⚙️ NGINX config generator on steroids 💉
Repository Index
47,133 repositories indexed
1–24 of 27 · Most stars
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
Firefox user.js for optimal privacy and security. Your favorite browser, but better.
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
A microservices API Gateway built on top of Express.js
The best way to build Electron apps with security in mind.
📗 How to write cross-platform Node.js code
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
The Ultimate Boilerplate for Products.
Investigate suspicious activity by visualizing Sysmon's event log
Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts
[WIP] Simple mobile applications sandbox file browser tool. Powered with [frida.re](https://www.frida.re).
A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.
Gulp.js command execution for humans
A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
Secure terminal-based IDE for local JS development