SecLists by danielmiessler

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

created at Feb. 19, 2012, 1:30 a.m.

PHP

1,880 +1

52,981 +163

23,250 +20

GitHub
sherlock by sherlock-project

🔎 Hunt down social media accounts by username across social networks

created at Dec. 24, 2018, 2:30 p.m.

Python

1,076 +0

50,691 +223

6,052 +25

GitHub
og-aws by open-guides

📙 Amazon Web Services — a practical guide

created at July 13, 2016, 5:30 p.m.

Shell

1,217 +1

35,277 +20

3,798 +0

GitHub
hosts by StevenBlack

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

created at April 12, 2012, 8:22 p.m.

Python

570 -1

25,012 +37

2,097 +3

GitHub
authelia by authelia

The Single Sign-On Multi-Factor portal for web apps

created at Dec. 7, 2016, 12:56 a.m.

Go

157 +0

19,222 +119

1,011 +7

GitHub
casbin by casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Golang: https://discord.gg/S5UjpzGZjN

created at April 8, 2017, 7:51 a.m.

Go

231 -1

16,709 +34

1,582 +3

GitHub
gitleaks by gitleaks

Protect and discover secrets using Gitleaks 🔑

created at Jan. 27, 2018, 6:19 p.m.

Go

152 +0

15,040 +122

1,300 +5

GitHub
sops by getsops

Simple and flexible tool for managing secrets

created at Aug. 13, 2015, 10:11 p.m.

Go

117 -1

14,864 +32

801 -1

GitHub
trufflehog by trufflesecurity

Find and verify credentials

created at Dec. 31, 2016, 5:08 a.m.

Go

166 +1

13,706 +61

1,493 +4

GitHub
phoneinfoga by sundowndev

Information gathering framework for phone numbers

created at Oct. 25, 2018, 9:19 a.m.

Go

655 +1

11,807 +42

3,222 +11

GitHub
supertokens-core by supertokens

Open source alternative to Auth0 / Firebase Auth / AWS Cognito

created at Jan. 5, 2020, 1:30 p.m.

Java

58 -2

11,756 +46

445 +1

GitHub
infisical by Infisical

♾ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure and prevent secret leaks.

created at Aug. 5, 2022, 1:50 p.m.

TypeScript

36 +0

11,601 +68

559 +2

GitHub
spiderfoot by smicallef

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

created at April 28, 2012, 7:10 a.m.

Python

358 +1

11,507 +44

2,058 +2

GitHub
YubiKey-Guide by drduh

Guide to using YubiKey for GnuPG and SSH

created at Feb. 1, 2016, 1:56 a.m.

HTML

219 -1

10,628 +27

1,119 +3

GitHub
kratos by ory

Next-gen identity server replacing your Auth0, Okta, Firebase with hardened security and PassKeys, SMS, OIDC, Social Sign In, MFA, FIDO, TOTP and OTP, WebAuthn, passwordless and much more. Golang, headless, API-first. Available as a worry-free SaaS with the fairest pricing on the market!

created at May 29, 2018, 4:09 p.m.

Go

109 +0

10,443 +20

919 +2

GitHub
opa by open-policy-agent

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

created at Dec. 28, 2015, 10:08 p.m.

Go

123 +1

9,023 +25

1,243 +3

GitHub
casdoor by casdoor

An open-source UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform with web UI supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, RADIUS, Google Workspace, Active Directory and Kerberos

created at Oct. 22, 2020, 2:40 p.m.

Go

61 +1

8,402 +135

994 +9

GitHub
cfssl by cloudflare

CFSSL: Cloudflare's PKI and TLS toolkit

created at July 7, 2014, 11:49 p.m.

Go

215 +0

8,394 +14

1,079 +0

GitHub
google-cloud-4-words by priyankavergadia

The Google Cloud Developer's Cheat Sheet

created at Nov. 27, 2018, 7:07 p.m.

Unknown languages

476 +1

7,688 +37

1,738 +8

GitHub
awesome-threat-intelligence by hslatman

A curated list of Awesome Threat Intelligence resources

created at Dec. 21, 2015, 11:31 a.m.

Unknown languages

544 +1

7,138 +35

1,375 +5

GitHub