bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
- xss
- bxss
- security
- bugbounty
80,339 visible repositories in the index
1,105–1,128 of 1,714 · Most stars
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
Samsung Tizen root
Source-built, locally bound FailSafe distribution of ARTEX (v0.3.15)
Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.
:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:
A clean room recreation of Auth0 with 1:1 drop in replacement feature parity.
Pure Go implementation of the NaCL set of API's
USB Keystroke Injection Protection
An implementation of JOSE standards (JWE, JWS, JWT) in Go
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
🔒Unified API for password hashing algorithms
DFIRTrack - The Incident Response Tracking Application
Yet another static code analyzer for malicious Android applications
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
Collection of example YARA-L rules for use within Google Security Operations
Fastest 5KB JS implementation of ed25519 signatures
Delphi implementation of JOSE (JSON Object Signing and Encryption) and JWT (JSON Web Token)
Users Plugin for CakePHP
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
High-Performance word generator with a per-position configureable charset
Offline, encrypted vault for seed phrases, private keys, passwords and API keys. Also used by agents.
🌰 encrypt/decrypt using ssh keys
Catch risky npm dependency changes before they merge.