Raccoon

Raccoon

License: MIT


Description:

Raccoon is a high-performance offensive security tool for reconnaissance and vulnerability scanning. It performs DNS lookups, WHOIS, TLS data collection, port and service discovery, URL fuzzing, subdomain enumeration, WAF detection, and organized output. It leverages asyncio for speed and supports Tor/proxy routing.

Zero Password Manager

Zero Password Manager

License: PolyForm Noncommercial License 1.0.0


Description:

Self-hosted, open-source password manager built with Flutter. Client-side AES-256-GCM encryption keeps vault data on-device; the server stores only encrypted data and blind site hashes. Features mandatory TOTP 2FA, per-operation OTPs, audit logs, and cross-platform UI.

Ghost Eye

Ghost Eye

License: GPL-3.0


Description:

Ghost Eye is an information-gathering, footprinting, scanner and recon tool written in Python 3. It collects DNS, whois, port scans, HTTP headers, and more to provide a target overview. Runs on Linux with Python 3.

VoidAuth

VoidAuth

License: AGPL-3.0


Description:

VoidAuth is an open-source SSO and user-management provider for self-hosted apps. It offers OpenID Connect, ForwardAuth proxy support, LDAP directory services, user and groups management, invitations, self-registration, MFA, passkeys, and branding customization, using PostgreSQL or SQLite.

Caldera

Caldera

License: Apache-2.0


Description:

Caldera is an automated adversary emulation platform for cyber security. It enables red-teaming and incident response automation via MITRE ATT&CK, featuring a core asynchronous C2 server, REST API, and extensible plugins.

Logto

Logto

License: MPL-2.0


Description:

Logto is an open-source authentication and authorization infrastructure for SaaS and AI apps. It supports OIDC, OAuth 2.1, SAML, multi-tenancy, enterprise SSO, RBAC, and pre-built sign-in flows with SDKs for 30+ frameworks.

Rampart

Rampart

License: CC BY 4.0 (Creative Commons Attribution 4.0 International)


Description:

Rampart is a browser-based, local-first PII redaction library that uses an ONNX model and a deterministic recognizer to scrub personal data from user text before it leaves the browser, shipped as an npm package with local weights.

Infisical

Infisical

License: MIT


Description:

Infisical is an open-source security platform for secrets, certificates, and privileged access management, enabling centralized secrets across environments with rotation and auditing.

DarkMoon

DarkMoon

License: GNU General Public License v3.0 (GPL-3.0)


Description:

DarkMoon is an open-source AI-powered autonomous penetration testing platform that orchestrates multi-agent security operations to automate vulnerability discovery and reporting across web, cloud, AD and Kubernetes environments.