DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
Repository Index
55,140 visible repositories in the index
1–13 of 13 · Most stars
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
PHP 5.x support for random_bytes() and random_int()
- php
- php5
- secure
- secure-by-default
A spec compliant, secure by default PHP OAuth 2.0 Server
Sysmon configuration file template with default high-quality event tracing
- sysmon
- threatintel
- threat-hunting
- sysinternals
A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
- cli
- encryption
- zero-configuration
- secure-by-default
Manages application of security headers with many safe defaults
- secure-headers
- csp
- hsts
- referrer-policy
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
An engine to make Tor network your default gateway
- tor
- anonymity
- network
- nipe
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
An auth policy for the Pyramid Web Framework with sane defaults.