ALL IN ONE Hacking Tool For Hackers
Repository Index
47,133 repositories indexed
1–24 of 32 · Most stars
Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
A UI library by WeChat official design team, includes the most useful widgets/modules.
Most advanced XSS scanner.
Source code for Hacker101.com - a free online web and mobile security class.
A list of resources for those interested in getting started in bug bounties
一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
jsoup: the Java HTML parser, built for HTML editing, cleaning, scraping, and XSS safety.
Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
Awesome XSS stuff
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors
XSS'OR - Hack with JavaScript.
A big list of Android Hackerone disclosed reports and other resources.
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
Cleans HTML to avoid XSS attacks
Addons for building multiplayer games with Godot
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
㊙️ AntiXSS | Protection against Cross-site scripting (XSS) via PHP
🔪Browser logic vulnerabilities :skull_and_crossbones:
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
Static XSS audit skill with 14 layers of checks for React, TypeScript, and JavaScript projects.