Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
Repository Index
47,133 repositories indexed
1–16 of 16 · Most stars
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
- nextjs
- authentication
- session
- stateless
Manages application of security headers with many safe defaults
- secure-headers
- csp
- hsts
- referrer-policy
Bleeding edge django template focused on code quality and security.
📈 Open source, privacy-first web analytics — a cookie-less Google Analytics alternative with built-in error tracking and performance monitoring. Self-host it or use our cloud. Get started for free!
- docker
- webanalytics
- self-hosted
- selfhosted
Self-hostable, privacy-focused website analytics.
- analytics
- cookie-free
- privacy
- self-hosted
This is the go boilerplate on the top of fiber web framework. With simple setup you can use many features out of the box
- go
- golang
- fiber-framework
- paypal
Privacy-friendly, open-source analytics for WordPress — GDPR compliant, cookieless, and fast
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
- anti-bot
- behavioral-analysis
- bot-detection
- captcha
Straightforward HTTP session management
- session-management
- session
- http
- golang
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
POMjs is a random password generator in HTML and pure Javascript with no cookies and no trackers. It has been translated into several languages.
Dropwizard bundle managing authentication through JWT cookies
- jwt
- cookie
- java
- dropwizard
Privacy-first Chrome extension for real-time website security analysis using on-device AI. Trust scores (0-100), phishing detection, SSL verification, cookie compliance & AI chatbot powered by WebLLM with zero external data transmission.
- browser-extension
- chrome-extension
- cybersecurity
- on-device-ai
Demo of cookie based authentication flow for PocketBase.