DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
Repository Index
47,133 repositories indexed
1–24 of 26 · Most stars
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
- vulnerabilities
- scanner
- firefox-extension
- grunt-plugins
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
- cryptography
- steganography
- compression
- functional-programming
XSS'OR - Hack with JavaScript.
- probe
- pentest-tool
- xss
- csrf
The best way to build Electron apps with security in mind.
A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
Strategies to Gekko trading bot with backtests results and some useful tools.
- gekko
- strategies
- gekko-strategies
- gekko-backtest
Authorization package for Meteor, compatible with built-in accounts packages
- hacktoberfest
- meteor
Enables client-side applications to dance OAuth with GitHub.
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
- clamscan
- file-scanner
- virus-scan
- docker-compose
A starter project for next js with authentication - Contains React 17 + Typescript + Tailwind CSS 2 + React Query 3 + GitHub Auth + LinkedIn Auth + Password-less Auth + Fauna DB + ESLint + Prettier + Husky
- vercel
- nextjs
- nextjs-starter
- nextjs-boilerplate
Easy file sharing with server-side encryption, curl/httpie/wget compliant
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
A Flask app template with integrated SQLAlchemy, authentication, and Bootstrap frontend
Does their story hold up? Paste what a seller, recruiter or landlord told you and check it against public records in thirty seconds, with proof saved for every reason.
- desktop
- due-diligence
- evidence
- fraud
Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts
- haveibeenpwned
- cloudflare
- zxcvbn
- serverless
💸 Crypto Payments straight to your wallet. DePay simplifies Web3 integration for developers, harnessing DeFi to accept any token effortlessly. Integrate frictionless, real-time token conversion with sleek, customizable widgets designed for seamless user experience.
- blockchain
- payment
- widgets
- react
[WIP] Simple mobile applications sandbox file browser tool. Powered with [frida.re](https://www.frida.re).
Cloverleaf is a free, open source app to replace your password manager without storing your passwords anywhere.
- password-manager
- password-generator
- security
- password-vault
POMjs is a random password generator in HTML and pure Javascript with no cookies and no trackers. It has been translated into several languages.
Phalcon Mooc an example API + Front End with automated tests
- phalcon
- php
- framework
- mooc
Capture, inspect, and replay webhooks with 90-day history + signature verification. Built on Cloudflare Workers + D1.
End-to-end encryption for the browser and Node: a JavaScript library (npm: libves) with recoverable keys, post-quantum (ML-KEM) key exchange, and user-to-user sharing
- encryption-api
- webcrypto
- ecdh
- elliptic-curve-cryptography
Aurelia client sample with aurelia-authentication and loopback server