StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
- bugbounty
- security
- security-tools
- mobile-security
Repository Index
47,133 repositories indexed
73–96 of 172 · Most stars
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
- oauth2
- openid
- openid-connect
- oidc
Collection of almost 40.000 javascript malware samples
- malware-samples
- malware-research
- javascript
- malware-jail
Enables client-side applications to dance OAuth with GitHub.
FTP client for Node.js, supports FTPS over TLS, passive mode over IPv6, async/await, and Typescript.
- ftp
- ftps
- async-await
- promise
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
Fast and dependency-free cryptographic hashing library for node.js and browsers (supports MD5, SHA1, SHA256, SHA512, RIPEMD, HMAC)
- hashing-algorithm
- javascript
- hmac
- hexadecimal
🔪Browser logic vulnerabilities :skull_and_crossbones:
- security
- browser
- xss
- vulnerability
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
- clamscan
- file-scanner
- virus-scan
- docker-compose
A tool for studying JavaScript malware.
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Tiny hashing module that uses the native crypto API in Node.js and the browser
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
- xss
- bxss
- security
- bugbounty
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
The Ultimate Boilerplate for Products.
- boilerplate
- meteor
- meteorjs
- nodejs
Nintendo Switch userland code execution using Civilization 7 game cartridge
🔒Unified API for password hashing algorithms
A front-end JavaScript toolkit for creating DNS rebinding attacks.
DNS Rebinding Exploitation Framework
Connect to applications on EOS, Ethereum, and Tron. Exchange tokens with ease. Manage your assets safely. All in a simple to use interface.
- blockchain
- blockchain-technology
- cryptocurrency
- eos
Multi-agent orchestration platform for Gemini CLI, Claude Code, Codex, and Qwen Code — 39 specialists, parallel subagents, persistent sessions, and built-in code review, debugging, security, SEO, accessibility, and compliance tools
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- malware-samples
- wscript
- deobfuscation
- angler
In-browser falling-sand simulation game with over 500 elements and thousands of reactions.
- browser-game
- cellular-automata
- cellular-automaton
- chemistry
A Lightweight Pure JavaScript Captcha for Node.js. No C/C++, No ImageMagick, No Canvas.
- pure-javascript
- captcha