JavaScript · security Tools

DOMPurify

github

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

user.js

github

Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening

nuclei-templates

github

Community curated list of templates for the nuclei engine to find security vulnerabilities.

awesome-ctf

github

A curated list of CTF frameworks, libraries, resources and softwares

Betterfox

github

Firefox user.js for optimal privacy and security. Your favorite browser, but better.

cloudmapper

github

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

Cosmos-Server

github

☁️ The Most Secure and Easy Selfhosted Home Server. Take control of your data and privacy without sacrificing security and stability (Authentication, anti-DDOS, anti-bot)

Addon

github

ClearURLs is an add-on based on the new WebExtensions technology and will automatically remove tracking elements from URLs to help protect your privacy.

vm2

github

Advanced vm/sandbox for Node.js

shhgit

github

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

reverse-shell-generator

github

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

cloudsploit

github

Cloud Security Posture Management (CSPM)

twofactorauth

github

List of sites with two factor auth support which includes SMS, email, phone calls, hardware, and software.

pwndoc

github

Pentest Report Generator

Shuffle

github

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

nothing-private

github

Do you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at nothingprivate.ml

cloudsplaining

github

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.