Toolkit for validating, forging, scanning and tampering JWTs (JSON Web Tokens).

jumpserver/guacd

jumpserver

The native server-side proxy used by Apache Guacamole.

openbgpd/openbgpd

openbgpd

OpenBGPD Routing Daemon

Let's Encrypt client and ACME library written in Go. https://github.com/go-acme/lego

Cardea is an SSH bastion server that provides access control and session recording.

betterweb/service-base

betterweb

A simple yet scalable microservice base

A minimal sftpd docker container

nebula is a scalable overlay networking tool with a focus on performance, simplicity and security

amass performs network mapping of attack surfaces and external asset discovery

Netmaker automates fast, secure, and distributed virtual networks using Wireguard

Lightweight Squid proxy server on Alpine Linux for web caching and traffic filtering

An open source, self-hosted implementation of the Tailscale coordination server.

LinuxKit prometheus node_exporter package

SpiceDB is a Zanzibar-inspired database that stores, computes & validates application permissions.

trufflehog finds leaked credentials

s390x/notary

s390x

DEPRECATED; Notary server and signer cooperatively handle signing and distribution

Fast CORS misconfiguration vulnerabilities scanner

A command-line security tool for file encryption and protection.

LinuxKit auditd package

Lightweight DNS Proxy with dnsmasq and DNSCrypt-Proxy

subfinder is a subdomain discovery tool via passive online sources

containerized pcscd to use HSMs via K8s sidecar

Local DNS resolver using DoH for privacy, in a tiny container and support for cloud and local infra.

🔐 Alpine Linux based OpenSSL build environment for madnuttah/unbound

Simple Alpine-based Dockerfile for cloudflared, hopefully with support for multiple architectures.

ssh-audit is a tool for ssh server & client configuration auditing

Container to open ports so that you can use for firewall policy verification.

whois is a Go implementation of WHOIS with optional JSON output