ssh2 - SSH2 client and server modules written in pure JavaScript for node.js

•    Javascript

---

SSH2 client and server modules written in pure JavaScript for node.js.Development/testing is done against OpenSSH (7.1 currently).

ssh ssh2 sftp secure shell exec remote client

microgateway - IBM API Connect Microgateway framework, built on Node.js & Nginx

•    Javascript

---

The role of a Gateway in an API architecture is to protect, enrich and control access to API services. These sets of capabilities are often related to security and rate limiting, but it also includes the ability to do deeper message inspection. For example, you may want to insure that the message received is properly formed JSON, XML, or data following your own specific format. In addition, the Gateway can modify the payload or transform it to meet old or new interfaces for the API backend. Finally, the Gateway can invoke multiple services and aggregate responses from multiple API backends.The Microgateway is the foundation for all of those things. It is optimized to perform security, rate limiting, and much more complex packet processing through a highly flexible flow-engine.

api-management gateway apiconnect nodejs nginx ibm api connect microgateway microservices secure enforce

cookies.js - 🍪 Delicious browser cookies

•    Javascript

---

Intuitive cookie manipulation library for the front-end

cookie session-cookie cookies js frontend expiration secure

auto-sni - 🔐 Free, automated HTTPS for NodeJS made easy.

•    Javascript

---

If you have any questions, throw them up on gitter. AutoSNI requires access to low level ports 80 (http) and 443 (https) to operate by default. These ports are typically restricted by the operating system.

auto auto-sni http https lets-encrypt letsencrypt letsencrypt-auto renew secure sni ssl tls web

random_compat - PHP 5.x support for random_bytes() and random_int()

•    PHP

---

PHP 5.x polyfill for random_bytes() and random_int() created and maintained by Paragon Initiative Enterprises. Although this library should function in earlier versions of PHP, we will only consider issues relevant to supported PHP versions. If you are using an unsupported version of PHP, please upgrade as soon as possible.

php5 secure secure-by-default random random-bytes csprng randomness random-int polyfill random-generation randomization

laravel-permission - Associate users with roles and permissions

•    PHP

---

This package allows you to manage user permissions and roles in a database. If you're using multiple guards we've got you covered as well. Every guard will have its own set of permissions and roles that can be assigned to the guard's users. Read about it in the using multiple guards section of the readme.

laravel permission secure

Brave - Next generation Brave browser for macOS, Windows, Linux, and eventually Android

•    C++

---

Brave is on a mission to fix the web by giving users a safer, faster and better browsing experience – while growing support for content creators through a new attention-based ecosystem of rewards. It loads pages 2x faster on desktop and up to 8x faster on mobile.

browser web-browser secure privacy

laratrust - Handle roles and permissions in your Laravel application

•    PHP

---

Laratrust is an easy and flexible way to add roles, permissions and teams authorization to Laravel 5 (>=5.2.32). For Laravel < 5.2.32 please use the 4.0 branch.

laratrust laravel roles authorization permissions acl rbac secure multiuser teams

Firefox Send - Simple, private file sharing

•    Javascript

---

Firefox Send lets you share files with end-to-end encryption and a link that automatically expires. This helps to keep your stuff private and make sure it does not stay online forever.

file-sharing secure-file-sharing secure encryption cloud

monod - :notebook: Our cool, secure, and offline-first Markdown editor.

•    Javascript

---

Documentation can be found in the doc/ directory. We use this Dockerfile to run Monod in production (which runs npm run start from the Monod root directory).

offline-first markdown-editor secure

postmate - 📭 A powerful, simple, promise-based postMessage library.

•    Javascript

---

A powerful, simple, promise-based postMessage iFrame communication library. Postmate is a promise-based API built on postMessage. It allows a parent page to speak with a child iFrame across origins with minimal effort.

handshake promise postmessage secure iframe communicate simple iframes pci security

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG

•    Javascript

---

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify sanitizes HTML and prevents XSS attacks. You can feed DOMPurify with string full of dirty HTML and it will return a string (unless configured otherwise) with clean HTML. DOMPurify will strip out everything that contains dangerous HTML and thereby prevent XSS attacks and other nastiness.

xss sanitizer dom security dompurify prevent-xss-attacks mathml html svg cross-site-scripting secure sanitize filter purify html-sanitizer

age - A simple, modern and secure encryption tool

•    Go

---

age is a simple, modern and secure file encryption tool, format, and Go library. It features small explicit keys, no config options, and UNIX-style composability. It has support for public/private key pairs and passwords, with multiple recipients. An extremely simple CLI that composes well with UNIX pipes, and that works well as a backend for other programs. A good seekable streaming encryption scheme based on modern chunked AEADs, reusable as a general encryption format.

encryption encryption-tools secure command-line ssh pgp cli

Syncthing - Open Source Continuous File Synchronization

•    Go

---

Syncthing replaces proprietary sync and cloud services with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third party and how it's transmitted over the Internet.

synchronization peer-to-peer p2p file-synchronization privacy secure p2p-file-transfer file-transfer

MsQuic - Cross-platform, C implementation of the IETF QUIC protocol, exposed to C, C++, C# and Rust

•    C

---

MsQuic is a Microsoft implementation of the IETF QUIC protocol. QUIC, a UDP-based, stream-multiplexing, encrypted transport protocol. It is cross-platform, written in C and designed to be a general purpose QUIC library. MsQuic also has C++ API wrapper classes and exposes interop layers for both Rust and C#.

protocol transport-protocol secure quic network-programming

Passbolt - Password manager for the team

•    PHP

---

Passbolt is an open source password manager for teams. It allows you to securely share and store credentials. For instance, the wifi password of your office, the administrator password of a router or your organisation's social media account passwords, all of them can be secured using passbolt.

password-manager passbolt security password secure openpgp self-hosted

Chroma-Hash - A sexy, secure live visualization of password field input

•    Javascript

---

Password entry can be frustrating, especially with long or difficult passwords. On a webpage, secure fields obscure your input with •'s, so others can't read it. Unfortunately, neither can you—you can't tell if you got your password right until you click "Log In". Chroma-Hash displays a series of colored bars at the end of field inputs so you can instantly see if your password is right. Chroma-Hash takes an MD5 hash of your input and uses that to compute the colors in the visualization. The resulting color pattern is non-reversible, so no one could know what your password just from the colors.

password visualization secure hash plugin browser

OpenSSH - Keep your communication secret

•    C

---

OpenSSH encrypts all traffic (including passwords) to effectively eliminate eavesdropping, connection hijacking, and other attacks. Additionally, OpenSSH provides secure tunneling capabilities and several authentication methods, and supports all SSH protocol versions.

ssh secure cryptography scp sshd sftp

blinksocks - A framework for building composable proxy protocol stack.

•    Javascript

---

A framework for building composable proxy protocol stack. You can get the latest blinksocks via package manager yarn or npm.

nodejs proxy shadowsocks shadowsocksr v2ray protocol aead obfs tcp udp tls acl vmess socks5 websocket gfw http multiplexing http2 https socks4 socks4a secure blinksocks middleware

Silence - SMS/MMS encryption made easy

•    Java

---

Silence (formerly SMSSecure) is an SMS/MMS application that allows you to protect your privacy while communicating with friends.Using Silence, you can send SMS messages and share media or attachments with complete privacy. It communicates using encrypted SMS messages. No servers or internet connection required. It uses the Signal encryption protocol to provide privacy for every message, every time.

android-apps sms short-messaging-service secure-sms secure secure-messaging encryption