Loads environment variables from .env for nodejs projects.
- dotenv
- environment-variables
- javascript
- node
Repository Index
47,133 repositories indexed
1–24 of 26 · Most stars
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
- security
- limit
- ratelimter
- bruteforce
Strategies to Gekko trading bot with backtests results and some useful tools.
- gekko
- strategies
- gekko-strategies
- gekko-backtest
A DNS rebinding attack framework.
- dns-rebinding
- dns
- vulnerability
- attack
A front-end JavaScript toolkit for creating DNS rebinding attacks.
DNS Rebinding Exploitation Framework
Custom apps for the BMW MGU / iDrive 7 head unit (shift lights, virtual dyno, brake and drag timers, G-meter, fault scanner) plus an SDK kit to build and install your own.
- automotive
- bmw
- car-hacking
- head-unit
Slider captcha support mobile
Sandia Cyber Omni Tracker (SCOT)
- perl
- javascript
- cyber-security
- incident-response
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
A Flask app template with integrated SQLAlchemy, authentication, and Bootstrap frontend
🤖 Repeat tests. Repeat tests. Repeat tests.
- testing
- test
- test-automation
- data-driven
A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.
A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
ESPot - ElasticSearch Honeypot
Secure terminal-based IDE for local JS development
🎧 Update a pinned gist to show your top Spotify tracks/artists.
- pinned-gist
- gistbox
- spotify-box
- spotify
Express honeypot for remote file inclusion (RFI) and local file inclusion (LFI).
A scriptable Widget showing your personal Crypto-Balances
- crypto
- cryptocurrency
- balance
- money
Authentication and Authorization module of HTTP/MQTT/CoAP Brokers based on NodeJS for IoT or Internet of Things.
🔌 OSINT & Security Extensions for Marshall Browser - Installable plugins for enhanced reconnaissance and security testing
nodejs ftp honeypot