sola1039 / HAST-SEC
武汉光影流明科技有限公司 | 本地中文交互与连续角色运动 | 非商业早期研究版 | 寻求技术合作与融资
sola1039 / HAST-SEC
huzhengcai471-crypto / dsh-startup-secret
DeepSeek Harness 启动动画插件（二次创作版）：暗色赛博风格开机动画，党徽标识 + 赛博电子风人物立绘 + 访问密码功能
better-isms / grcskills
Open GRC skills for AI agents. By ISMS Copilot.
affaan-m / ECC
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
Chalarangelo / 30-seconds-of-code
Coding articles to level up your development skills
gatsbyjs / gatsby
React-based framework with performance, scalability, and security built in.
alvarotrigo / fullPage.js
fullPage plugin by Alvaro Trigo. Create full screen pages fast and simple
cloudflare / security-audit-skill
A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
OWASP / CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
sampotts / plyr
Deprecated in favour of Video.js 10; security updates only. Simple HTML5, YouTube and Vimeo player.
ai / nanoid
A tiny (118 bytes), secure, URL-friendly, unique string ID generator for JavaScript
MobSF / Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
motdotla / dotenv
Loads environment variables from .env for nodejs projects.
basecamp / trix
A rich text editor for everyday writing
amark / gun
An open source cybersecurity protocol for syncing decentralized graph data.
cure53 / DOMPurify
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
projectdiscovery / nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Piebald-AI / claude-code-system-prompts
All parts of Claude Code's system prompt, 27 builtin tool descriptions, sub agent prompts (Plan/Explore/Task), utility prompts (CLAUDE.md, compact, statusline, magic docs, WebFetch, Bash cmd, security review, agent creation). Updated for each Claude Code version.
jason5ng32 / MyIP
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
upgundecha / howtheysre
A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE)
WebGoat / WebGoat
WebGoat is a deliberately insecure application
xixu-me / xget
Ultra-high-performance, secure, all-in-one acceleration engine for developer resources
verlok / vanilla-lazyload
LazyLoad is a lightweight, flexible script that speeds up your website by deferring the loading of your below-the-fold images, backgrounds, videos, iframes and scripts to when they will enter the viewport. Written in plain "vanilla" JavaScript, it leverages IntersectionObserver, supports responsive images and enables native lazy loading.
di-sukharev / opencommit
top #1 and most feature rich GPT wrapper for git — generate commit messages with an LLM in 1 sec — works with Claude, GPT and every other provider, supports local Ollama models too
sandstorm-io / sandstorm
Sandstorm is a self-hostable web productivity suite. It's implemented as a security-hardened web app package manager.
MarSeventh / CloudFlare-ImgBed
🏖️ A serverless, open-source file hosting solution built on Cloudflare. Supports image hosting, secure file storage, and personal cloud drive capabilities.
dotenvx / dotenvx
a secure dotenv—from the creator of `dotenv`
RetireJS / retire.js
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
patriksimek / vm2
Advanced vm/sandbox for Node.js
aquasecurity / cloudsploit
Cloud Security Posture Management (CSPM)
animir / node-rate-limiter-flexible
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
gkjohnson / three-mesh-bvh
A BVH implementation to speed up raycasting and enable spatial queries against three.js meshes.
paralleldrive / cuid
Deprecated collision-resistant id spec. Insecure because it leaks timestamps. Use cuid2 instead.
2factorauth / twofactorauth
List of sites with two factor auth support which includes SMS, email, phone calls, hardware, and software.
m0bilesecurity / RMS-Runtime-Mobile-Security
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
holepunchto / hypercore
Hypercore is a secure, distributed append-only log.
pwndoc / pwndoc
Pentest Report Generator
gamosoft / NoteDiscovery
Your Self-Hosted Knowledge Base
skills / secure-code-game
Learn to code securely while having fun through our popular open source in-editor experience, designed for developers, students, and anyone curious about security. Get started for free in under 2 minutes, playing right from your browser.
video-react / video-react
Deprecated in favour of Video.js 10; security fixes only. A web video player built for the HTML5 world using React library.
msojocs / fiddler-everywhere-enhance
Fiddler Everywhere is a secure and modern web debugging proxy for macOS, Windows, and Linux.
Shuffle / Shuffle
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
eslint-community / eslint-plugin-security
ESLint rules for Node Security
Ch0pin / medusa
Mobile Edge-Dynamic Unified Security Analysis
Kritt-ai / open-kritt
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.
gautamkrishnar / nothing-private
Do you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at nothingprivate.ml
tractorjuice / arc-kit
The Enterprise Architecture Governance Harness — strategy, architecture, delivery, and assurance using AI coding assistants
salesforce / cloudsplaining
Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
NeteaseCloudMusicApiEnhanced / api-enhanced
🔍 网易云音乐 Node.js API Services (Half Refactor & Enhanced) 全网最全的网易云音乐API接口
marmelab / json-graphql-server
Get a full fake GraphQL API with zero coding in less than 30 seconds.
AikidoSec / safe-chain
Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.
p-e-w / argos
Create GNOME Shell extensions in seconds
lirantal / npq
safely install npm packages by auditing them pre-install stage
EvanHahn / HumanizeDuration.js
361000 becomes "6 minutes, 1 second"
ming-soft / MCMS
🌈A free, commercially usable, open-source Java CMS system, 🔥supporting visual drag-and-drop web design, SpringBoot3, Vue3, element plus, 🔥localization, 🔥information innovation, 🔥security assurance, regularly collecting issues and updating versions, providing hundreds of templates and multiple practical plugins, offering code generators and ski
robinkarlberg / transfer.zip-web
A self-hostable complete file-sharing solution that focuses on reliability, security and ease of use.
hectorm / otpauth
One Time Password (HOTP/TOTP) library for Node.js, Deno, Bun and browsers.
dcloudio / casecode
DCloud开源项目集锦
thalesgroup-cert / Watcher
Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.
morettt / my-neuro
This project lets you create your own AI desktop companion with customizable characters and voice conversations that respond in just 1 second. Features include long-term memory, visual recognition, voice cloning and LLM training. Compatible with various Live2D customizations.