WebAuthn, Simplified. A collection of TypeScript-first libraries for simpler WebAuthn integration. Supports modern browsers, Node, Deno, and more.
Repository Index
70,234 visible repositories in the index
25–48 of 53 · Most stars
One Time Password (OTP) / 2FA for Node.js and Browser - Supports HOTP, TOTP and Google Authenticator
- hotp
- hmac
- otp
- authenticator
Do you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at nothingprivate.ml
Encrypt and Decrypt files securely in your browser.
- encryption
- file-encryption
- javascript
- client-side
Personal AI agent harness for macOS, Windows, Linux, Android & iOS. New: Skales Scout, lasting AI agents that keep working on your desk, each optionally in its own virtual machine. Chat, coding (Skales Code), Flow, automations, computer use, browser, voice, MCP, local LLMs (Ollama). BYOK, 26 providers. No Docker, no terminal.
- ai-agent
- ai-assistant
- automation
- autonomous-agent
OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications
- oidc
- oidc-client
- typescript
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
- php
- access-control
- audit
- browser-extension
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
- google-chrome
- hindsight
- chrome
- forensics
GetContact CLI adalah project Python untuk melakukan lookup nomor telepon lewat API GetContact, tanpa aplikasi Android dan tanpa browser.
One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser
- one-time-secret
- golang
- encryption
- aes256
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
- oauth2
- openid
- openid-connect
- oidc
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
Fast and dependency-free cryptographic hashing library for node.js and browsers (supports MD5, SHA1, SHA256, SHA512, RIPEMD, HMAC)
- hashing-algorithm
- javascript
- hmac
- hexadecimal
Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy
- browser-fingerprinting
- cloudflare-workers
- dns-leak
- network-tools
Tiny hashing module that uses the native crypto API in Node.js and the browser
DNS Rebinding Exploitation Framework
$MFT directory tree reconstruction & FILE record info
- mft-browser
- mft
- powershell
- winform
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
- active-directory
- cheatsheet
- ctf
- cybersecurity
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
Create and verify JSON Web Tokens (JWT) with Deno or the browser.
- deno
- jwt
- jsonwebtoken
- authentication
JavaScript OAuth 1.0a signature generator (RFC 5849) for node and the browser
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation
TranslatedCyclops is a browser with XSS detection capabilities
- security
- xss
- taint-tracking
- vulnerability
Mac browser for Mach-O binaries (macOS, iOS, watchOS, and tvOS)
- macos
- abi
- mach
- mach-o