Ranked by Attention Score: stars gained over the last 180 complete days
30 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Firefox user.js for optimal privacy and security. Your favorite browser, but better.
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
A curated list of CTF frameworks, libraries, resources and softwares
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
⚙️ NGINX config generator on steroids 💉
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
Cloud Security Posture Management (CSPM)
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
Digital Forensics Investigation Platform
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.
📗 How to write cross-platform Node.js code
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
The best way to build Electron apps with security in mind.
A microservices API Gateway built on top of Express.js
Kraken: A multi-platform distributed brute-force password cracking system
Add a layer of active defense to your cloud applications.
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
🔓✨🔒 An innovative, convenient and secure encryption app
Investigate suspicious activity by visualizing Sysmon's event log
🔒Unified API for password hashing algorithms
Secure diceware passphrase generator