eslint-community / eslint-plugin-security
ESLint rules for Node Security
eslint-community / eslint-plugin-security
gautamkrishnar / nothing-private
Do you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at nothingprivate.ml
salesforce / cloudsplaining
Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
lirantal / npq
safely install npm packages by auditing them pre-install stage
ming-soft / MCMS
🌈A free, commercially usable, open-source Java CMS system, 🔥supporting visual drag-and-drop web design, SpringBoot3, Vue3, element plus, 🔥localization, 🔥information innovation, 🔥security assurance, regularly collecting issues and updating versions, providing hundreds of templates and multiple practical plugins, offering code generators and ski
robinkarlberg / transfer.zip-web
A self-hostable complete file-sharing solution that focuses on reliability, security and ease of use.
twoone-3 / AdGuardHomeForRoot
A module to easily execute AdGuardHome on Android
hectorm / otpauth
One Time Password (HOTP/TOTP) library for Node.js, Deno, Bun and browsers.
thalesgroup-cert / Watcher
Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.
pashov / skills
Pashov Audit Group Skills
hackademix / noscript
The popular NoScript Security Suite browser extension.
protofire / solhint
Solhint is an open-source project to provide a linting utility for Solidity code.
prompt-security / clawsec
A complete security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents (and variants). Protect your SOUL.md (etc') with drift detection, live security recommendations, automated audits, and skill integrity verification. All from one installable suite.
veliovgroup / Meteor-Files
🚀 Upload files via DDP or HTTP to ☄️ Meteor server FS, AWS, GridFS, DropBox or Google Drive. Fast, secure and robust.
helicalinsight / helicalinsight
Free, open source BI platform with AI conversational analytics (BYO-LLM), pixel-perfect paginated reports, interactive dashboards, SSO, embedding, multi-tenancy & row-level security. Every feature free in Community Edition. Self-hosted, Docker-ready
endojs / endo
Endo is a distributed secure JavaScript sandbox, based on SES
v-fidelusaleksander / ghcertified
Prepare for GitHub Certification exams!
paed01 / bpmn-engine
BPMN 2.0 execution engine. Open source javascript workflow engine.
lirantal / lockfile-lint
Lint an npm or yarn lockfile to analyze and detect security issues
asamassekou10 / ship-safe
The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.
mrrfv / cloudflare-gateway-pihole-scripts
Use Cloudflare Gateway DNS/VPN to block ads, malware and tracking domains - free alternative to NextDNS, Pi-hole and AdGuard
wasmerio / edgejs
Edge.js is a secure JavaScript runtime, designed for Edge computing and AI workloads
dwyl / hapi-auth-jwt2
:lock: Secure Hapi.js authentication plugin using JSON Web Tokens (JWT) in Headers, URL or Cookies
ehmicky / wild-wild-path
🤠 Object property paths with wildcards and regexps 🌵
Juwan-Hwang / Zephyr
Zephyr: A modern, lightweight, and secure Mihomo / Clash Meta GUI client built with Tauri and Rust.
renniepak / CSPBypass
CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting) vulnerabilities on sites where injections are blocked by CSPs that only allow certain whitelisted domains.
notiflix / Notiflix
Notiflix is a dependency-free, secure, and lightweight JavaScript library built with pure JavaScript, offering client-side non-blocking notifications, popup boxes, loading indicators, and more.
w3c / trusted-types
A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.
darama22 / Malware-Research-Hub
Self-contained malware research hub: curated catalog of 80 families (1971-2024) + 2,764 real encrypted samples, indexed and searchable. Local Flask app, bilingual.
recurly / recurly-js
Simple subscription billing in the browser
firewalla / firewalla
http://firewalla.com
scrapfly / Antibot-Detector
Real-time detection of anti-bot systems, captchas & fingerprinting techniques. Identifies Cloudflare, Akamai, DataDome, reCAPTCHA, hCaptcha, Shape Security & more with confidence scoring and advanced capture tools.
Webba-Creative-Technologies / vice
VICE is a security auditing CLI tool that finds vulnerabilities in your web applications.
