How GitHub Actions workflows can be hacked

Cloud-native high-performance edge/middle/service proxy

EPG/m3u creator for timeshifted content on tv7

Reverse proxies cheatsheet

JavaScript syntax tree transformer, nondestructive pretty-printer, and automatic source map generator

💥 Generate code at build-time

Secure-by-default HTTP servers in Go.

The library for web and native user interfaces.

Raspberry Pi Kiosk Screen

Raspberry Pi Zero W based barcode scanner

Understand and mitigate software-observable side-channels

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Draft proposal for SES (Secure EcmaScript)

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

"The mother of all demo apps" — Exemplary fullstack Medium.com clone powered by React, Angular, Node, Django, and many more

A book series on JavaScript. @YDKJS on twitter.

Security design pattern support for Node.js

Simple web component that uses the DOMPurify library to sanitize it's content.

A sandboxed JavaScript interpreter in JavaScript.

BoardGameGeek application for Android (unofficial)

A collection of JavaScript engine CVEs with PoCs

A repository for learning various heap exploitation techniques.

A collection of PHP backdoors. For educational or testing purposes only.

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

Storage Standard

E2EMail is a simple Chrome application - a Gmail client that exchanges OpenPGP mail.