A boilerplate for Node.js web applications
Repository Index
59,621 visible repositories in the index
1–24 of 46 · Most stars
Simple, unobtrusive authentication for Node.js.
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
The open-source, privacy-friendly CAPTCHA you host yourself. Bots and AI agents out, people in.
- captcha
- javascript
- proof-of-work
- antispam
A tiny (18.5 kB gzip), zero-dependency, Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
A professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for browser-based intelligence gathering, hardware fingerprinting, and security research.
- browser-security
- cybersecurity
- de-anonymization
- ethical-hacking
DNS over HTTPS config profiles for iOS & macOS
P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
- vulnerabilities
- scanner
- firefox-extension
- grunt-plugins
JavaScript library to zip and unzip files supporting parallel compression, web streams, pluggable compression engines, zip64, split files, data encryption, and deflate64 decompression.
- zip
- javascript
- zip64
- browser
Privacy Badger is a browser extension made by EFF to stop companies from spying on you online
- privacy
- javascript
- webextension
- tracking
OS X Auditor is a free Mac OS X computer forensics tool
A library for implementing authentication/authorization in Ember.js applications.
A DNS rebinding attack framework.
- dns-rebinding
- dns
- vulnerability
- attack
Digital Forensics Investigation Platform
- dfir
- security
- incident-response
- artifacts
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
- bugbounty
- security
- security-tools
- mobile-security
Enables client-side applications to dance OAuth with GitHub.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Tiny hashing module that uses the native crypto API in Node.js and the browser
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
- xss
- bxss
- security
- bugbounty
🔒Unified API for password hashing algorithms