94 Repositories
JavaScript Security-Plus Libraries
Use Cloudflare Gateway DNS/VPN to block ads, malware and tracking domains - free alternative to NextDNS, Pi-hole and Adguard
Cloudflare Gateway Pi-hole Scripts (CGPS) Cloudflare Gateway allows you to create custom rules to filter HTTP, DNS, and network traffic based on your
StarkNet support extension for VSCode. Visualize StarkNet contracts: view storage variables, external and view functions, and events.
StarkNet Explorer extension This VSCode extension quickly shows relevant aspects of StarkNet contracts: Storage variables of the current contract, and
Beautiful Visualizations For Your App's Dependencies 🧭
Beautiful Visualizations For Your App's Dependencies 🪱 Outputs SVGs Powered by D3 Overlays security vulnerabilities Works with npm & yarn Made by the
POC OF CVE-2022-21970
CVE-2022-21970 Description Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This vulnerability allows an attacker to execute java
a tweaked hackchat client. aka hackchat++.
hackchat-client-plus A tweaked hackchat client. aka hackchat++. Most code are from https://github.com/hack-chat/main. Hosted at https://hcer.netlify.a
EL/ASI: Encrypt Locally, Account Secure Interchange
EL/ASI: Local App Security Protocol EL/ASI (Encrypt Locally, Account Secure Interchange) defines a protocol for protecting and exchanging data in loca
A browser extension to test the most basic security issues.
Ninja-Hacker-Cat Sidebar für Firefox This firefox extension can check your website for the most basic security issues and data leaks. It's an easy way
⛴️ Docker extension for deepfence/SecretScanner 🔐
SecretScanner Docker Extension How to install in Docker Desktop ? Note: Method to install this extension will change once SecretScanner extension is a
Simple and customizable security middleware for GraphQL servers in Deno.
GuarDenoQL Simple and customizable security middleware for GraphQL servers in Deno Features Integrates with an Opine server in a Deno runtime. Enables
Improve the security of your API by detecting common vulnerabilities as defined by OWASP and enforced with Spectral.
Spectral OWASP API Security Scan an OpenAPI document to detect security issues. As OpenAPI is only describing the surface level of the API it cannot s
Monitor your code for exposed API keys, tokens, credentials, and high-risk security IaC misconfigurations
Spectral VS Code extension The Spectral VS Code extension is a tool for developers that want to catch security issues (such as credentials, tokens and
Easy auditing & sandboxing for your JavaScript dependencies 🪱
Easy auditing & sandboxing for your JavaScript dependencies 🪱 TL;DR Sandworm intercepts all sensitive Node & browser APIs, like child_process.exec or
Full dynamic tool kit that is capable of deobfuscating and producing a javascript representation of Shape's Virtual Machine obfuscation
Shape Security Decompiler Tool-Kit This tool kit is capable of dynamically deobfuscating all versions of shape security's virtual machine interpreter
Infisical — Sync your .env securely in seconds.
Infisical Infisical is a simple, end-to-end encrypted secrets manager for your .env files. It enables teams to securely sync and manage .env files in
High-quality QR Code generator library in Java, TypeScript/JavaScript, Python, Rust, C++, C.
QR Code generator library Introduction This project aims to be the best, clearest QR Code generator library in multiple languages. The primary goals a
Coverage-guided, in-process fuzzing for the Node.js
Jazzer.js Jazzer.js is a coverage-guided, in-process fuzzer for the Node.js platform developed by Code Intelligence. It is based on libFuzzer and brin
Metlo is an open-source API security platform.
Metlo API Security Secure Your API. Metlo is an open-source API security platform Create an Inventory of all your API Endpoints. Proactively test your
Device.js is a JavaScript library to detect device, viewport, and browser information using plain JavaScript.
Device.js Device.js is a JavaScript library to detect device, viewport, and browser information using plain JavaScript. Compatibility Works with all m
TypeScript + Nextjs + Tailwind = TNT🧨 (plus Prettier and ESLint configuration).
Bye bye next boilerplate, welcome to TNT! About This is TNT, Nextjs boilerplate powered by Typescript, Tailwind. This template also has customized ESL
Shield is a development framework for circom developers. The core reason is to provide libraries, plugins, and testing tools to ensure code quality and security.
