DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
Repository Index
47,133 repositories indexed
1–19 of 19 · Most stars
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- nuclei-templates
- nuclei
- bugbounty
- security
Program for determining types of files for Windows, Linux and MacOS.
- debugger
- detect
- unpacker
- disassembler
Socket-based TS/JavaScript API for WhatsApp Web
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
- mobile-security
- android-security
- frida
- reverse-engineering
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
- bugbounty
- security
- security-tools
- mobile-security
The Ultimate Boilerplate for Products.
- boilerplate
- meteor
- meteorjs
- nodejs
DNS Rebinding Exploitation Framework
Custom apps for the BMW MGU / iDrive 7 head unit (shift lights, virtual dyno, brake and drag timers, G-meter, fault scanner) plus an SDK kit to build and install your own.
- automotive
- bmw
- car-hacking
- head-unit
Investigate suspicious activity by visualizing Sysmon's event log
- security
- kibana
- elasticsearch
- sysmon
The JavaScript Crypto Library provides web developers with an extensive and efficient set of cryptographic functions. The library aims to obtain maximum execution speed while preserving modularity and reusability. The library is released as open source under a BDS license.
Does their story hold up? Paste what a seller, recruiter or landlord told you and check it against public records in thirty seconds, with proof saved for every reason.
- desktop
- due-diligence
- evidence
- fraud
Follow stolen crypto hop by hop across Bitcoin, Ethereum, TRON, BNB Chain and Solana. Labels where the money landed, keeps proof for every clue, writes the report.
Check a seller, recruiter or landlord against 3,400+ public sources before you trust them. A verdict in plain words and a saved receipt behind every finding. Runs on your PC.
TranslatedFush Vue MCP — Vue frontend reverse engineering + web security testing tool (Chrome extension + MCP server, 91 tools)
Web interface to explore Suricata EVE outputs
- attack-defense-ctf
- ctf
- network-monitor
- suricata
POMjs is a random password generator in HTML and pure Javascript with no cookies and no trackers. It has been translated into several languages.
Secure terminal-based IDE for local JS development
Capture, inspect, and replay webhooks with 90-day history + signature verification. Built on Cloudflare Workers + D1.