Advanced Client-Side Prototype Pollution Scanner

security hacking web-security offensive-security red-team security-tools web-scanner web-security-research web-sec-scanner redteaming scanner-web frontend-security offensivesecurity redteam-tools javascript-security prototype-pollution web-security-audit

• Updated Nov 10, 2026
• Go

Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery

source-maps bug-bounty secret-scanning javascript-security secret-detection

• Updated Oct 16, 2026
• Go

AI/LLM-assisted JS Recon and vulnerability triage for authorized bug bounty testing & pentesting — scope-gated, passive-by-default, human-verified

bug-bounty pentesting bug-bounty-recon bug-bounty-reconnaissance bug-bounty-tools javascript-security bug-bounty-automation

• Updated Nov 12, 2026
• Python

Secure your code in seconds. VibeSafe is an AI-native DevSecOps CLI tool that detects vulnerabilities, secrets, insecure configs, and hallucinated dependencies before they ship.

npm-package vulnerability-detection vulnerability-scanners secure-coding devsecops cli-tool ai-security open-source-security supply-chain-security javascript-security secure-install

• Updated Jul 7, 2026
• TypeScript

Find authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.

javascript python java go security csharp offline offline-first static-analysis owasp authorization code-review access-control python-security security-scanner cwe devsecops sast idor javascript-security

• Updated Sep 11, 2026
• Python

rust cli security devops typescript mcp static-analysis owasp copilot python-security cwe devsecops vulnerability-scanner sast ai-security code-security javascript-security chatgpt ai-generated-code mcp-server

• Updated Feb 15, 2026
• Rust

A client-side web security tool that sanitizes potentially malicious HTML and JavaScript input by stripping unsafe tags and event attributes. Designed to demonstrate XSS prevention concepts, safe input handling, and frontend security practices using pure HTML, CSS, and JavaScript in a beginner-friendly interface.

web-security input-sanitization html-css-javascript ethical-hacking secure-coding security-tools xss-prevention frontend-security javascript-security cybersecurity-learning

• Updated Feb 13, 2026
• JavaScript

DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks, helping make your website resistant to SSRF attacks when implemented correctly.

security owasp web-security security-tools nodejs-security javascript-security safety-useful ssrf-detection- ssrf-prevention

• Updated Nov 2, 2026
• TypeScript

Rust CLI and GitHub Action for static supply-chain scanning across eight package ecosystems, lockfiles, and coding-agent configuration.

rust cli npm security static-analysis pypi cargo lockfile malware-detection github-actions supply-chain-security javascript-security package-security install-time-scanner

• Updated Oct 2, 2026
• Rust

JavaScript Security Engineering (Helicopter View) workshop, crafted for 3 hours with a bunch of demos

react javascript security vuejs angular typescript vue compiler reactjs helmet svelte web-security cross-origin-resource-sharing firebase-security sveltejs cross-site-scripting serverless-security helmetjs svelte3 javascript-security

• Updated Sep 2, 2021
• TypeScript

Find subdomains and urls in Javascript files

osint js python3 penetration-testing bug-bounty information-security penetration-testing-tools bug-bounty-hunting bug-bounty-tools javascript-security

• Updated Sep 20, 2023
• Python

JavaScript Intelligence Engine - SPA bundle'larindan secret/endpoint/source-map cikartan tek dosya ofansif recon araci. 63 secret regex'i, Source Map V3 dekoderi, webpack chunk parser, multi-format cikti. Bug bounty + self-audit.

webpack python3 bug-bounty web-security pentesting recon offensive-security source-map red-team security-tools api-discovery reconnaissance blue-team information-disclosure credential-scanner javascript-analysis javascript-security bugbounty-tools secret-detection spa-security

• Updated May 17, 2026
• Python

Find the API keys and secrets a website is leaking, for site owners and bug bounty hunters. Local, privacy-first, source-available scanner.

source-maps bug-bounty appsec leak-detection security-tools api-keys privacy-first secrets-detection secret-scanning javascript-security

• Updated Oct 20, 2026
• TypeScript

ScriptSentry is an advanced JavaScript security scanner designed to detect exposed secrets, vulnerabilities, and sensitive data in JavaScript files. It automatically crawls websites to discover JS files and scans them

bug cybersecurity penetration-testing bugbounty secure-coding security-tools bug-hunting penetration-testing-tools javascript-security cybersecurity-tools scriptsentry web-security-testing javascript-scanner

• Updated Jul 14, 2025
• Python

Scan and fix vulnerabilities in Python, JavaScript, TypeScript, Go, and Java code using AI-powered analysis with 200 built-in security rules.

rust cli security typescript mcp static-analysis owasp copilot python-security cwe devsecops vulnerability-scanner sast ai-security code-security javascript-security chatgpt ai-generated-code mcp-server

• Updated Oct 13, 2026
• Rust

Next.js JS bundle API endpoint discovery tool — no wordlists, real browser interception

nextjs web-security recon bugbounty pentest api-discovery bugbounty-tool javascript-security endpoint-scanner bundle-analysis js-recon

• Updated May 13, 2026
• Python

Guide intended for full-stack developers to secure projects with JS (React, Vue, etc.) and a Node.js/PHP backend with CRUD/REST APIs

sql-injection xss-vulnerability web-security vps-security javascript-security security-cheatsheets

• Updated Nov 1, 2026

A new package that analyzes user-provided JavaScript code snippets to determine if they can run concurrently without conflicts or race conditions. It takes the code as text input and returns a structu

static-code-analysis concurrency-patterns web-workers javascript-security javascript-concurrency-analysis race-condition-detection thread-safety-analysis javascript-code-assessment nodejs-concurrency code-quality-tools

• Updated Dec 21, 2025
• Python

PhantomPath is a client-side utility designed to demonstrate various techniques used to structurally obfuscate URLs. In the field of cybersecurity, understanding how an attacker can mask a malicious destination is crucial for developing robust defense mechanisms and training users in link analysis.

cybersecurity educational web-security offensive-security red-team threat-analysis link-analysis social-engineering security-research client-side-security security-awareness browser-security frontend-security phishing-detection training-tool malicious-links javascript-security cyber-awareness url-analysis url-obfuscation

• Updated Mar 15, 2026
• HTML

🔍 AI-Powered JavaScript Vulnerability Scanner & Security Automation Tool | Detect XSS, code injection, secrets & more using Google Gemini AI | Multi-purpose security engine with customizable YAML templates for penetration testing & red team operations

static-analysis python3 gemini penetration-testing security-automation vulnerability-scanner redteam ai-powered bug-bounty-tools javascript-security

• Updated Jul 19, 2025
• Python