SHIELD Shield is a development framework for circom developers but we plan it to other languages such as CAIRO, SNARKYJS etc. The core reason is to pr
Best fast responsive discord anti nuke bot made in javascript using Discord JS@v13
Security Plus Security Plus is an advance anti nuke bot for discord server , Developed in JavaScript by using discord.js@v13 , Security Plus don't all
🛡️ Dead-simple, yet highly customizable security middleware for Apollo GraphQL servers and Envelop 🛡️
GraphQL Armor 🛡️ GraphQL Armor is a dead-simple yet highly customizable security middleware for various GraphQL server engines. Contents Contents Sup
Check the strength of your password simply and quickly, and with optional UI indicators
Check the strength of your password simply and quickly, and with optional UI indicators. Lock Steel is lightweight, has no dependencies and is connected with the UI elements. Just pure CSS and VanillaJS.
The open-source security lake platform for AWS
The open-source security lake platform for AWS. Website | Docs | Community What is Matano? Matano is an open source security lake platform for AWS. It
Snippets for securing, transforming, and optimizing GraphQL APIs.
StepZen Snippets Welcome! StepZen is a unique and declarative way to build & run any-sized Graph in minutes. Explore the docs View Demo Report Bug Req
An enhanced VSCode extension for the Move programming language.
Move Analyzer Plus Provides language support for the Move programming language. Install on the VSCode Extension Marketplace: Move Analyzer Plus on the
A curated collection of all country flags in SVG — plus the CSS for easier integration
flag-icons A curated collection of all country flags in SVG — plus the CSS for easier integration. See the demo. Install You can either download the w
REST API complete test suite using openapi.json
Openapi Test Suite Objective This package aims to solve the following two problems: Maintenance is a big problem to solve in any test suite. As the AP
This is a demo project for the SecTester JS SDK framework, with some installation and usage examples
SecTester SDK Demo Table of contents About this project About SecTester Setup Fork and clone this repo Get a Bright API key Explore the demo applicati
CTF (Capture The Flag) is a type of information security competition that challenges contestants to find solutions or complete various tasks.
WHAT IS CTF? CTF (Capture The Flag) is a type of information security competition that challenges contestants to find solutions or complete various ta
Restream is a module that allows you to create a stream of an audio/video file from the Firebase storage, protected from direct download through the client-side.
nuxt-restream Restream is a module that allows you to create a stream of an audio/video file from the Firebase storage, protected from direct download
Fixes code dependency issues 🤼♀️
Codependence 🤼♀️ Codependence is a JavaScript utility CLI or node tool for checking specified dependencies in a project to ensure dependencies are u
From the Linux Foundation office in New York City, welcome to The Untold Stories of Open Source
From the Linux Foundation office in New York City, welcome to The Untold Stories of Open Source. Each week we explore the people who are supporting Open Source projects, how they became involved with it, and the problems they faced along the way.
basic dissembler for Kasada's virtual machine obfuscation
Kasada Dissembler A simple kasada dissembler which is capable of tracing through and executing every single opcode in kasada's bytecode and then loggi
Ready to manipulate partitions file? Create a custom partition, apply custom security system, hide the partition and share your hidden data on the www
Paranoia 💊 Ready to manipulate partitions file? Create a custom partition, apply custom security system, hide the partition and share your hidden dat
It shows how to generate and use temparary security credential using AWS STS.
AWS STS를 이용한 Temparary security credential 활용하기 Lambda의 Function URL와 같이 IAM을 이용하여 REST api를 호출할때는 보안상 Temparary security credential를 고려해 볼 수 있습니다. 여기
📬 A quick comparison of private and / or secure email providers
📬 Email Comparison A comparison table of private and / or secure email providers Live App The app can be accessed at: lissy93.github.io/email-compari
A novel approach for security and user experience of Graphical Password Authentication.
Graphical Password Authentication Alohomora Harry Potter themed (not really) Graphical Password Authentication Flowchart and Architecture Solution Dem
Security tool + attack database used to take quick action against newly-discovered vulnerabilities in the blockchain.
SolidGuard Version: v1.0.1 SolidGuard is a Blockchain Security tool catered towards organizations who manages decentralized applications on the Ethere
A chrome extension to add some neat features to pulp!
