Repository Index

Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy

• browser-fingerprinting
• cloudflare-workers
• dns-leak
• network-tools

Create and verify JSON Web Tokens (JWT) with Deno or the browser.

• deno
• jwt
• jsonwebtoken
• authentication

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

• anti-bot
• behavioral-analysis
• bot-detection
• captcha

JavaScript OAuth 1.0a signature generator (RFC 5849) for node and the browser

Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.

• browser-privacy
• cli
• fingerprinting
• identity-rotation

TranslatedCyclops is a browser with XSS detection capabilities

• security
• xss
• taint-tracking
• vulnerability

Mac browser for Mach-O binaries (macOS, iOS, watchOS, and tvOS)

• macos
• abi
• mach
• mach-o

Security training for the apps you actually ship. Open your browser and start hacking.

• appsec
• ctf
• cybersecurity
• nextjs

Client-side AES-256-GCM zero-knowledge encryption library. Browser-native Web Crypto API, no dependencies. Powers FileShot.io.

• aes-256
• aes-256-gcm
• browser-encryption
• client-side-encryption

End-to-end encryption for the browser and Node: a JavaScript library (npm: libves) with recoverable keys, post-quantum (ML-KEM) key exchange, and user-to-user sharing

• encryption-api
• webcrypto
• ecdh
• elliptic-curve-cryptography

🔌 OSINT & Security Extensions for Marshall Browser - Installable plugins for enhanced reconnaissance and security testing

• browser-extension
• golang
• honeypot
• osint

Browser-less OAuth 2.0 App2App flow involving one or more Brokers