Eslam Salem

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Checklist of the most important security countermeasures when designing, testing, and releasing your API

Proof of concept code for Datadog Security Labs referenced exploits.

format old JavaScript dates in a “pretty” way. ex : 2 hours ago , 3 minutes ago

jquery blur plugin

php shell detector and removal

better Nodejs error

Example Implementation For Genetic Algorithm

Vulnerable dockerized environment designed to test OAuth vulnerabilities

Quick and simple nodejs starter application template for your next project

Another spring4shell (Spring core RCE) POC

Drawing Game Using Google Plus Hangout API

No description.

Lightweight Bootstrap NodeJS Apps Build Using ExpressJS 4, MongoDB/Mongoose, Authentication with Passport.js, Jade and GruntJS as Task Automation

Implementation of genetic algorithms for nodejs

No description.

Awesome Golang Security resources 🕶🔐

No description.

Elastic APM Node.js Agent

No description.

Ghost's admin client

👻 The #1 headless Node.js CMS for professional publishing

IP address manipulation library in JavaScript

No description.

:moneybag: Personal finances tracking web app

Embedded JavaScript templates -- http://ejs.co

Fast, unopinionated, minimalist web framework for node.

Core integrations of the Datadog Agent

Spring-cloud-function-SpEL-RCE 批量检测脚本，反弹shell_EXP,欢迎师傅们试用

Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.

Datadog Agent

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

Production home for my blog

The content behind MDN Web Docs

CVE-2021-41773 playground

Lab setup for CVE-2021-41773 (Apache httpd 2.4.49) and CVE-2021-42013 (Apache httpd 2.4.50).

A simple HTTP proxy that fogs over naughty URLs

No description.

EasyRTC is a bundle of Open Source WebRTC joy! Our Javascript API hides the differences between Chrome and Firefox browsers and simplifies coding needed for working WebRTC apps. Signalling server using socket.io built on node.js. Tons of free code so you can build WebRTC apps in a few hours that just work. Demos include Instant messaging, Multiparty chatroom, Audio + Video, Screen sharing, Data channel Messaging and File sharing, and more.

display date in simple way in arabic

No description.

A standalone Amazon S3 (REST) client for PHP 5.2.x using CURL that does not require PEAR.

light weight jquery validation plugin

fast light weight php mvc framework

a tiny javascript hash router

Propel is an open-source Object-Relational Mapping (ORM) for PHP5.

This collection of classes makes it easy to customize key or column names to your needs as well as switch from one data store to another.

A jQuery plugin that provides an abstraction over 2d and 3d transforms - Project Owner: jtaby

A declarative, efficient, and flexible JavaScript library for building user interfaces.

All versions of all skills that are on clawdhub.com archived

A Security Benchmark for Claude Code Agent Skills

"The mother of all demo apps" — Exemplary fullstack Medium.com clone powered by React, Angular, Node, Django, and many more 🏅

Debug bar for PHP

A small collection of vulnerable code snippets

No description.

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

No description.

The original sources of MS-DOS 1.25, 2.0, and 4.0 for reference purposes

Gray Hat Hacking v6

A manager for your secrets.

Command-line program to download videos from YouTube.com and other video sites

Simple HS256 JWT token brute force cracker

CVE-2023-0386在ubuntu22.04上的提权

HASH (HTTP Agnostic Software Honeypot)

Expose your local endpoints to the Internet

Examples for my talk on structuring go apps

No description.

No description.

Damn Vulnerable Web Application (DVWA)

A static analysis tool for finding errors in PHP applications

No description.

CVNA

GitHub action (and command line script) to deploy apps to Elastic Beanstalk

A Free & Open Source DevSecOps Platform

A Psalm plugin for Laravel

A static analysis tool for security

Microservices Security in Action Book Samples

Learn TDD with Golang

Learn Go with test-driven development

Minimal golang binding to V8

A browser based code editor

socket.io library for golang, a realtime application framework.

A scalable platform and CMS to build Node.js applications

🚀 Open source Node.js Headless CMS to easily build customisable APIs

A database of vulnerable Ruby Gems

Learning Golang

Tracking ECMAScript Proposals

⭐️ Companies that don't have a broken hiring process

A boilerplate for Node.js web applications

Awesome Node.js Security resources

Utility to transfer all your data in a nedb database in a MongoDB collection

Automated tool for improving the quality of web pages 🔥. You can run it against any web page, public or requiring authentication. It has audits for performance, accessibility, progressive web apps, SEO and more.

