Repository Index

Free cross-platform password manager compatible with KeePass

• keeweb
• keepass
• security
• password-manager

CAUTION: END OF SUPPORT ON 14 AUG 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.

• asn1
• x509
• certificate
• crl

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

• nodejs
• owasp-top-ten
• javascript
• docker

🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.

• cve-scanner
• mcp-server
• mcp-tools
• osv

libsodium compiled to Webassembly and pure JavaScript, with convenient wrappers.

• libsodium
• javascript
• cryptography
• crypto

Documenting the unofficial and internal Steam Web API

• documentation
• docs
• wiki
• api-documentation

Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.

• coupons
• vouchers
• conventional-commits
• apprise

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity

WebAppSec Content Security Policy

A basic flask based Outlook Web Honey pot

• owa
• honeypot

Modular web-application honeypot platform built using go and gin

• cti
• cyber-threat-intelligence
• golang
• honeypot

A nodejs web application honeypot

Client-side AES-256-GCM zero-knowledge encryption library. Browser-native Web Crypto API, no dependencies. Powers FileShot.io.

• aes-256
• aes-256-gcm
• browser-encryption
• client-side-encryption

Blazor WebAssembly Standalone App with OIDC Authentication

• blazor-webassembly
• keycloak-provider
• oidc-authentication