DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
Repository Index
47,133 repositories indexed
1–23 of 23 · Most stars
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
The Browser Exploitation Framework Project
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
- crypto
- cryptography
- x509
- message-digest
A DNS rebinding attack framework.
- dns-rebinding
- dns
- vulnerability
- attack
Digital Forensics Investigation Platform
- dfir
- security
- incident-response
- artifacts
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
The Ultimate Boilerplate for Products.
- boilerplate
- meteor
- meteorjs
- nodejs
A front-end JavaScript toolkit for creating DNS rebinding attacks.
DNS Rebinding Exploitation Framework
Web interface for the Volatility Memory Forensics Framework
Code for cracking passwords with neural networks
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts
- haveibeenpwned
- cloudflare
- zxcvbn
- serverless
A simple capture the flag framework.
Web interface to explore Suricata EVE outputs
- attack-defense-ctf
- ctf
- network-monitor
- suricata
reCAPTCHA v3 Cloudflare Worker
- cloudflare-workers
- cloudflare-worker
- cloudflare
- recaptcha
Security workshop
OAuth Client for the Play Framework
Phalcon Mooc an example API + Front End with automated tests
- phalcon
- php
- framework
- mooc
Capture, inspect, and replay webhooks with 90-day history + signature verification. Built on Cloudflare Workers + D1.
Aurelia client sample with aurelia-authentication and loopback server