FradSer / dotclaude
A comprehensive development environment with specialized AI agents for code review, security analysis, and technical leadership.
levelsio / superlevels
A super Chrome extension I made that's safer than installing external malware/spyware-filled extensions that form a massive security risk, this one is open source and you can read and check the source code (with AI) before you install it, and customize it to your liking!
karanb192 / claude-code-hooks
🪝 Claude Code hooks + an installable plugin marketplace: safety, cost, observability, productivity.
nhovongoc0-max / meme-radar
Meme雷达开源版：本地只读、多链 Meme 候选扫描与人工复核工具
fangyuan99 / cookie-share
Cookie-share is a tampermonkey script that allows users to send and receive cookies between different devices or browsers. It can be used for multi-account switching, sharing video memberships, co-renting planets, and other scenarios. A self-hosted Cloudflare Worker ensures data security.
mixbytes / audits_public
MixBytes Team public security audits
miroslavpejic85 / mirotalkc2c
📹 Open-source, self-hosted WebRTC 1-to-1 video calling for private real-time communication. Build secure browser-based consultations, coaching, support, telehealth, and other video call experiences with peer-to-peer communication and screen sharing.
Atomburstofficial / geiger
A Geiger counter for AI agents — one read-only command that inventories every agent, MCP server, plugin, and AI extension on a machine
Arcanum-Sec / wraith
WRAITH — a modern browser-hooking framework (BeEF + blind-XSS successor) for red teams, researchers, and educators. For authorized security testing, research & education only.
Buffalo2024 / Rulora
Pluggable controls for reliable AI agents: validated outputs, bounded loops and frozen collective decisions.
lgomesappj / BlockNetDiamond
BlockNetDiamond leverages a distributed ledger infrastructure, utilizing a consensus-driven architecture framework. built for Cryptographic security
lgomesappj / Web3NodeDiamond
Web3 Web3NodeDiamond gateway that handles security audit trail, built for everyday use.
minseochoj / SolidityCoreLegend
SolidityCoreLegend: Real-time, blockchain-based platform for efficient smart contract deployment and gas-optimized execution at the core engine.
CassiopeiaCode / CosyRedactGateway
Lightweight, stateless privacy gateway for LLM APIs — redact secrets before OpenAI/Anthropic upstreams and restore them transparently in SSE and tool calls.
ciceroyang / agentgate
Control plane for the tools agents run: inventory, evidence, policy, enforcement. Clean is only emitted when every check ran. · agent 工具层的控制面：清单、证据、策略、执行；只有每个检查都跑完，才会给出 clean。
daoyi2026 / vibe-coding-zero-to-ship
A beginner foundation skill for AI coding agents — from product idea, data and Git to security, deployment and launch.
PensiveFei / dsh-secure-audit
Read-only security & compliance plugin for DeepSeek Harness: prompt-injection detection, Chinese-PII redaction, and local configuration audit with redacted, reproducible reports.
xingguangqwq / traceguard-vscode
TraceGuard - a VS Code helper for manual security code review
FloofLogic / mardo
Mardo public package metadata, support, security, and issue tracking (product source is private)
DotRacel / etherfi-session-manager
Tampermonkey 用户脚本：ether.fi Cash 设备会话管理工具
pfz14 / chatgpt-model-meter
Chrome MV3 extension for chatgpt.com: shows 5h/7d quota, and checks the requested model against the model_slug the server's STE telemetry reports as actually executed.
kaiserern / Kaiser.charon
Solana pump.fun trading bot — Telegram-driven screening, strategy gates, LLM entry selection, Jupiter execution. Fork of yunus-0x/charon.
Berserk-hub150 / skillhawk
Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.
cn0xroot / CC-Monitor
Claude Code Monitor : Monitor & audit every action Claude Code takes on your computer.
xgone / dsh-remote
让你通过浏览器安全地远程使用 DeepSeek Harness：登录、MFA 两步验证、角色权限和远程文件预览。 | Use DeepSeek Harness securely in a remote browser with login, MFA, roles, and remote file preview.
benginN / caltask
Self-hosted calendar + tasks in one small container — week view, recurring events done right, read-only .ics sync, Google Calendar/Tasks import, PWA, dashboard embed. No CalDAV, no build step, no CDN.
0x4meliorate / Mimic
Frameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic phishing simulations, easily injected via reverse proxy.