DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
Repository Index
88,573 visible repositories in the index
1–16 of 16 · Most stars
PHP 5.x support for random_bytes() and random_int()
- php
- php5
- secure
- secure-by-default
A spec compliant, secure by default PHP OAuth 2.0 Server
Sysmon configuration file template with default high-quality event tracing
- sysmon
- threatintel
- threat-hunting
- sysinternals
A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
- cli
- encryption
- zero-configuration
- secure-by-default
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
Manages application of security headers with many safe defaults
- secure-headers
- csp
- hsts
- referrer-policy
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
- brute-force-attacks
- bruteforce
- credential-testing
- cybersecurity
An engine to make Tor network your default gateway
- tor
- anonymity
- network
- nipe
Open-source OSINT agent: 21 public-source tools behind natural-language chat, an MCP server and a Claude Code plugin. Passive by default, no keys to start.
Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.
A default credential scanner.
- infosec
- python
- security
- penetration-testing
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
An auth policy for the Pyramid Web Framework with sane defaults.