-WAF gene-bank persistence. Rust.

Rust 製フロントエンドフレームワーク fandhe-frontend — SSR/SPA/SSG・単一実行ファイル配布。仕様: frontend-framework-spec

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

No repository description published.

Authentication system for Node.js

Local inventory of the AI agent surface on your machine. No account, no network, no upload.

CI/CD pipeline security analyzer — scans GitHub Actions workflows for attack vectors and maps findings to MITRE ATT&CK

No repository description published.

Production-ready detection & response queries for osquery

The identity provider for AI agents — registry, scoped delegation, in-path MCP enforcement, instant revocation, tamper-evident audit.

Golang (GO) implementation of Javascript Object Signing and Encryption specification

Embeddable Better Auth-shaped authentication server for Go: net/http, secure sessions, OAuth/OIDC, passkeys, 2FA, organizations, and pluggable database adapters.

Two-factor authentication for Laravel Nova 5: TOTP, passkeys, email codes, enforcement policies and step-up re-auth.

Client-side, cross-host pre-push gate that catches PII and secrets — using an engine you choose — before anything reaches a public remote.

Added Laravel functionality to Enlightn Security Checker. Adds a command to check for, and optionally emails you, vulnerabilities when they affect you.

Browser-only privileged access management (PAM) for Linux fleets — SSH through a jump host with ephemeral SSH certificates, session recording, and tamper-evident audit.

Go client library for the Vulners vulnerability database API — search, audit, SBOM, VScanner, and more

Captcha for Laravel 5+

NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration. Zero data exfiltration. MIT licensed.

Authentication provider for Microsoft AD FS to use with privacyIDEA.

No repository description published.

Library with common purpose functionality for working with .NET.

No repository description published.

HTTP authentication library for Go servers with Bearer, API key, OAuth/JWT, OIDC auto-discovery, JWKS refresh, and OAuth proxy support.

A set of core libraries for building domain-driven business applications on .NET.

AI security gateway that inspects every prompt and response through a multi-layer detection pipeline - enforcing ALLOW, BLOCK, or SANITIZE before anything reaches the model.

An OSINT / digital forensics tool built in Python

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

Majik Key is a next-generation seed phrase account library for creating and managing mnemonic-based identities. It provides a post-quantum ready, high-security bridge between BIP39 mnemonics and the Majikah ecosystem.

A lightweight PHP library for generating and validating TOTP authentication codes and QR codes compatible with Google Authenticator, Microsoft Authenticator, Authy, 1Password, Bitwarden, and other RFC 6238 authenticator apps.