The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
Repository Index
47,133 repositories indexed
1–13 of 13 · Most stars
Community curated list of templates for the nuclei engine to find security vulnerabilities.
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
🔒Unified API for password hashing algorithms
Investigate suspicious activity by visualizing Sysmon's event log
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
Add a layer of active defense to your cloud applications.
A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
A secure, client-side tool to broadcast a signed Bitcoin (BTC) transaction from an air-gapped wallet. Fetch UTXOs, regenerate QR codes, and submit raw hex transactions safely.
Open-source PocketBase security auditor: detects empty rules, the @request.auth.id != trap, true literals. Active probe confirms leaks live.