Microsoft Authentication Library (MSAL) for JS
Repository Index
70,234 visible repositories in the index
121–144 of 489 · Most stars
Advanced vm/sandbox for Node.js
Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)
Snoop — инструмент разведки на основе открытых данных (OSINT world)
- osint
- termux
- username-search
- username-checker
Android Reverse-Engineering Workbench for VS Code
- apktool
- apk-decompiler
- apk-editor
- smali
Complete, compliant and well tested module for implementing an OAuth2 Server/Provider with express in node.js
- oauth2-server
Privilege Escalation Enumeration Script for Windows
- pentest-tool
- windows
- windows-privilege-escalation
- privilege-escalation
Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.
ipsets dynamically updated with firehol's update-ipsets.sh script
- blocklists
- ipset
- ipset-lists
- attacks
Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux.
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
- cryptography
- steganography
- compression
- functional-programming
JavaScript library to zip and unzip files supporting parallel compression, web streams, pluggable compression engines, zip64, split files, data encryption, and deflate64 decompression.
- zip
- javascript
- zip64
- browser
My simple Swiss Army knife for http/https troubleshooting and profiling.
- https-troubleshoting
- http-requests
- httptracer
- redirect-urls
OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js
- openid
- oidc
- openid-provider
- openid-connect
The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
- endpoints
- endpoint-discovery
- bugbounty
- crawler
Advanced vulnerability scanning with Nmap NSE
- vulnerability
- vulnerability-scanners
- vulnerability-detection
- vulnerability-identification
Optimized bcrypt in JavaScript with zero dependencies, with TypeScript support.
- javascript
- bcrypt
- authentication
Cloud Security Posture Management (CSPM)
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
- cli
- encryption
- zero-configuration
- secure-by-default
Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
AllinSSL 是一个集证书申请、管理、部署和监控于一体的SSL证书全生命周期管理工具。AllinSSL is an all-in-one SSL certificate lifecycle management tool that integrates certificate application, management, deployment, and monitoring.
- acme
- go
- ssl
- ssl-certificates
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
- security
- limit
- ratelimter
- bruteforce