YubiKey-Guide by drduh

Guide to using YubiKey for GnuPG and SSH

created at Feb. 1, 2016, 1:56 a.m.

221 -1

10,778 +25

1,138 +7

statistically-likely-usernames by insidetrust

Wordlists for creating statistically likely username lists for use in password attacks and security testing

created at Feb. 14, 2016, 11:24 p.m.

13 +0

809 +6

120 +1

pyisp by ActivisionGameScience

IP to ISP lookup library (includes ASN)

created at March 18, 2016, 3:45 a.m.

5 +0

11 +0

4 +0

conjur by cyberark

CyberArk Conjur automatically secures secrets used by privileged users and machine identities

created at June 28, 2016, 9:18 p.m.

48 +0

727 +0

123 +0

og-aws by open-guides

📙 Amazon Web Services — a practical guide

created at July 13, 2016, 5:30 p.m.

1,217 +1

35,431 +15

3,826 +5

confusable_homoglyphs by vhf

ϲοｎｆｕѕаｂｌе＿һοｍоɡｌｙｐｈｓ

created at Sept. 12, 2016, 8:44 a.m.

6 +0

158 +0

18 +0

loginsrv by tarent

JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..

created at Nov. 11, 2016, 12:11 p.m.

50 +0

1,915 +0

149 +0

athenz by AthenZ

Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.

created at Nov. 16, 2016, 6:23 p.m.

52 +0

869 +7

273 +1

dumb-password-rules by duffn

A compilation of sites with dumb password rules.

created at Dec. 4, 2016, 2:47 p.m.

40 +0

2,975 +0

296 -1

authelia by authelia

The Single Sign-On Multi-Factor portal for web apps

created at Dec. 7, 2016, 12:56 a.m.

158 +0

19,703 +60

1,034 +2

trufflehog by trufflesecurity

Find and verify secrets

created at Dec. 31, 2016, 5:08 a.m.

166 +0

13,993 +38

1,520 +4

casbin by casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Golang: https://discord.gg/S5UjpzGZjN

created at April 8, 2017, 7:51 a.m.

231 +1

16,932 +32

1,592 +0

policyuniverse by Netflix-Skunkworks

Parse and Process AWS IAM Policies, Statements, ARNs, and wildcards.

created at May 15, 2017, 5:51 p.m.

125 +0

416 +1

61 +0

ja3 by salesforce

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

created at June 13, 2017, 10:54 p.m.

99 +0

2,547 +6

285 +1

beyond by cogolabs

BeyondCorp-inspired HTTPS/SSO Access Proxy. Secure internal services outside your VPN/perimeter network during a zero-trust transition.

created at Aug. 13, 2017, 6:29 p.m.

9 +0

247 +1

25 +0

oathkeeper by ory

A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.

created at Sept. 25, 2017, 11:04 a.m.

47 +0

3,174 +2

343 +0

roca by crocs-muni

ROCA: Infineon RSA key vulnerability

created at Oct. 13, 2017, 3:28 p.m.

39 +0

479 +0

91 +0

CT_subdomains by internetwache

An hourly updated list of subdomains gathered from certificate transparency logs

created at Dec. 7, 2017, 12:43 p.m.

26 +0

335 +0

61 +0

country-ip-blocks by herrbischoff

CIDR country-level IP data, straight from the Regional Internet Registries, updated hourly. This is a read-only mirror.

created at Dec. 13, 2017, 6:08 p.m.

25 +1

638 +8

80 -1

gitleaks by gitleaks

Protect and discover secrets using Gitleaks 🔑

created at Jan. 27, 2018, 6:19 p.m.

153 +0

15,336 +28

1,321 +6