StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
Repository Index
47,133 repositories indexed
73–96 of 168 · Most stars
Collection of almost 40.000 javascript malware samples
Enables client-side applications to dance OAuth with GitHub.
FTP client for Node.js, supports FTPS over TLS, passive mode over IPv6, async/await, and Typescript.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
Fast and dependency-free cryptographic hashing library for node.js and browsers (supports MD5, SHA1, SHA256, SHA512, RIPEMD, HMAC)
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
A tool for studying JavaScript malware.
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Tiny hashing module that uses the native crypto API in Node.js and the browser
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
The Ultimate Boilerplate for Products.
🔒Unified API for password hashing algorithms
A front-end JavaScript toolkit for creating DNS rebinding attacks.
DNS Rebinding Exploitation Framework
Connect to applications on EOS, Ethereum, and Tron. Exchange tokens with ease. Manage your assets safely. All in a simple to use interface.
Multi-agent orchestration platform for Gemini CLI, Claude Code, Codex, and Qwen Code — 39 specialists, parallel subagents, persistent sessions, and built-in code review, debugging, security, SEO, accessibility, and compliance tools
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
In-browser falling-sand simulation game with over 500 elements and thousands of reactions.
A Lightweight Pure JavaScript Captcha for Node.js. No C/C++, No ImageMagick, No Canvas.
A starter project for next js with authentication - Contains React 17 + Typescript + Tailwind CSS 2 + React Query 3 + GitHub Auth + LinkedIn Auth + Password-less Auth + Fauna DB + ESLint + Prettier + Husky
Mad science p2p pipe across the web using webrtc that uses your Github private/public key for authentication and a signalhub for discovery
Investigate suspicious activity by visualizing Sysmon's event log
A powerful and user-friendly browser extension that streamlines investigations for security professionals.