This is a set of hacking tools written in NodeJS
-
Updated
May 2, 2018
#
nodejs-security
Here are 22 public repositories matching this topic...
-
Updated
Nov 14, 2018 - HTML
Security Explained in a different way : Nodejs | ReactJs | React Native | Database
mobile-app nodejs-security reactjs-security reactnative-securiity mobile-app-security backend-security database-security
-
Updated
Jan 4, 2019
A Collection of articles, videos, blogs, talks and other materials on Node.js Security
nodejs security penetration-testing web-security pentesting learning-nodejs nodejs-security nodejs-pentesting nodejs-secuirty-reading
-
Updated
Jul 10, 2019
A multithreaded, (mostly) async mass Node.js vulnerability scanner.
-
Updated
Jul 25, 2019 - TypeScript
Learning path for becoming nodejs developer from zero to hero. These series includes steps to become nodejs developers for beginner to experienced developers
real-time deployment backend socket-io nodejs-mongodb backend-webdevelopment nodejs-api nodejs-express nodejs-backend nodejs-testing backend-api nodejs-security nodejs-restful-api
-
Updated
Jun 29, 2020
My personal study notes for the exam OpenJS Node Services Developer (JSNSD) and LFW212 course labs
-
Updated
Feb 14, 2024 - JavaScript
It's a comprehensive Node.js project aimed at implementing a wide range of security measures to ensure robust protection during transmission to safeguarding against common security pitfalls.
-
Updated
Mar 5, 2024
This project is designed to benchmark the performance of bcrypt hashing at different salt rounds. It helps in determining the optimal number of rounds for hashing passwords, balancing security and performance.
nodejs security benchmark cryptography authentication bcrypt hashing-algorithm performance-testing nodejs-security password-hashing
-
Updated
Mar 12, 2024 - JavaScript
SystemGuard - Prozessüberwachung und Firewall-Schutz
nodejs windows automation sysmon process-management network-security system-security system-administration security-tools firewall-management windows-automation windows-firewall process-monitoring real-time-monitoring nodejs-security
-
Updated
Jun 6, 2025 - Batchfile
PowerShell forensic toolkit for auditing Node.js development environments. Detects npm supply chain attacks, hidden task execution, and obfuscated malware processing.
powershell reverse-engineering forensics threat-hunting malware-analysis blueteam security-tools nodejs-security npm-audit supply-chain-security blueteam-tools contagious-interview
-
Updated
Feb 15, 2026 - PowerShell
Secure Node.js e-commerce backend with JWT authentication, refresh token rotation, and protected route middleware.
authentication cybersecurity postman jwt-authentication refresh-tokens api-security nodejs-security backend-security token-rotation
-
Updated
Feb 23, 2026 - JavaScript
Zero-dependency detection tools for npm supply chain attacks (Shai-Hulud, CanisterWorm, GlassWorm)
bash cli npm security scanner supply-chain devsecops malware-detection nodejs-security shai-hulud glassworm canisterworm
-
Updated
Mar 24, 2026 - Shell
Helmet + OWASP Top 10:2025 in one zero-dependency import. Ultra-lightweight security middleware for Node.js
-
Updated
Apr 7, 2026 - TypeScript
Defensive static analysis and detection engineering for the 2026 Shai-Hulud npm supply-chain campaign: Sigma/YARA rules, IOCs, ATT&CK mapping, and defender guidance.
ioc incident-response threat-hunting malware-analysis sigma yara devsecops threat-intelligence bun blue-team mitre-attack nodejs-security detection-engineering supply-chain-security ci-cd-security github-actions-security npm-security shai-hulud npm-supply-chain shai-hulud-2026
-
Updated
Aug 4, 2026 - YARA
CVE-2026-22686-RemoteCodeExecution-RCE-PoC
exploit poc rce ctf security-research sandbox-escape nodejs-security javascript-security enclave-vm cve-2026-22686
-
Updated
Sep 16, 2026 - Python
one common template that follows in all CTF walkthroughs
owasp ctf-writeups ejs web-security privilege-escalation debugfs linux-security nosql-injection ssti nodejs-security tryhackme cybersecurity-portfolio
-
Updated
Sep 22, 2026
Professional walkthrough of the Do Not Disturb TryHackMe room, demonstrating web application exploitation through NoSQL Injection, Server-Side Template Injection, Remote Code Execution and Linux privilege escalation using debugfs and the disk group. Includes methodology, attack chain, screenshots, mitigations, and GitHub Pages documentation.
owasp ctf-writeups ejs web-security ctf privilege-escalation debugfs linux-security nosql-injection ssti nodejs-security tryhackme cybersecurity-portfolio
-
Updated
Sep 22, 2026
Add this topic to your repo
To associate your repository with the nodejs-security topic, visit your repo's landing page and select "manage topics."