Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery
-
Updated
Oct 16, 2026 - Go
#
javascript-security
Here are 26 public repositories matching this topic...
Secure your code in seconds. VibeSafe is an AI-native DevSecOps CLI tool that detects vulnerabilities, secrets, insecure configs, and hallucinated dependencies before they ship.
npm-package vulnerability-detection vulnerability-scanners secure-coding devsecops cli-tool ai-security open-source-security supply-chain-security javascript-security secure-install
-
Updated
Jul 7, 2026 - TypeScript
Find authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.
javascript python java go security csharp offline offline-first static-analysis owasp authorization code-review access-control python-security security-scanner cwe devsecops sast idor javascript-security
-
Updated
Sep 11, 2026 - Python
DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks, helping make your website resistant to SSRF attacks when implemented correctly.
security owasp web-security security-tools nodejs-security javascript-security safety-useful ssrf-detection- ssrf-prevention
-
Updated
Oct 14, 2026 - TypeScript
ScriptSentry is an advanced JavaScript security scanner designed to detect exposed secrets, vulnerabilities, and sensitive data in JavaScript files. It automatically crawls websites to discover JS files and scans them
bug cybersecurity penetration-testing bugbounty secure-coding security-tools bug-hunting penetration-testing-tools javascript-security cybersecurity-tools scriptsentry web-security-testing javascript-scanner
-
Updated
Jul 14, 2025 - Python
Guide intended for full-stack developers to secure projects with JavaScript technologies (React, Vue, etc.) and a Node.js/PHP backend with CRUD/REST APIs
-
Updated
Aug 6, 2026
Next.js JS bundle API endpoint discovery tool — no wordlists, real browser interception
nextjs web-security recon bugbounty pentest api-discovery bugbounty-tool javascript-security endpoint-scanner bundle-analysis js-recon
-
Updated
May 13, 2026 - Python
Find the API keys and secrets a website is leaking, for site owners and bug bounty hunters. Local, privacy-first, source-available scanner.
source-maps bug-bounty appsec leak-detection security-tools api-keys privacy-first secrets-detection secret-scanning javascript-security
-
Updated
Oct 20, 2026 - TypeScript
2026 research guide covering ChatGPT Pro and Plus regional price reports, Egypt and Philippines billing claims, browser-console script risks, card anecdotes, renewal comparisons, payment troubleshooting, and official account safety.
browser-console javascript-security chatgpt chatgpt-plus account-safety chatgpt-pro regional-pricing chatgpt-subscription chatgpt-pricing payment-troubleshooting billing-security subscription-guide
-
Updated
Aug 10, 2026
🔍 AI-Powered JavaScript Vulnerability Scanner & Security Automation Tool | Detect XSS, code injection, secrets & more using Google Gemini AI | Multi-purpose security engine with customizable YAML templates for penetration testing & red team operations
static-analysis python3 gemini penetration-testing security-automation vulnerability-scanner redteam ai-powered bug-bounty-tools javascript-security
-
Updated
Jul 19, 2025 - Python
Chrome extension (Manifest V3) that grades the security of the page you're on, A to F: TLS certificate, security headers, cookies, API calls, hardcoded secrets and vulnerable JS libraries. 100% local, no telemetry, zero dependencies.
chrome-extension tls privacy cookies content-security-policy bug-bounty ssl-certificate infosec web-security browser-extension pentesting security-scanner security-tools vulnerability-scanner retirejs api-security security-headers secret-scanning manifest-v3 javascript-security
-
Updated
Sep 13, 2026 - JavaScript
Secure your code in seconds. VibeSafe is an AI-native DevSecOps CLI tool that detects vulnerabilities, secrets, insecure configs, and hallucinated dependencies before they ship.
npm-package vulnerability-detection vulnerability-scanners secure-coding devsecops cli-tool ai-security open-source-security supply-chain-security javascript-security ai-security-testing ai-security-tool secure-install
-
Updated
May 17, 2025 - TypeScript
- Phishing HTML Templates Obfuscator -
javascript-obfuscator obfuscation phishing html-css-javascript safe-browsing javascript-security gophish-tamplate google-security html-obfuscator
-
Updated
Jul 20, 2025 - HTML
CVE-2026-22686-RemoteCodeExecution-RCE-PoC
exploit poc rce ctf security-research sandbox-escape nodejs-security javascript-security enclave-vm cve-2026-22686
-
Updated
Sep 16, 2026 - Python
JS Bundle Credential Hunter — finds hardcoded admin credentials in AI-generated websites (Next.js, Vite, React). Security research tool by @ethicalcodnoz
penetration-testing web-security bugbounty ethical-hacking security-research ai-security hardcoded-credentials javascript-security nextjs-security credential-hunting
-
Updated
Jul 7, 2026 - Python
İnternet sitenizi kopyalamaya karşı korumanız için Html & Css & JavaScript dilleri ile oluşturulmuş yazılım. || A software created with Html & Css & JavaScript languages to protect your website against copying.
-
Updated
Sep 30, 2021 - JavaScript
JavaScript/TypeScript SAST for eval, innerHTML, prototype pollution, and secrets — offline JS code security scanner.
python xss cybersecurity application-security secure-coding security-tools devsecops sast sbom code-security javascript-security offline-security
-
Updated
Sep 2, 2026 - Python
Professional TryHackMe CTF walkthrough for Fool's Mate, Revenge, documenting server-side authorization analysis, API enumeration, prototype pollution, JavaScript object inheritance abuse, reward-gate bypass, exploitation methodology, remediation, and portfolio-ready GitHub Pages documentation.
cybersecurity ctf-writeups web-security web-exploitation api-security nodejs-security tryhackme authorization-bypass javascript-security prototype-pollution
-
Updated
Oct 25, 2026
Browser Security Monitoring (BSM): A browser-resident framework for real-time detection of JavaScript API abuse and prompt injection attacks.
chrome-extension web-security malware-detection security-research ai-security browser-security javascript-security prompt-injection
-
Updated
Aug 20, 2026 - Python
Add this topic to your repo
To associate your repository with the javascript-security topic, visit your repo's landing page and select "manage topics."