Awesome GitHub RepositoriesHardware Authentication

This project is a cross-platform credential management suite designed to store sensitive information in encrypted local databases. It functions as a secure desktop application that provides a unified environment for organizing secrets, generating passwords, and managing multi-factor authentication tokens. By utilizing industry-standard file formats, the application ensures that stored credentials remain secure and interoperable across different operating systems. The software distinguishes itself through deep integration with hardware-backed security and system-level services. It supports phy

Quarkus is a Kubernetes-native Java framework designed for building high-performance, memory-efficient applications. It utilizes ahead-of-time native compilation to transform Java code into standalone, optimized binaries that eliminate the need for a virtual machine, enabling rapid startup and reduced memory consumption. By performing code augmentation during the build phase, it shifts heavy processing tasks away from runtime, ensuring that applications are optimized for cloud-native environments. The framework distinguishes itself through a unified approach to reactive and imperative program

SuperTokens Core is an open-source, self-hosted authentication and identity management platform designed for deployment within private infrastructure. It provides a comprehensive suite for managing user accounts, roles, and secure authentication flows, utilizing a modular, recipe-based architecture that allows developers to enable specific security features without modifying the core codebase. The platform distinguishes itself through its robust multi-tenancy capabilities, which allow for the logical or physical isolation of user records and configuration settings across different organizatio

KeeWeb is a web-based password manager and vault that allows users to open and edit encrypted databases through a browser interface. It functions as a cross-platform tool for managing password vaults using the KeePass database format. The application provides a self-hosted password vault that can be deployed as a single HTML file or via Docker. It integrates with remote storage providers using OAuth to synchronize encrypted database files across multiple devices. The system includes capabilities for secure credential generation, two-factor authentication management through time-based one-tim

This project is a comprehensive hardware security guide for using YubiKey tokens to manage encryption, digital signatures, and secure authentication. It provides technical instructions for configuring hardware security modules to handle digital identity and cryptographic materials. The documentation focuses on the implementation of OpenPGP and SSH workflows, specifically covering the creation of master key hierarchies, the rotation of subkeys, and the use of hardware-backed keys for secure shell connections. It also details methods for verifying code authorship through signed Git commits and

PX4-Autopilot is a professional-grade flight control software stack designed for autonomous unmanned vehicles, including multicopters, fixed-wing aircraft, and vertical takeoff and landing platforms. It operates as a modular, real-time framework that decouples flight control logic from hardware drivers through a publish-subscribe middleware architecture. The system utilizes a deterministic microkernel runtime to execute time-critical flight control loops and sensor fusion tasks, ensuring stable navigation and vehicle operation. The platform distinguishes itself through a parameter-driven conf

VeraCrypt is a cross-platform disk encryption utility used to create encrypted file containers and secure entire disk partitions. It functions as a tool for full disk encryption and a manager for encrypted volumes, providing a means to protect sensitive data on local disks and removable media across multiple operating systems. The software is distinguished by its support for plausible deniability, allowing the creation of hidden volumes nested within other encrypted volumes to conceal the existence of data. It also implements hardware-based access control, requiring physical security tokens,

This project is an open-source software development kit and framework for implementing the Matter smart home standard. It provides a universal IPv6-based application layer and a cluster-based data model to ensure interoperability between diverse smart home devices and controllers. The system is distinguished by its multi-transport network abstraction, which maps Bluetooth LE, Thread, and Wi-Fi implementations to a common layer. It includes specialized tooling for secure device commissioning via QR codes and NFC, as well as a comprehensive over-the-air firmware update system for distributing s

