A boilerplate for Node.js web applications
Repository Index
54,141 visible repositories in the index
1–24 of 24 · Most stars
⚙️ NGINX config generator on steroids 💉
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- nuclei-templates
- nuclei
- bugbounty
- security
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
The Browser Exploitation Framework Project
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js
- openid
- oidc
- openid-provider
- openid-connect
Cloud Security Posture Management (CSPM)
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
- mobile-security
- android-security
- frida
- reverse-engineering
Exploit chain for PS5 7.00 - 13.60
The best way to build Electron apps with security in mind.
A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
- frida
- mobile
- pentest-tool
- android
The Ultimate Boilerplate for Products.
- boilerplate
- meteor
- meteorjs
- nodejs
DNS Rebinding Exploitation Framework
A starter project for next js with authentication - Contains React 17 + Typescript + Tailwind CSS 2 + React Query 3 + GitHub Auth + LinkedIn Auth + Password-less Auth + Fauna DB + ESLint + Prettier + Husky
- vercel
- nextjs
- nextjs-starter
- nextjs-boilerplate
YakTrace reveals when multiple Yik Yak posts were made by the same anonymous account and organizes them into a local PDF dossier. Built on the sidechat.js API project.
- 0-day
- 0-day-exploit
- proof-of-concept
- vulnerability
Paste a wallet or a transaction hash and follow stolen crypto to the exchange that can freeze it. Works across Bitcoin, Ethereum, TRON, BNB Chain and Solana. One-click report.
- blockchain
- crypto
- exchange
- osint
Android Malware Sandbox
Follow stolen crypto hop by hop across Bitcoin, Ethereum, TRON, BNB Chain and Solana. Labels where the money landed, keeps proof for every clue, writes the report.
Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts
- haveibeenpwned
- cloudflare
- zxcvbn
- serverless
tr4mpass: Multi-path iOS exploitation framework for A5-A17 with checkm8/checkm9 and forensic gatheri
- a12-bypass
- activator
- bypassing
- checkm8
Python API Monitor for Android apps
- android
- frida
- api
- monitoring
Simple Connect / Express Steam authentication library.
Express honeypot for RFI and LFI bots: 310 fake vulnerable URLs, logs IP, geolocation and payloads. Docker bait server or app.use() middleware.