Security · Go Tools

go-grpc-middleware

github

Golang gRPC Middlewares: interceptor chaining, auth, logging, retries and more.

spicedb

github

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

fleet

github

Open device management

osmedeus

github

A Modern Orchestration Engine for Security

gitrob

github

Reconnaissance tool for GitHub organizations

syzkaller

github

syzkaller is an unsupervised coverage-guided kernel fuzzer

pspy

github

Monitor linux processes without root permissions

openbao

github

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

aquatone

github

A Tool for Domain Flyovers

openfga

github

A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar

cameradar

github

Cameradar hacks its way into RTSP videosurveillance cameras

dalfox

github

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

gau

github

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

ligolo-ng

github

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

zrok

github

Secure internet sharing made simple.

interactsh

github

An OOB interaction gathering server and client library

kscan

github

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

gowitness

github

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

boundary

github

Boundary enables identity-based access management for dynamic infrastructure.

bluemonday

github

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

meshbird

github

Distributed private networking

Stowaway

github

👻Stowaway -- Multi-hop Proxy Tool for pentesters

cariddi

github

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

dockle

github

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start