Auth0 headless browser sdk

The open-source database for the realtime web.

Node.js library for the Stripe API.

A starter template for TypeScript and Node with a detailed README describing how to use the two together.

📄 CLI that generates beautiful README.md files

Demo for vulnerable Nodejs project

A React Component library implementing the Base design language

💥 A GraphQL API boilerplate (template) made with Node.js, TypeScript, and PostgreSQL

The next open source file uploader for web browsers :dog:

An enterprise friendly way of detecting and preventing secrets in code.

No description.

No description.

Node.js security CLI / API that allow you to deeply analyze the dependency tree of a given package / directory

No description.

A web tool to explore the ASTs generated by various parsers.

Demo for vulnerable Nodejs project for testing Shieldfy

Etherpad: real-time collaborative document editor

:collision: A boilerplate application for building RESTful APIs Microservice in Node.js using express and mongoose in ES6 with code coverage and JsonWebToken Authentication

OWASP ServerlessGoat: a serverless application demonstrating common serverless security flaws

The ultimate Free Open Source Solution for team communications.

No description.

Damn Vulnerable NodeJS Application

Repository template for serverless packages

A boilerplate for new Serverless Nodejs projects with tests and basic configurations

No description.

Simplest WebRTC ever

Automatically mention potential reviewers on pull requests.

NodeJsScan is a static security code scanner for Node.js applications.

JavaScript Style Guide

No description.

Nodejs - ExpressJS project skeleton

A list of SaaS, PaaS and IaaS offerings that have free tiers of interest to devops and infradev

exploit-database-papers

PHP_CodeSniffer tokenizes PHP, JavaScript and CSS files and detects violations of a defined set of coding standards.

Collection of vulnerable and fixed PHP synthetic test cases

PHP polyfills

Use the Laravel's blade outside Laravel

No description.

Introspected tunnels to localhost

Tabler is free and open-source HTML Dashboard UI Kit built on Bootstrap 4

Rinvex Punnet is opinionated, lightweight, yet powerful, and performant light speed docker environment for PHP applications.

A curated list of awesome programming, development, technical support and discussion channels, groups, communities, resources and other shiny things

Personal Accounting console helper

The source code of dashboard.spatie.be

PHP extension for web-application dynamic analysis.

MongoDB PHP library

Various webshells. We accept pull requests for additions to this collection.

No description.

Run remote commands over a pool of server using SSH.

No description.

A database of PHP security advisories

The official Opbeat agent for Node.js apps

The official Exploit Database repository

Rinvex Composer is an intuitive package that utilizes Composer Plugin API to support additional actions during installation, such as installing packages outside of the default vendor library and running custom scripts during install, update, and uninstall processes.

Just a testing repo

No description.

🗂 The perfect Front-End Checklist for modern websites and meticulous developers

No description.

Participate in Hacktoberfest by contributing to any Open Source project on GitHub! Here is a starter project for easiest contributors. #hacktoberfest

2d quiz generating API written with flask

No description.

A Powerful Laravel Help Desk and Lead Management App

User Operations for Zend

Runkit (official PECL PHP Runkit extension)

No description.

Event-driven asynchronous & concurrent & coroutine networking engine with high performance for PHP.

No description.

No description.

No description.

A skeleton repository for League Packages

Server monitoring tool

A MongoDB based Eloquent model and Query builder for Laravel (Moloquent)

No description.

Route - Fast, flexible routing for PHP, enabling you to quickly and easily build RESTful web applications.

No description.

Rinvex Country is a simple and lightweight package for retrieving country details with flexibility. A whole bunch of data including name, demonym, capital, iso codes, dialling codes, geo data, currencies, flags, emoji, and other attributes for all 250 countries worldwide at your fingertips.

gihub hosted blog

Wrappers for JavaScript alert(), confirm() and other flexible dialogs using Twitter's bootstrap framework

my first ruby on rails application

chrome extension you can contribute and share comments and notes on any web page realtime

typeahead.js is a fast and fully-featured autocomplete library

simple javascript routing library with seo ajax routing support

A base CRUD featuring news articles, uploads, users, roles, all features welcome

Toro is a PHP router for developing RESTful web applications and APIs.