#security

Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain.

Authentication and authorization service (JWT, OAuth, users)

TLS in pure OCaml

Rust library for Windows Filtering Platform (WFP)

A tool to generate an HTML report from pnpm audit.

Symfony Bundle used to Encrypt and Decrypt data and variables in the Web application

No repository description published.

Automated cacert.pem management for PHP projects

Diagnose and fix performance, correctness, and architecture issues in your Svelte codebase

Auto-apply Cloudflare/AWS IP ranges to nginx, caddy, haproxy, nftables, iptables & ufw - single Go binary

detect technologies with wappalyzer alternative

Supply-chain firewall for AI coding agents and developers — checks npm/PyPI packages against OSV advisories, typosquat & lifecycle-script heuristics, and your policy before install. Local-first, MCP-native.

go-idento — a complete, embedded identity & authentication framework for Go (Golang). Users, roles, RBAC, password hashing, JWT (HS256/RS256/ES256 + JWKS), TOTP & SMS two-factor, OAuth/OIDC logins, sessions. Pluggable stores: GORM, pgx, sqlc.

A TypeScript library for validating and securing LLM prompts — PII, jailbreak, prompt injection, profanity, toxicity and relevance guards. Zero-config defaults, extensible with custom patterns.

Next generation web scanner

Core library

A small and easy-to-use one-time password generator library for Java implementing RFC 4226 (HOTP) and RFC 6238 (TOTP).

Security scanner built for Laravel, detects misconfigurations, vulnerabilities, and exposed secrets with a beautiful TUI.

Safeguard your .NET MAUI app effortlessly by preventing content exposure, screenshots, and recordings with ease.

Official Pulumi provider for Thoth headless control-plane workflows

[READ-ONLY] CakePHP Utility classes such as Inflector, Text, Hash, Security and Xml. This repo is a split of the main code that can be found in https://github.com/cakephp/cakephp

QuicDraw(H3) is A security research tool designed for fuzzing and racing HTTP/3 servers. QuicDraw implements the `Quic-Fin-Sync` on HTTP/3 (over QUIC) for race-condition testing.

Python implementation of Dropbox's realistic password strength estimator

CLI & Agent plugin for fetching SAST rule packs from greprules.io and scanning local code changes.

Nation-state grade, defense-in-depth security testing framework. Tests web apps, extensions, desktop, mobile, cloud, AI/LLM, hardware, and supply chain from a single CLI.

Verificação de assinatura de webhooks (Mailgun, SendGrid, Postmark, Resend, AWS SNS/SES) para Laravel

CLI vulnerability scanner powered by Vulners — search, audit, scan, offline mode

Secure-by-default runtime and security envelope for OpenClaw AI agents. Features sandboxing, granular permissions, and audit logging.

No repository description published.

Prometheus exporter that enriches Trivy Operator VulnerabilityReport CVEs with EPSS scores and CISA KEV presence