warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...

cwe-tool

cwe-tool A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration. Official OWASP CWE Toolkit Page Install Executable with Node.js tooling If you have a Node.js environment, you can invoke cwe-tool using the npx tool as follows: npx cwe-tool ...command-lin...

generator-burp-extension

Burp Extension Generator Installation First, install Yeoman and generator-burp-extension using npm we assume you have pre-installed node.js. npm install -g yo npm install -g generator-burp-extension Then generate your new project: yo burp-extension Burp Extension features When you generate your...

generator-burp-extension

Generador de Extensiones Burp !NPM versionnpm-imagenpm-url Instalación Primero, instala Yeoman y generator-burp-extension usando npm asumimos que ya tienes preinstalado node.js. npm install -g yo npm install -g generator-burp-extension Luego genera tu nuevo proyecto: yo burp-extension...

cumulus

Application Weakness Monitoring Software What's Cumulus Cumulus is a service that helps you monitor and fix security weakness in realtime. The issues will be reported on web dashboard. It's very simple and powerful. Key features Just install SDK to web front, can be found security weakness on...

tiktok-scraper

TikTok Scraper & Downloader Extrae y descarga información útil de TikTok. No se requieren inicio de sesión ni contraseña Esto no es un soporte de API oficial ni nada por el estilo. Es solo un scraper que utiliza la API web de TikTok para extraer contenido multimedia e información meta relacionada...

hijagger

hijagger - check package registries for hijackable packages This tool checks every maintainer from every package in the NPM and Python Pypi registry for unregistered domains or unregistered MX records on those domains. If a domain is unregistered you can grab the domain and initiate a password...

stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

analyzer

This project automates the daily tasks of Threat Intelligence Analyzer role internally without external resources' interaction. It analyzes, visualizes and structures sensitive files Malware or data by extracting features, artifacts and IoC using different modules. The output of those modules can...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

safe-npm

safe-npm Un instalador de npm centrado en la seguridad que protege tus proyectos de paquetes recién comprometidos. ¿Por qué existe esto? Los ataques a la cadena de suministro en paquetes npm son una amenaza creciente. Los atacantes a veces comprometen paquetes legítimos mediante: Robo de...

tanstack-compromise-checker

tanstack-compromise-checker Detecta indicadores del ataque a la cadena de suministro npm de TanStack en una máquina de desarrollo, un repositorio o un runner de CI. Script Bash, imagen Docker y acción de GitHub: el mismo motor, tres puntos de entrada. CVE-2026-45321 /GHSA-g7cv-rxg3-hmpx El 11 de...

magika

Magika Magika es una novedosa herramienta de detección de tipos de archivo impulsada por IA que se apoya en los recientes avances del aprendizaje profundo para proporcionar una detección precisa. Internamente, Magika emplea un modelo personalizado y altamente optimizado que solo pesa unos pocos M...

pkgxray

pkgxray — seguridad previa a la instalación para paquetes npm, servidores MCP y agentes de IA Inspecciona un paquete npm o un servidor MCP antes de instalarlo o conectarte a él, y obtén un veredicto determinista respaldado por evidencia: SAFE, REVIEW o BLOCK. Análisis estático local y sin...

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

pown

Pown Pown.js is a security testing and exploitation toolkit built on top of Node.js and NPM. Unlike traditional security tools, notably Metasploits, Pown.js considers frameworks to be an anti-pattern. Therefore, each feature in Pown is in fact a standalone NPM module allowing greater degree of...

pown

Pown Pown.js es un kit de pruebas de seguridad y explotación construido sobre Node.js y NPM. A diferencia de las herramientas de seguridad tradicionales, notablemente Metasploit, Pown.js considera que los frameworks son un antipatrón. Por lo tanto, cada funcionalidad en Pown es en realidad un...

electronegativity

Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

np-audit

np-audit — npm package auditor Static security analysis for npm packages — detects obfuscated lifecycle scripts, known vulnerabilities, and malicious patterns before they run. Drop-in replacement for npm install and npm ci. Zero dependencies. Pure Node.js built-ins only. 100 kB on the wire. npx...