A boilerplate for Node.js web applications
Repository Index
72,862 visible repositories in the index
1–24 of 103 · Most stars
⚙️ NGINX config generator on steroids 💉
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
- osint
- social-media
- analyzer
- username
Simple, unobtrusive authentication for Node.js.
Loads environment variables from .env for nodejs projects.
- dotenv
- environment-variables
- javascript
- node
JsonWebToken implementation for node.js http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- nuclei-templates
- nuclei
- bugbounty
- security
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
Program for determining types of files for Windows, Linux and MacOS.
- debugger
- detect
- unpacker
- disassembler
Socket-based TS/JavaScript API for WhatsApp Web
The open-source, privacy-friendly CAPTCHA you host yourself. Bots and AI agents out, people in.
- captcha
- javascript
- proof-of-work
- antispam
[DEPRECATED] Stanford Javascript Crypto Library
A tiny (18.5 kB gzip), zero-dependency, Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
Reverse engineering WhatsApp Web.
- node
- whatsapp-web
- encryption
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
Simple session middleware for Express
- javascript
- nodejs
- expressjs
- middleware
A professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for browser-based intelligence gathering, hardware fingerprinting, and security research.
- browser-security
- cybersecurity
- de-anonymization
- ethical-hacking
🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL unpinning for all apps.
- frida
- android
- xposed
- apk
TranslatedOpen-source SSL certificate management tool; fully automatic certificate application, update, and renewal; wildcard certificate and wildcard domain certificate application; automated certificate deployment to Alibaba Cloud, Tencent Cloud, hosts, Synology, and BaoTa (宝塔); HTTPS certificates, PFX certificates, DER certificates, TLS certificates, nginx certificates with automatic renewal and automatic deployment
- certbot
- letencrypt
- ssl-certificate
- automation
TranslatedDeepSeek v4.1 flash strongest reverse engineering tool (Infinite 5th Generation) Please give a Star and bookmark ⭐ Everyone is welcome to submit improvements to the project
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
- vulnerabilities
- scanner
- firefox-extension
- grunt-plugins
OAuth Proxy
Advanced vm/sandbox for Node.js