Pulp+ A Chrome extension that extends Pulp with some extra features! Important: This plugin is in no affiliated with Panic. Lot's of the features belo
E-Commerce solution for security of databases and transactions.
commerce_new_era AMAÇ Amacımız günümüzde E-Ticaret sitelerinde bulunan sahte ürünlerin ve mağduriyetlerin önüne geçmektir. Bunu yapmak için Blockchai
CloudSecWiki is a cloud security oriented knowledge base maintained by HuoCorp.
CloudSecWiki CloudSecWiki is a cloud security oriented knowledge base maintained by HuoCorp. CloudSecWiki web address：cloudsec.huoxian.cn Local Deploy
Password Generator - A fast, simple and powerful open-source utility tool for generating strong, unique and random passwords
A fast, simple and powerful open-source utility tool for generating strong, unique and random passwords. Password Generator is free to use as a secure password generator on any computer, phone, or tablet.
Hacking Prodigy, the math game.
Website • Discord • Installation • YouTube How to install See our Quickstart Guide. Info We aren't evil. We aren't evil. Everything is open source, fo
npm registry proxy with on-the-fly filtering
npm-registry-firewall 📦 📦 🔥 npm registry proxy with on-the-fly filtering Key Features Restricts access to remote packages by predicate: name org ve
Projeto de Botnet com Python, Websockets, Async e Javascript
A3 - Botnets Este é um repositório onde documentarei todo o processo de pesquisa e desenvolvimento de uma botnet do zero com python, websockets e asyn
Shifty is a tiny zero-dependency secrets generator, built for the web using TypeScript.
Shifty is a tiny zero-dependency secrets generator, built for the web using TypeScript. Installation yarn add @deepsource/shifty Usage Shifty is built
Disallow form tags without explicit method="post"
eslint-plugin-require-form-method-post Disallow form tags without explicit method="post" Prevents sensitive data appearing on URLs Allow form tags wit
A quick and easy to use security reconnaissance webapp tool, does OSINT, analysis and red-teaming in both passive and active mode. Written in nodeJS and Electron.
ᵔᴥᵔ RedJoust A quick and easy to use security reconnaissance webapp tool, does OSINT, analysis and red-teaming in both passive and active mode. Writte
A client for QQ and more.:electron:
Icalingua++ Icalingua++ 是 Icalingua 的分支，為已經刪除的 Icalingua 提供有限的更新，同時歡迎社區提交PR。 Icalingua 这个名字是日语中「光」和拉丁语中「语言」的组合。 本项目希望为 Linux 打造一个会话前端框架，通过实现 Adapter 后
Project Security Term 3.2 @ PIM
Security This project was generated with Angular CLI version 12.2.10. Development server Run ng serve for a dev server. Navigate to http://localhost:4
Been interested, studying, and developing blockchain security with a Zero Knowledge Proof (ZKP) and create a prototype on the current issue with Philippine's upcoming election. 📥
Implementation of Zero Knowledge Proofs in Cryptographic Voting 😎 Reference: Cryptographic Voting – A Gentle Introduction Overview 👨🏻💻 The main i
How to implement Step-up Authentication using Amazon Cognito
How to implement Step-up Authentication using Amazon Cognito This repository contains accompanying source code for the AWS Blog post, How to implement
Audio visual mitigation of Rickrolls using computer vision.
Computer Vision Rick Astley Muter This project utilizes an advanced computer vision model to mute your speakers when Rick Astley is detected on your s
Hashing library for Nest.Js
A progressive Node.js framework for building efficient and scalable server-side applications. Description Hashing library for NestJS. Installation $ n
Easy-to-use tool to inform you about potential risks in your project dependencies list
sdc-check Easy-to-use tool to inform you about potential risks in your project dependencies list Usage Add to your project Add new npm command to scri
🚀 Send a load of requests with nodejs using cluster and with/without Tor for anonymisation 🙈
Accumulator 🚀 Send a load of requests with nodejs using cluster and with/without Tor for anonymisation 🙈 ⚠️ Disclamer, This repo has been created fo
Node.js Express + MySQL vulnerable boilerplate project
Node.js Express + MySQL vulnerable boilerplate project
GitHub Advisory Database RSS Feeds.
github-advisory-database-rss RSS Feeds for GitHub Advisory Database. Usage Visit https://azu.github.io/github-advisory-database-rss/ Subscribe RSS Fee
🤖 An action that fetches the list of malicious domains on Discord in different providers and creates/updates a JSON file with them from time to time.
