Simple, unobtrusive authentication for Node.js.
Repository Index
47,133 repositories indexed
1–24 of 35 · Most stars
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
- vulnerabilities
- scanner
- firefox-extension
- grunt-plugins
Cloud Security Posture Management (CSPM)
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
- security
- limit
- ratelimter
- bruteforce
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
- mobile-security
- android-security
- frida
- reverse-engineering
Port of TweetNaCl cryptographic library to JavaScript
- crypto
- javascript
- authentication
- signature
A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
Digital Forensics Investigation Platform
- dfir
- security
- incident-response
- artifacts
Fast and dependency-free cryptographic hashing library for node.js and browsers (supports MD5, SHA1, SHA256, SHA512, RIPEMD, HMAC)
- hashing-algorithm
- javascript
- hmac
- hexadecimal
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
- clamscan
- file-scanner
- virus-scan
- docker-compose
The Ultimate Boilerplate for Products.
- boilerplate
- meteor
- meteorjs
- nodejs
Steam (OpenID) authentication strategy for Passport and Node.js.
Following googlecode project crypto-js, provide standard and secure cryptographic algorithms for NodeJS. Support MD5, SHA-1, SHA-256, RC4, Rabbit, AES, DES, PBKDF2, HMAC, OFB, CFB, CTR, CBC, Base64
Slider captcha support mobile
PolyCrypt - A pure JS implementation of the WebCrypto API
Sandia Cyber Omni Tracker (SCOT)
- perl
- javascript
- cyber-security
- incident-response
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
Follow stolen crypto hop by hop across Bitcoin, Ethereum, TRON, BNB Chain and Solana. Labels where the money landed, keeps proof for every clue, writes the report.
A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.
A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
POMjs is a random password generator in HTML and pure Javascript with no cookies and no trackers. It has been translated into several languages.
ESPot - ElasticSearch Honeypot
🎧 Update a pinned gist to show your top Spotify tracks/artists.
- pinned-gist
- gistbox
- spotify-box
- spotify