यह प्रोजेक्ट Flipper Zero के लिए एक कस्टम फर्मवेयर है जो एक एम्बेडेड प्लगइन इकोसिस्टम, एक हार्डवेयर पेंटेस्टिंग टूलकिट और एक मल्टी-प्रोटोकॉल एमुलेशन लेयर प्रदान करता है। यह डिवाइस के ऑपरेटिंग सिस्टम को संशोधित करता है ताकि इसमें विस्तारित आवृत्ति रेंज के लिए एक Sub-GHz रेडियो सूट शामिल हो सके और सीधे हार्डवेयर पर थर्ड-पार्टी एप्लिकेशन बनाने और तैनात करने की क्षमता हो। फर्मवेयर डिवाइस की नेटिव क्षमताओं को एक Sub-GHz रेडियो सूट के माध्यम से विस्तारित करता है जो फैक्ट्री डिफ़ॉल्ट से परे आवृत्ति विस्तार और सिग्नल कैप्चर की अनुमति देता है। यह BadUSB और BLE कीबोर्ड के लिए विशेष एमुलेशन लागू करता है और मॉड्यूलर प्लगइन्स और गेम्स को निष्पादित करने के लिए एक समर्पित फ्रेमवर्क शामिल करता है। यह सिस्टम NFC और RFID प्रबंधन, इन्फ्रारेड डिवाइस कंट्रोल और UART सीरियल ब्रिजिंग सहित हार्डवेयर इंटरैक्शन के व्यापक क्षेत्रों को कवर करता है। यह पर्यावरणीय सेंसर निगरानी और वायु गुणवत्ता विश्लेषण के लिए टूल्स, साथ ही U2F विनिर्देश के माध्यम से हार्डवेयर-आधारित टू-फैक्टर ऑथेंटिकेशन भी प्रदान करता है। उपयोगकर्ता सोर्स कोड को निष्पादन योग्य प्लगइन्स में संकलित कर सकते हैं या रिमूवेबल स्टोरेज कार्ड के माध्यम से इंस्टॉलेशन के लिए संकुचित फर्मवेयर आर्काइव बना सकते हैं।

gocryptfs is a FUSE-based encrypted filesystem that transparently encrypts and decrypts file contents and filenames on disk. It uses block-level authenticated encryption with AES-GCM or AES-SIV-512, binding each block to its file header and offset for integrity, while obfuscating filenames with EME or AES-SIV wide-block ciphers using per-directory initialization vectors. The system derives all encryption keys and initialization vectors deterministically from a master key using HKDF and SHA256, enabling reproducible ciphertext for reliable backup and synchronization workflows. The project dist

This project is a technical resource and set of utilities designed to assist in unlocking the bootloader on Xiaomi devices. It provides a combination of guides, account qualification tools, and exam simulators to help users obtain the necessary permissions for device modification. The toolkit includes an interactive bootloader unlock exam simulator and a comprehensive database of correct responses and historical answer archives. These resources are used to study for and pass the official qualification tests required for unlocking. The project also provides utilities to detect account restric

Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and SQL resources. It functions as a secure gateway that validates human and workload identities using OIDC, SAML, and FIDO2 passkeys before granting access to internal applications and SaaS APIs. The system is distinguished by its secretless access broker, which injects credentials—such as API keys, passwords, and AWS Sigv4 signatures—at the gateway level so users can access databases and cloud resources without managing secrets. It further specializes in AI gateway administration,

Keyguard is a password manager application and secure vault designed for storing and organizing logins, passkeys, and sensitive data. It provides a multi-factor authentication vault that utilizes encrypted offline access to ensure credentials remain available without an internet connection. The application includes a dedicated SSH key manager and agent integration for generating and managing keys to access remote servers. It also features a password security auditor that analyzes vault entries to identify compromised, reused, or weak credentials. The system covers a broad range of security c

This project is a transparent proxy framework designed for the interception, analysis, and manipulation of secure shell traffic. By terminating client and server connections independently, it provides full visibility into encrypted sessions, allowing for the monitoring of authentication flows, file transfers, and command execution in real time. The tool distinguishes itself through a modular, plugin-based architecture that enables users to inject custom interception logic into the proxy workflow. It supports the creation of ephemeral environments and mock agents in memory, facilitating the si

This library provides a backend framework for implementing FIDO2-compliant authentication and passwordless login flows in Go applications. It serves as a server-side toolkit for managing hardware-backed identity verification, enabling developers to integrate secure, browser-based authentication protocols that utilize security keys and biometric sensors. The project distinguishes itself by offering comprehensive tools for credential lifecycle management and hardware attestation. It handles the registration and storage of public key metadata while enforcing strict security requirements, such as