📈 GH Trending Explorer 🎲 Surprise me

Search: security · Language: JavaScript · clear

fangyuan99 / cookie-share

Cookie-share is a tampermonkey script that allows users to send and receive cookies between different devices or browsers. It can be used for multi-account switching, sharing video memberships, co-renting planets, and other scenarios. A self-hosted Cloudflare Worker ensures data security.

★ 532 JavaScript 7d ago
dslsdzc / rev-skills

122 个逆向工程 AI 技能:恶意软件分析 / 软件逆向 / 固件嵌入式 / 协议逆向 / 移动应用 / 脱壳反混淆 / 软件破解 / 漏洞挖掘 / 托管代码 / 取证情报 / CTF。

★ 186 JavaScript 9d ago
Atomburstofficial / geiger

A Geiger counter for AI agents — one read-only command that inventories every agent, MCP server, plugin, and AI extension on a machine

★ 167 JavaScript 29d ago
Arcanum-Sec / wraith

WRAITH — a modern browser-hooking framework (BeEF + blind-XSS successor) for red teams, researchers, and educators. For authorized security testing, research & education only.

★ 160 JavaScript 2mo ago
lgomesappj / BlockNetDiamond

BlockNetDiamond leverages a distributed ledger infrastructure, utilizing a consensus-driven architecture framework. built for Cryptographic security

★ 116 JavaScript 1mo ago
leepokai / jev-guard

Auto mode for every coding agent, built on Jev: risk-scores every tool call with session context (deny / ask / allow), flags prompt injection in results, checks skills and plugins. Claude Code, Codex, Copilot, Gemini, Cursor, pi, OpenCode, ACP.

★ 111 JavaScript 18d ago
Jueze-2019 / dsh-redteam-mode

DSH RedTeam 模式:把 DeepSeek Harness 变成红队作战指挥台——一个靶标名称拉起信息收集/漏洞检测/漏洞利用/内网渗透四个角色,资产与战果实时落入本地 SQLite 事实库(仅供已授权测试)

★ 106 JavaScript today
Noob-stupid / dsh-plugin-gating-hub

DSH plugin - framework upgrade safety & plugin gating: contract pre-check, rollback point, auto-rollback on failure, evidence-based auto-disable; plus a multi-source plugin market. Unofficial. | DSH 插件:框架升级安全 + 插件门控——升级前契约预检、回滚点、失败自动回滚、有确证证据才自动禁用;另带多源插件市场。非官方社区项目。

★ 104 JavaScript today
CassiopeiaCode / CosyRedactGateway

Lightweight, stateless privacy gateway for LLM APIs — redact secrets before OpenAI/Anthropic upstreams and restore them transparently in SSE and tool calls.

★ 104 JavaScript 11d ago
ciceroyang / agentgate

Control plane for the tools agents run: inventory, evidence, policy, enforcement. Clean is only emitted when every check ran. · agent 工具层的控制面:清单、证据、策略、执行;只有每个检查都跑完,才会给出 clean。

★ 102 JavaScript today
PensiveFei / dsh-secure-audit

Read-only security & compliance plugin for DeepSeek Harness: prompt-injection detection, Chinese-PII redaction, and local configuration audit with redacted, reproducible reports.

★ 85 JavaScript 9d ago
FloofLogic / mardo

Mardo public package metadata, support, security, and issue tracking (product source is private)

★ 75 JavaScript 20d ago
Berserk-hub150 / skillhawk

Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.

★ 65 JavaScript today
cn0xroot / CC-Monitor

Claude Code Monitor : Monitor & audit every action Claude Code takes on your computer.

★ 64 JavaScript 23d ago
xgone / dsh-remote

让你通过浏览器安全地远程使用 DeepSeek Harness:登录、MFA 两步验证、角色权限和远程文件预览。 | Use DeepSeek Harness securely in a remote browser with login, MFA, roles, and remote file preview.

★ 59 JavaScript 21d ago
0x4meliorate / Mimic

Frameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic phishing simulations, easily injected via reverse proxy.

★ 54 JavaScript 2mo ago
hhh7666 / receipt-protocol

Minimal Ed25519-signed activity receipts for verifiable AI agents — self-attested, offline-verifiable, no blockchain.

★ 50 JavaScript 7d ago
NusaSec / Hackbot-Arena

⚔️ Benchmark your AI agent with 30 Docker-based web security labs inspired by real bug bounty findings, complete with canonical flags and reference solvers.

★ 48 JavaScript 1mo ago
OrbSec / satellite

Orb44 Watch satellite - inside pulse from your VPS (load, listeners, hardening).

★ 42 JavaScript 24d ago
digitaldonusum / vibebreaker

20-pass adversarial audit for vibe-coded software. Injection, IDOR, races, N+1, idempotency, transactions, memory leaks — then a false-positive verifier.

★ 39 JavaScript 1mo ago
Justinuse1 / pojia-breaker

Chinese-first LLM jailbreak benchmark & red-team toolkit | 中文LLM安全评测框架 | by POJIA.AI

★ 39 JavaScript 23d ago
vincenzo-afk / DropLink

DropLink is a decentralized, temporary peer-to-peer sharing platform. Files, folders, links, and chat messages move directly between browsers over an encrypted WebRTC connection — the server only helps two browsers find each other and never sees, stores, or touches a single byte of your data.

★ 36 JavaScript 3d ago
Elevate08 / qs-bitwarden-cli

Bitwarden on quickshell with keyboard navigation and a goal to capture every feature from the browser extension

★ 36 JavaScript 4d ago
Moeeryani / Vibe-Coding-Production-Kit

Production-grade vibe coding framework with specs, architecture, AI agents, testing, security, code review, CI/CD, and battle-tested workflows — from idea to production.

★ 36 JavaScript 3d ago
capt-meelo / loupe

Browser-based Android console, APK decompiler and security analyzer. Mirror, logcat, shell, Frida, jadx, and static and dynamic analysis, with no drivers or adb server.

★ 35 JavaScript 6d ago
AhmadJeddi / SafeIP

A lightweight network security tool that verifies IP location, validates network safety, and prevents access to protected links when unexpected location changes are detected.

★ 34 JavaScript 1mo ago
HuangMath / response-ready-notifier

An unofficial userscript for the ChatGPT web app that alerts you when a response is ready or user action is required. It runs locally in your browser with @grant none and is designed for privacy, security, and responsible use: no external requests, conversation-data collection, automated prompt submission, or bypassing of service controls.

★ 33 JavaScript 2mo ago
IceApriler / dsh-remote-mobile

DeepSeek Harness 远程与移动端安全网关插件:零修改 DSH 底层代码安全开放局域网与 Tailscale 连接 | DeepSeek Harness (DSH) Remote & Mobile Security Guard: safely opens Tailscale/LAN with zero core modifications, QR scan auth, RSA encryption & brute-force defense.

★ 31 JavaScript 3d ago
DorianChn / shanchuanzhi-agent-canary

Agent Canary 3.0: open-source MCP, SDK, and CLI security toolkit with a guarded execution gateway, decoy signals, local tests, and public acceptance evidence.

★ 30 JavaScript today
vigneshwaran1702 / Cloud-Security-Scanner

Cloud Security Scanner is a tool that automatically scans cloud environments to identify security vulnerabilities, misconfigurations, and compliance risks, helping organizations protect their cloud infrastructure.

★ 27 JavaScript 1d ago
codebygarv / Ai-skills

A community-driven catalogue of 150+ reusable AI agent skills for Claude Code , Antigravity, Cursor Ai , kimi , deepseek ,Mimo — code review, security auditing, architecture review, and more. Install any skill with one npx command.