gitleaks / gitleaks

Find secrets with Gitleaks 🔑

pocket-id / pocket-id

The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.

bettercap / bettercap

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

gopasspw / gopass

The slightly more awesome standard unix password manager for teams

teamhanko / hanko

Modern authentication, on your terms. Open source alternative to Auth0, Clerk, WorkOS, Stytch.

authgear / authgear-server

Open source Auth0/Keycloak alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps

trzsz / trzsz-ssh

trzsz-ssh ( tssh ) is an ssh client designed as a drop-in replacement for the openssh client. It aims to provide complete compatibility with openssh, mirroring all its features, while also offering additional useful features. Such as login prompt, batch login, remember password, automated interaction, trzsz, zmodem(rz/sz), udp mode like mosh, etc.

jhaals / yopass

Secure sharing of secrets, passwords and files

1Password / for-open-source

Get a 1Password team account for free to support your open source initiatives!

go-webauthn / webauthn

FIDO2 Conformant WebAuthn and Passkey backend library for golang

isesword / golem

Pure-Go native-library emulation framework: load Android AArch64 .so files and call their functions directly — no JVM, no device, zero cgo (libunicorn runtime-loaded via purego). Real bionic, JNI-spec reference lifecycle, engine pool for concurrent use, shared read-only pages, transactional hooks.

1Password / shell-plugins

Seamless authentication for every tool in your terminal.

1Password / onepassword-operator

The 1Password Connect Kubernetes Operator provides the ability to integrate Kubernetes Secrets with 1Password. The operator also handles autorestarting deployments when 1Password items are updated.

deckarep / golang-set

A simple, battle-tested and generic set type for the Go language. Trusted by GoogleCloudPlatform, Docker, 1Password, Ethereum and Hashicorp.

x90skysn3k / brutespray

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

robherley / snips.sh

✂️ passwordless, anonymous SSH-powered pastebin with a human-friendly TUI and web UI

swordstudiox / vohive-plus

在 windows 跑 WSL linux系统，把大疆 4G 模块（EG25-G）伪装成移远 Quectel EC25 并部署 vohive 平台的项目

ArkGravity / burrow

Lightweight, self-hosted OIDC identity provider for small teams. Go + React, password + mandatory TOTP, RBAC, and shared SSO. MIT licensed.

AFSlayer / antigravity-server

Use the Antigravity desktop app from your phone. One binary that serves Antigravity's own web UI to your devices, behind a password.

pilinux / gorest

Go RESTful API starter kit with Gin, JWT, GORM (MySQL, PostgreSQL, SQLite), Redis, Mongo, 2FA, email verification, password recovery

ide-digital / nulltrace

Local-first privacy toolkit. Map yourself against 400+ data brokers, send CCPA/GDPR deletion mail, and check password dumps. The vault never leaves your machine.