Repository Index

Enables client-side applications to dance OAuth with GitHub.

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

• pentesting
• security
• chrome-extension
• api-keys

Fast and dependency-free cryptographic hashing library for node.js and browsers (supports MD5, SHA1, SHA256, SHA512, RIPEMD, HMAC)

• hashing-algorithm
• javascript
• hmac
• hexadecimal

Nintendo Switch userland code execution using Civilization 7 game cartridge

CLI tool for decompiling Android apps to Java. It does resources! It does Java! Its real easy!

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

• clamscan
• file-scanner
• virus-scan
• docker-compose

A tool for studying JavaScript malware.

• malware
• malwareanalysis
• nodejs
• es6

A mostly-serverless distributed hash cracking platform

Google OAuth Client Library for Java

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

• dns
• dns-rebinding
• hacking
• malicious-domains

Tiny hashing module that uses the native crypto API in Node.js and the browser

• hashing
• hash-functions
• sha256
• crypto

富江破甲（破甲）：DeepSeek Harness破甲插件，激活词富江，所有东西直接大白话问，内含技能库skill下载与调用、漏洞知识库poc利用、漏洞报告更新和全自动授权渗透。当前版本：0.20.13，附免责声明。插件图片看最下面

• ai-agent
• cve
• deepseek
• deepseek-harness

JD-Core is a JAVA decompiler written in JAVA.

🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more

• tls
• ssl
• certificate
• keystore

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

• xss
• bxss
• security
• bugbounty

The Ultimate Boilerplate for Products.

• boilerplate
• meteor
• meteorjs
• nodejs

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

🔒Unified API for password hashing algorithms

• credential
• nodejs
• hash-functions
• security

JShell - Get a JavaScript shell with XSS.

A front-end JavaScript toolkit for creating DNS rebinding attacks.

• dns-rebinding
• dns
• hacking
• red-team

DNS Rebinding Exploitation Framework

• dns-rebinding
• red-team
• hacking
• web-hacking

Security profiling for blackbox Android

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

• malware-samples
• wscript
• deobfuscation
• angler