Discord Guardian Action 🤖 This action fetches the list of malicious domains on Discord in different providers and creates/updates a JSON file with t
spartacus是一个基于Spring Boot 2.3.x、Spring Cloud Hoxton.SR5、Spring Security 2.3.x、OAuth2.0、Python3等开源框架构建的分布式系统
spartacus是一个基于Spring Boot 2.3.x、Spring Cloud Hoxton.SR5、Spring Security 2.3.x、OAuth2.0、Python3等开源框架构建的分布式系统，亦是一个功能完备的微服务脚手架。
vite+vue3.2+setup+elementPlus+eslint+js+stylelint
前期准备工作，npm包和vscode配置 ！！！很重要，关乎整个Vue3开发阶段的代码提示 Volar使用 使用Vue3开发需要禁用vscode插件Vetur 然后安装 Volar(Vue Language Features)，这样Vue3代码提示即使是使用js开发也非常友好 如果volar没有任何
LunaSec - Open Source Security Software built by Security Engineers. Scan your dependencies for Log4Shell, or add Data Tokenization to prevent data leaks. Try our live Tokenizer demo: https://app.lunasec.dev
Our Software We're a team of Security Engineers on a mission to make awesome Open Source Application Security tooling. It all lives in this repo. Here
As you can tell from the name of the Bots+, it looks like a Members+ bot
Info As you can tell from the name of the Bots+, it looks like a Members+ bot. Usage First step: "!help" You must set your language with this command.
Demo showcasing information leaks resulting from an IndexedDB same-origin policy violation in WebKit.
Safari 15 IndexedDB Leaks Description This demo showcases information leaks resulting from an IndexedDB same-origin policy violation in WebKit (a brow
Awesome critique of crypto / web3. Curated list of high quality critique plus background. Seek to be as constructive as possible.
Awesome critique of crypto/web3 Awesome critique of crypto/web3, etc. Contributions are welcome. Critique General Stephen Diehl series - https://www.s
Security tool used to take quick action against newly-discovered vulnerabilities in the blockchain.
SolidGuard is a Blockchain Security tool catered towards organizations who manages decentralized applications on the Ethereum blockchain. It is an attack database for documenting all major hacks that happened in the blockchain, and is also used to notify or pause decentralized applications affected by the attacks published in the database.
Markdown Plus is a markdown editor with extra features
Markdown Plus Markdown Plus ("M+" or "mdp" for short) is a markdown editor with extra features. Online demo: mdp.tylingsoft.com Apps We currently don'
Animate Plus is a JavaScript animation library focusing on performance and authoring flexibility
Animate Plus Animate Plus is a JavaScript animation library focusing on performance and authoring flexibility. It aims to deliver a steady 60 FPS and
Detect npm packages by author name in your package-lock.json or yarn.lock.
detect-package-by-author Detect npm packages by author name in your package-lock.json or yarn.lock. Install Install with npm: # Not Yet Publish # npm
Cloud security platform web with steampipe
cloud-security-platform-web-with-steampipe Home Tech Stacks Node.js + MongoDB + Steampipe Usage If you use ec2, no need credentils, config files. $ cd
Secure-electron-template - The best way to build Electron apps with security in mind.
secure-electron-template A current electron app template with the most popular frameworks, designed and built with security in mind. (If you are curio
Base62-token.js - Generate & Verify GitHub-style & npm-style Base62 Tokens
base62-token.js Generate & Verify GitHub-style & npm-style Secure Base62 Tokens Works in Vanilla JS (Browsers), Node.js, and Webpack. Online Demo See
Browser extension for generating HOTP passcodes for Duo Security Multi-Factor Authentication
duo-extension Browser extension for generating HOTP passcodes for Duo Security multi-factor authentication. Compatible with Firefox and Chromium-based
Disney+ clone with React + Redux + Firebase auth and Firestore
Disney+ (Disney+ Clone) Test it out: Disney+ Disney+_720p.mov Description Beautiful Disney+ clone built with React.js and styled components. Managed R
It's a react-redux app with firebase used as the database
This project was bootstrapped with Create React App, using the Redux and Redux Toolkit template. Available Scripts In the project directory, you can r
A simple Multi Guild Modmail Bot coded in v13 using the enmap Database Working on any host, like repl.it or vps! Its fast and working bug free + Security options!
