npm · PyPI
bunkerity/bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
AGPL-3.028. Aug. 2026 · Metriken 2.10.0
Alle Tags
Katalog-Tag
#web-security
Alle Repositories im öffentlichen Register, die dieses Tag tragen — aus ihren GitHub-Topics oder den von ihren Paket-Registries veröffentlichten Schlagwörtern. Die Gesundheit wird nach derselben versionierten Methodik gemessen wie im übrigen Register.
27 Einträge
Go · npm
fabriziosalmi/caddy-waf
Caddy WAF (Regex Rules, IP and DNS filtering, Rate Limiting, GeoIP, Tor, Anomaly Detection)
AGPL-3.019. Sept. 2026 · Metriken 2.10.0
Go
chaitin/SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
GPL-3.019. Sept. 2026 · Metriken 2.10.0
npm
rbonestell/vite-plugin-sri-gen
A Vite plugin to auto-generate Subresource Integrity (SRI) hashes.
MIT10. Okt. 2026 · Metriken 2.10.0
RubyGems
0dayInc/pwn
PWN is an open security automation framework that aims to stand on the shoulders of security giants, promoting trust and innovation.
MIT5. Sept. 2026 · Metriken 2.10.0
npm
lissy93/domain-locker
🌐 The all-in-one tool, for keeping track of your domain name portfolio. Got domain names? Get Domain Locker!
MIT16. Sept. 2026 · Metriken 2.10.0
Go
jub0bs/cors
perhaps the best CORS middleware library for Go
MIT11. Sept. 2026 · Metriken 2.10.0
npm · Go · PyPI
WebDecoy/FCaptcha
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
MIT10. Sept. 2026 · Metriken 2.10.0
npm
this-is-securl/securl
SecURL - passive external security posture scanner. Free hosted scanner, open-source engine, CI integration
MIT8. Sept. 2026 · Metriken 2.10.0
Go
edoardottt/boggart
Highly customizable low-interaction experimental honeypot that mimics specific hosts.
GPL-3.014. Sept. 2026 · Metriken 2.10.0
npm
muneebs/csrf-armor
Modern, framework-agnostic CSRF protection library with multiple security strategies.
MIT15. Sept. 2026 · Metriken 2.10.0
npm
ExorTek/nosql-sanitize
nosql-sanitize is a lightweight and blazing-fast suite of tools designed to prevent NoSQL Injection attacks in Node.js applications. It recursively sanitizes user-supplied data to remove characters and patterns (like $ and control characters) used in malicious MongoDB queries.
MIT15. Sept. 2026 · Metriken 2.10.0
Go
cc1a2b/JShunter
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.
MIT6. Sept. 2026 · Metriken 2.10.0
npm · PyPI
glferreira-devsecops/Cascavel
🐍 Cascavel — The zero-friction offensive security engine. Automate Red Team scans, validate exposures (CTEM), and generate compliance reports in one command.
Eigene Lizenz19. Sept. 2026 · Metriken 2.10.0
Go
sayseven7/frameseven
Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go
MIT17. Sept. 2026 · Metriken 2.10.0
Maven · PyPI
devslab-kr/ssrf-guard
SSRF protection for the JVM — whitelist + private-IP filter + redirect re-validation + LLM-agent tool URL validation (Spring AI + LangChain4j). Modules for RestClient, RestTemplate, WebClient (reactor-netty DNS-time), Feign, Spring AI, LangChain4j, OkHttp, JDK HttpClient, Apache HttpClient 5. GraalVM native-image hints included.
Apache-2.019. Okt. 2026 · Metriken 2.10.0
Packagist
remotemerge/totp-php
Lightweight, fast, and secure TOTP (2FA) authentication library for PHP — battle tested, dependency free, and ready for enterprise integration.
MIT19. Sept. 2026 · Metriken 2.10.0
npm
7a6163/vite-plugin-sri4
A Vite plugin that injects Subresource Integrity (SRI) hashes into your build output.
MIT19. Okt. 2026 · Metriken 2.10.0
crates.io
santhreal/wafrift
WAF evasion testing toolkit. Grammar + encoding mutation, dialect-specific bypasses, evolutionary search, per-WAF gene-bank persistence. Rust.
Apache-2.04. Okt. 2026 · Metriken 2.10.0
PyPI
Ge0rg3/requests-ip-rotator
A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.
GPL-3.016. Sept. 2026 · Metriken 2.10.0
npm
reclaimprotocol/tls
A TLS client implementation in typescript
Keine Lizenz4. Okt. 2026 · Metriken 2.10.0
PyPI
cyberark/QuicDrawH3
QuicDraw(H3) is A security research tool designed for fuzzing and racing HTTP/3 servers. QuicDraw implements the `Quic-Fin-Sync` on HTTP/3 (over QUIC) for race-condition testing.
Apache-2.04. Okt. 2026 · Metriken 2.10.0
npm
iAMv1/omnisectester
Nation-state grade, defense-in-depth security testing framework. Tests web apps, extensions, desktop, mobile, cloud, AI/LLM, hardware, and supply chain from a single CLI.
MIT22. Sept. 2026 · Metriken 2.10.0
npm
3516634930/Payloader
渗透测试Payload速查平台 | Pentest Payload Quick Reference | XSS/SQLi/SSRF/RCE | React+TypeScript
AGPL-3.011. Sept. 2026 · Metriken 2.10.0
npm
sandeep9526/securitywatch
Score-based runtime security middleware for Express with SQL injection, XSS, rate limiting, brute-force detection, suspicious behavior detection, payload anomaly detection, and IP reputation.
MIT5. Okt. 2026 · Metriken 2.10.0
Go
CypherNova1337/paramvoid
Fast HTTP parameter discovery - finds the undocumented query and body parameters a server quietly accepts. Single static Go binary, bundled wordlist, no dependencies.
MIT13. Okt. 2026 · Metriken 2.10.0
Go
hackthacker-sec/recontool
Unified reconnaissance CLI for subdomain discovery, HTTP probing, asset discovery, OSINT, and Wayback data combining subfinder, httpx, chaos, uncover, and Wayback CDX in one tool
MIT9. Sept. 2026 · Metriken 2.10.0