evilpacket

express-secure-skeleton

Basic Express.js v3 skeleton app implementing some basic secure defaults

xss.io

redis-sha-crack

node / redis sha hash cracker

eslint-rules

Collection of various eslint-rules

csp-playground

Content Security Policy (CSP) Playground

bower-retire.js-scan

bower-burp-static-analysis

Nov 2014 scan of bower using burp suite static analysis engine

node-yubikey

NodeJS Yubikey Web Service Client Module

breach-revshell

cuddly-spork

demo

Contains various vulnerable dependencies useful for demonstration purposes.

insert-script

module-fs-changes

Use docker to get fs changes when npm installing a module

node-dirscan

A very basic remote directory scanner

path-search

burpbuddy-request

burpstaticscan

Use burp's JS static code analysis on code from your local system.

dependency-check

checks which modules you have used in your code and then makes sure they are listed as dependencies in your package.json

evilpacket.github.com

evilpacket.github.com

get-contact-from-module-name

insert-bootstrap

node-http-exfiltrate

Quick and dirty node + express server for file uploads (most useful for exfiltration from a remote server)

node-mixpanel-api

Node module to query the mixpanel API

npm-i-docker-fs-changes

shareterm

Sublime-SrcAuditTools

Some useful tools for source review in sublime text.