Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
Repository Index
47,133 repositories indexed
25–48 of 69 · Most stars
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
gpt6 Astra-claude-grok4.7-deepseekv4.1flash-glm5.3-gemini破甲越狱 · 冷咖啡 BREAK//OPEN 工作台
The best way to build Electron apps with security in mind.
📗 How to write cross-platform Node.js code
Digital Forensics Investigation Platform
Lint an npm or yarn lockfile to analyze and detect security issues
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
The Ultimate Boilerplate for Products.
🔒Unified API for password hashing algorithms
A front-end JavaScript toolkit for creating DNS rebinding attacks.
DNS Rebinding Exploitation Framework
Multi-agent orchestration platform for Gemini CLI, Claude Code, Codex, and Qwen Code — 39 specialists, parallel subagents, persistent sessions, and built-in code review, debugging, security, SEO, accessibility, and compliance tools
Investigate suspicious activity by visualizing Sysmon's event log
A powerful and user-friendly browser extension that streamlines investigations for security professionals.
Go on an educational Web security adventure!
Kraken: A multi-platform distributed brute-force password cracking system
Hashcat web interface
Sandia Cyber Omni Tracker (SCOT)
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.