🔪Browser logic vulnerabilities :skull_and_crossbones:
- security
- browser
- xss
- vulnerability
47,133 repositories indexed
121–144 of 260 · Most stars
🔪Browser logic vulnerabilities :skull_and_crossbones:
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
A tool for studying JavaScript malware.
Google OAuth Client Library for Java
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
API Gateway bridging modern and legacy APIs with WSDL-to-OpenAPI, SOAP-to-REST, XML, OAuth2, and GraphQL.
Tiny hashing module that uses the native crypto API in Node.js and the browser
🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC, WebSocket and ElasticSearch examples are included
Custom ImageView to generate captcha image.
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
The Ultimate Boilerplate for Products.
Nintendo Switch userland code execution using Civilization 7 game cartridge
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
🔒Unified API for password hashing algorithms
A front-end JavaScript toolkit for creating DNS rebinding attacks.
DNS Rebinding Exploitation Framework
Connect to applications on EOS, Ethereum, and Tron. Exchange tokens with ease. Manage your assets safely. All in a simple to use interface.
Security profiling for blackbox Android
Multi-agent orchestration platform for Gemini CLI, Claude Code, Codex, and Qwen Code — 39 specialists, parallel subagents, persistent sessions, and built-in code review, debugging, security, SEO, accessibility, and compliance tools
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
In-browser falling-sand simulation game with over 500 elements and thousands of reactions.
Gravitee.io - OpenSource API Management