Best Go Tools & Libraries

bluemonday

github

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

meshbird

github

Distributed private networking

Stowaway

github

👻Stowaway -- Multi-hop Proxy Tool for pentesters

cariddi

github

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

SecretScanner

github

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

dockle

github

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

sso

github

sso, aka S.S.Octopus, aka octoboi, is a single sign-on solution for securing internal services

hardentools

github

Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.

kube-score

github

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.

ContainerSSH

github

ContainerSSH: Launch containers on demand

glauth

github

A lightweight LDAP server for development, home use, or CI

memguard

github

Software sandbox for storage of sensitive information in memory.

osv.dev

github

Open source vulnerability DB and triage service.

bearer

github

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Elkeid

github

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.

fosite

github

Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.

agent-deck

github

Terminal session manager for AI coding agents. One TUI for Claude, Gemini, OpenCode, Codex, and more.

piknik

github

Copy/paste anything over the network.

rita-legacy

github

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

Picocrypt

github

A very small, very simple, yet very secure encryption tool.

fibratus

github

Adversary tradecraft detection, protection, and hunting

brutespray

github

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

cloudfox

github

Automating situational awareness for cloud penetration tests.

secure

github

HTTP middleware for Go that facilitates some quick security wins.