JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
☆270Updated this week
Alternatives and similar repositories for js-x-ray
Users that are interested in js-x-ray are comparing it to the libraries listed below
Sorting:
- ⚡️ A package API to run a static analysis of your module's dependencies. This is the CLI engine!☆37Feb 17, 2026Updated last week
- Programmatically fetch security vulnerabilities with one or many strategies (NPM Audit, Sonatype, Snyk, Node.js DB).☆31Feb 2, 2026Updated 3 weeks ago
- JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project.☆383Feb 9, 2026Updated 2 weeks ago
- NodeSecure HTML & PDF report generator for any public and/or private git repositories.☆16Feb 4, 2026Updated 3 weeks ago
- NodeSecure Governance (Code of conduct & Contribution guidelines)☆16Updated this week
- NodeSecure tool enabling secured continuous integration☆23Dec 25, 2025Updated 2 months ago
- Fast and easy to use CLI-based file encryption program 📦☆13Oct 12, 2025Updated 4 months ago
- Node.js user prompt library for command-line interfaces.☆42Feb 1, 2026Updated 3 weeks ago
- Node.js Loki SDK☆21Feb 16, 2026Updated last week
- Nuclei plugins to audit Chrome extensions☆65Jul 16, 2024Updated last year
- A zoo for malicious NPM packages☆20Dec 8, 2022Updated 3 years ago
- Awesome list of well crafted Node.js packages.☆24Feb 14, 2021Updated 5 years ago
- Personal CodeQL queries☆62Dec 15, 2025Updated 2 months ago
- seCureLI is a tool that enables you to experience the delight of building products by helping you get ideas from your head into working s…☆28Jul 15, 2024Updated last year
- Crawlector is a threat hunting framework designed for scanning websites for malicious objects.☆124Dec 13, 2025Updated 2 months ago
- Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.☆1,105Updated this week
- AcSecurity is a Python module designed to scan applications for common security vulnerabilities. It checks for hardcoded secrets, depende…☆16Aug 29, 2025Updated 6 months ago
- Visualize your project security vulnerabilities as a pie chart in the terminal☆25Jul 12, 2025Updated 7 months ago
- BlueSky OSINT Tool☆14Dec 10, 2024Updated last year
- Code de conduite de la communauté francophone de JavaScript (ECMAScript) et Node.js☆87Aug 29, 2024Updated last year
- Red Kite, the Extensible Attack Surface Management tool.☆89Feb 8, 2026Updated 2 weeks ago
- A Python3 module to assist in fuzzing web applications☆57Jan 11, 2024Updated 2 years ago
- Web Security Scanner☆379Nov 13, 2025Updated 3 months ago
- A tool for folks who `git clone` first and ask questions later☆66Sep 12, 2025Updated 5 months ago
- Tooling backed by an LLM for performing natural language searches against compiled target binaries. Search for encryption code, password …☆165Apr 10, 2024Updated last year
- A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.☆238Jan 10, 2024Updated 2 years ago
- one-stop resource for all things offensive security.☆177Feb 21, 2026Updated last week
- Automatically identify serialization issues in PHP Frameworks by means of an Burp Suite active scan☆42Jul 7, 2025Updated 7 months ago
- A Firefox Web Extension to improve the discovery of DOM XSS.☆285Nov 13, 2024Updated last year
- Turn functions(with, args) into squareFunctions[[with, args]]☆14Aug 13, 2021Updated 4 years ago
- An npm package for demonstration purposes using TypeScript to build for both the ECMAScript Module format (i.e. ESM or ES Module) and Com…☆15Aug 22, 2022Updated 3 years ago
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated last year
- A Completely Modular LLM Reverse Engineering, Red Teaming, and Vulnerability Research Framework.☆54Nov 9, 2024Updated last year
- ngrok Collaborator Link — yet another Burp Collaborator alternative for free with ngrok.☆113Jan 4, 2024Updated 2 years ago
- Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.☆2,569Updated this week
- Tool for obfuscating and deobfuscating data.☆75Mar 20, 2024Updated last year
- Static code analyser for backdoors and malicious code in git repos using OpenAI compatible LLM APIs☆73Mar 1, 2024Updated last year
- Dropbox LLM Security research code and results☆255May 21, 2024Updated last year
- CRLFMap is a tool to find HTTP Splitting vulnerabilities☆32Oct 11, 2020Updated 5 years ago