Open Source JavaScript Security Software - Page 13

pidCrypt is no longer maintained! pidCrypt is a crypto library offering modular cryptographic functions in JavaScript. Supports: AES (CBC & CTR Mode), RSA, MD5, SHA-1, SHA-256, SHA-384, SHA-512, ASN.1, Base64, UTF-8. The AES-CBC mode is compatible to OpenSSL.

Pompelmi is an open-source application designed to provide a simple and efficient interface for interacting with large language models, focusing on usability and accessibility. It offers a streamlined chat-based experience where users can communicate with AI models for various tasks such as writing, analysis, and general assistance. The application emphasizes a clean and minimal interface, reducing complexity while maintaining essential functionality. It is designed to support local or remote model backends, allowing users to choose between privacy-focused local execution or cloud-based services. Pompelmi also includes features for managing conversations, enabling users to maintain context and revisit previous interactions. Its lightweight architecture ensures that it can run efficiently without requiring significant resources. Overall, Pompelmi provides a straightforward entry point for users looking to interact with AI systems without dealing with complex configurations.

pySHOT is a session recorder for windows. (soon linux session recorder also) It's a client/server python app using gearman. To use pyshot you must install pyshot-client from https://sourceforge.net/projects/pyshot-client/ on monitored server

reNgine is an automated reconnaissance framework designed to simplify and enhance the process of gathering information about web applications during security assessments. It provides a streamlined workflow for penetration testers, bug bounty hunters, and security teams who need to perform reconnaissance efficiently and at scale. The platform integrates multiple open-source reconnaissance tools into a unified environment with a configurable scanning engine and an intuitive web interface. reNgine focuses on improving traditional reconnaissance workflows by organizing collected data in a database and correlating results to make them easier to analyze. This approach helps security professionals avoid manually searching through scattered files and instead work with structured, searchable reconnaissance data. The framework supports continuous monitoring of targets and can automatically notify users about newly discovered assets or vulnerabilities.

This project is an example application built with React Native that demonstrates how to implement client login authentication in a mobile context. It shows how to integrate WebViews or native modules to handle login flows, fetch tokens, and manage persistent user sessions across platforms (iOS and Android). Because mobile authentication flows often involve more complexity than web—such as secure storage, token renewal, and redirect handling—the example gives a scaffold for real-world usage. While not a full production app, it provides sufficient structure for mobile developers to learn the foundation of login/registration, token handling, and basic navigation after login. The repository is aimed at developers who already know React or React Native and want to see how authentication can be set up cleanly. It complements discussions and blog posts around mobile login flows and best practices in token-based mobile setups.

A lightweight control plane for Linux servers. No database, no cloud, no nonsense. One agent per host — everything else lives in flat JSON. v3.2.1 ships SNMP polling for agentless devices, MCP write tools for AI hosts, OIDC SSO, an actionable alerts inbox, and inbound webhooks + syslog.

(OSINT) Open-Source intelligence tracking and analysis tool. - Disclaimer: This tool is experimental in its Alpha phase. It's developed and published as a small building block of a master's thesis research. So use it for educational purposes only and at your own discretion, the author cannot be held responsible for any damages caused.

sanesigner is a high level digital signature api component. it support generating and verifying digital signatures as well as encryption and decryption using public keys, and lots of other features in between.

secWWW is PHP and JavaScript library. It ciphers data transferred over the network. It supports secure login into a Web application without sending the password over the Internet.

The Stanford Javascript Crypto Library is a project by the Stanford Computer Security Lab to build a secure, powerful, fast, small, easy-to-use, cross-browser library for cryptography in Javascript. SJCL is small but powerful. The minified version of the library is under 6.4KB compressed, and yet it posts impressive speed results. SJCL is secure. It uses the industry-standard AES algorithm at 128, 192 or 256 bits; the SHA256 hash function; the HMAC authentication code; the PBKDF2 password strengthener; and the CCM and OCB authenticated-encryption modes. Just as importantly, the default parameters are sensible: SJCL strengthens your passwords by a factor of 1000 and salts them to protect against rainbow tables, and it authenticates every message it sends to prevent it from being modified. We believe that SJCL provides the best security which is practically available in Javascript.

SMScryptor encrypts and decrypts messages sent from any mobile phones using : - AES 256 encryption - J2ME MIDP2.0 CLDC1.1 - ECMAScript - Apache / PHP / mysql

soCurious is a firefox extension for capturing HTML form data and storing it, when a password field has been found. Storage can be a local file or transmission of the data over HTTP or SMTP.

spoof is a cross-platform Node.js utility designed to simplify MAC address spoofing and network interface identity manipulation for developers, security researchers, and privacy-conscious users. The project functions as a modern JavaScript implementation inspired by the earlier SpoofMAC tool, providing command-line workflows for randomizing, changing, and restoring MAC addresses on macOS, Linux, and Windows systems. It automates low-level networking commands that would otherwise require manual configuration, making address spoofing more accessible for testing and anonymity workflows. The tool is frequently used in penetration testing, wireless debugging, public Wi-Fi privacy protection, and networking experiments where hardware identity masking is required. Its architecture emphasizes portability and ease of use through Node.js-based scripting and automation support.

Warning: moved to https://github.com/nuxsmin/sysPass sysPass es un moderno sistema de gestión de claves basado en web para un entorno multiusuario de uso empresarial y personal. Claves encriptadas con una clave maestra, acceso basado en grupos y perfiles, subida de archivos, integración con LDAP/Active Directory, auditoría de eventos y más... Detalles de instalación y log de cambios en Wiki Wiki: http://wiki.syspass.org DEMO: http://demo.syspass.org ------------------------------------------------------------- sysPass is the a modern web based password manager to run in a multiuser environment for business and personal use Accounts passwords are encrypted with a unique master password, group/profile based access, file uploading, LDAP/Active Directory integration, auditing and more.... Installation instructions and changelog at Wiki Wiki: http://wiki.syspass.org DEMO: http://demo.syspass.org

Open source headless CMS API written using NestJS, that has pre built modules like User Management, Role Management, Permission Management, Email Module, Account Settings, OTP, Throttling, RBAC support, Localization, and many more.

A toolkit of nitty-gritty classes from real-life projects. Contains generic snippets along with things like server-side DOM implementation or RSA or code generation tools.

a php/js library used for serverside/client side password encryption, ment to mask the password sent by login forms.

wutoo SQL is Blind SQL Script based on AJAX technology. it's use browser engine to trace inside SQL hole. it's support MS SQL server 2000, postgreSQL and many more on next stage.

Pequeno programa portatil, útil para obter informações sobre o sistema e senhas salvas nos navegadores, como Chrome e Firefox.

yaSSL, or yet another SSL, is an embedded ssl library for programmers building security functionality into their applications and devices. yaSSL is highly portable, and runs on standard as well as embedded platforms(QNX, ThreadX, VxWorks, Tron) yaSSL is still available but no longer being developed. Current development on the same project continues under wolfSSL. Visit yaSSL Home above for the latest stable release.

A powerful, provider-based .NET CAPTCHA control with audio challenge and Microsoft Visual Studio design-time support.