API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
- osint
- social-media
- analyzer
- username
Repository Index
47,133 repositories indexed
1–24 of 28 · Most stars
Simple, unobtrusive authentication for Node.js.
Loads environment variables from .env for nodejs projects.
- dotenv
- environment-variables
- javascript
- node
Socket-based TS/JavaScript API for WhatsApp Web
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
- vulnerabilities
- scanner
- firefox-extension
- grunt-plugins
OAuth Proxy
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
- security-vulnerabilities
- security
- vulnerabilities
- lighthouse
Static asset revisioning by appending content hash to filenames: `unicorn.css` → `unicorn-d41d8cd98f.css`
- gulp-plugin
- rev
- javascript
- hash
Lint an npm or yarn lockfile to analyze and detect security issues
- npm
- yarn
- lockfile
- lockfiles
FTP client for Node.js, supports FTPS over TLS, passive mode over IPv6, async/await, and Typescript.
- ftp
- ftps
- async-await
- promise
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
- clamscan
- file-scanner
- virus-scan
- docker-compose
A tool for studying JavaScript malware.
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Tiny hashing module that uses the native crypto API in Node.js and the browser
The Ultimate Boilerplate for Products.
- boilerplate
- meteor
- meteorjs
- nodejs
🔒Unified API for password hashing algorithms
Custom apps for the BMW MGU / iDrive 7 head unit (shift lights, virtual dyno, brake and drag timers, G-meter, fault scanner) plus an SDK kit to build and install your own.
- automotive
- bmw
- car-hacking
- head-unit
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
🤖 Repeat tests. Repeat tests. Repeat tests.
- testing
- test
- test-automation
- data-driven
Creates a readable stream producing cryptographically strong pseudo-random data using `crypto.randomBytes()`
- random-bytes
- random
- crypto
- pseudo-random-generator
Gulp.js command execution for humans
- gulp
- execa
- gulp-plugin
- gulpjs
Secure terminal-based IDE for local JS development
Detect whether a site is running behind Cloudflare.
- cloudflare
- waf
- detection
- nodejs
Express honeypot for remote file inclusion (RFI) and local file inclusion (LFI).