Multiguild-Modmail A simple Multi Guild Modmail Bot coded in v13 using the enmap Database Working on any host, like repl.it or vps! Its fast and worki
Next-gen mobile first analytics server (think Mixpanel, Google Analytics) with built-in encryption supporting HTTP2 and gRPC. Node.js, headless, API-only, horizontally scaleable.
Introduction to Awacs Next-gen behavior analysis server (think Mixpanel, Google Analytics) with built-in encryption supporting HTTP2 and gRPC. Node.js
A web client port-scanner written in GO, that supports the WASM/WASI interface for Browser WebAssembly runtime execution.
WebAssembly Port Scanner Written in Go with target WASM/WASI. The WASM main function scans all the open ports in the specified range (see main.go), vi
Keep your sensitive information out of chat logs, emails, and more with heavily encrypted secrets.
Free encrypted secret sharing for everyone! This application is to be used to share encrypted secrets cross organizations, or as private persons. Hemm
NPM Package that simplifies Auth with Google OAuth2 🔐
Node Google OAuth2 🔐 A simple authentication flow for Google OAuth2 Explore the docs » Report Bug Table of Contents About The Project Getting Started
🎉 基于 vite 2.0 + vue 3.0 + vue-router 4.0 + vuex 4.0 + element-plus 的后台管理系统vue3-element-admin
vue3-element-admin 🎉 基于 Vite 2.0 + Vue3.0 + Vue-Router 4.0 + Vuex 4.0 + element-plus 的后台管理系统 简介 vue3-element-admin 是一个后台前端解决方案，它基于 vue3 和 element-plu
🎉🎉使用Vite + Vue3 + TypeScript + Element-plus + Mock开发的后台管理系统🎉🎉
Vite-Vue-Admin 介绍 Cli 配置 vue3.X vuex@4 vue-router@4 vite@2 typescript mock 内置 element-plus 二开封装 upload-file (文件上传，支持指定文件格式，文件大小) powerful-table (多功能表格
A tool to check for response status codes with ease
About Archer Archer is an cross-platform tool developed using Nodejs which focuses on the reconnaissance phase of a penetration test. Got a bunch of l
Scheme flooding vulnerability: how it works and why it is a threat to anonymous browsing
Scheme flooding vulnerability: how it works and why it is a threat to anonymous browsing
Gulp.js command execution for humans
Gulp.js command execution for humans. As opposed to similar plugins or to child_process.exec(), this uses Execa which provides: Better Windows support
libcurl bindings for Node.js
node-libcurl The fastest URL transfer library for Node.js. libcurl bindings for Node.js. libcurl official description: libcurl is a free and easy-to-u
Open source rich text editor based on HTML5 and the progressive-enhancement approach. Uses a sophisticated security concept and aims to generate fully valid HTML5 markup by preventing unmaintainable tag soups and inline styles.
This project isn’t maintained anymore Please check out this fork. wysihtml5 0.3.0 wysihtml5 is an open source rich text editor based on HTML5 technolo
Open source rich text editor based on HTML5 and the progressive-enhancement approach. Uses a sophisticated security concept and aims to generate fully valid HTML5 markup by preventing unmaintainable tag soups and inline styles.
This project isn’t maintained anymore Please check out this fork. wysihtml5 0.3.0 wysihtml5 is an open source rich text editor based on HTML5 technolo
:lock: Secure localStorage data with high level of encryption and data compression
secure-ls Secure localStorage data with high level of encryption and data compression. LIVE DEMO Features Secure data with various types of encryption
A solid, fast Promises/A+ and when() implementation, plus other async goodies.
when.js When.js is a rock solid, battle-tested Promises/A+ and when() implementation, including a complete ES6 Promise shim. It's a powerful combinati
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
DOMPurify DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's also very simple to use and get started with
📗 How to write cross-platform Node.js code
How to write cross-platform Node.js code. Why you should care: according to the 2018 Node.js user survey, 24% of Node.js developers use Windows locall
Elegant and all-inclusive Node.Js web framework based on TypeScript. :rocket:.
https://foalts.org What is Foal? Foal (or FoalTS) is a Node.JS framework for creating web applications. It provides a set of ready-to-use components s