Posts

  • Obfuscator-Class

    :man_technologist: Simple and effective Obfuscator PHP class (this is not a stupid base64 encoding script, but a real and effective obfuscation script)

    Simple, easy-to-use and effective Obfuscator PHP class.

    Not just a stupid base64 encoding script, but a real and effective obfuscation script.

    Ideal to obfuscate some critical pieces of your software such as licensing verification functions.

    Tags: #php • obfuscator • obfuscation

  • hyperformula

    HyperFormula is an open-source headless spreadsheet for business web apps. It comes with over 400 formulas, CRUD operations, undo-redo, clipboard support, and sorting.

    HyperFormula doesn’t assume any existing user interface, making it a general-purpose library that can be used in various business applications. Here are some examples:

    • Custom spreadsheet-like app
    • Business logic builder
    • Forms and form builder
    • Educational app
    • Online calculator

    Tags: #typescript • calculation-engine • formula

  • oraxen

    Oraxen is a minecraft plugin that allows to easily use Minecraft 1.14 features in order to create new items with custom textures. It handles the resourcepack generation, upload (using Polymath) and has an extensible API.

    Oraxen is a minecraft plugin that allows you to modify the game by adding new items, weapons, blocks, and more. One of its key features is to be able to generate the texture pack automatically from the configuration, which greatly simplifies the work of administrators. It also includes an extensive API which can be used by developers to be able to increase oraxen features.

    Tags: #java • minecraft • spigot

  • arcgis-rest-js

    compact, modular JavaScript wrappers for the ArcGIS REST API

    compact, modular JavaScript wrappers for the ArcGIS REST API that run in Node.js and modern browsers.

    Tags: #typescript • data-management • javascript

  • Bootstrap-3-Typeahead

    The Typeahead plugin from Twitter’s Bootstrap 2 ready to use with Bootstrap 3 and Bootstrap 4


    For simple autocomplete use cases there seems to be nothing wrong with the dropped typeahead plugin. Here you will find the typeahead autocomplete plugin for Twitter’s Bootstrap 2 ready to use with Twitter’s Bootstrap 3. The original code is written by @mdo and @fat.

    Users who migrate their website or app from Twitter’s Bootstrap 2 to Bootstrap 3 can also use this plugin to keep their current autocomplete functions. See for a complete list of migrations steps: Migrate your templates from Twitter Bootstrap 2.x to Twitter Bootstrap 3

    With Twitter Bootstrap 3 the typeahead plugin had been dropped. @mdo says: “in favor of folks using Twitter’s typeahead. Twitter’s typeahead has more features than the old bootstrap-typeahead.js and less bugs.” Twitter’s typeahead don’t work direct with Bootstrap 3. The DOM structure of the dropdown menu used by typeahead.js differs from the DOM structure of the Bootstrap dropdown menu. You’ll need to load some additional CSS in order to get the typeahead.js dropdown menu to fit the default Bootstrap theme. Try extended Bootstrap LESS or if your are looking for a more extended version try: typeahead.js-bootstrap3.less.

    Typeahead.js doesn’t seem ready for the new Twitter Bootstrap 3 at the moment. Code is not up to date and fixes are needed. See also: Typeahead problems with Bootstrap 3.0 RC1.

    Tags: #javascript

  • RFC6265 Cookies and CookieJar for Node.js

    A Node.js implementation of [RFC6265][rfc6265-tracker] for cookie parsing, storage, and retrieval.

    Tags: #typescript

  • defer.client

    Zero infrastructure Node.js background jobs

    Tags: #typescript • background-jobs • cron

  • spdx-spec

    The SPDX specification in MarkDown and HTML formats.

    The System Package Data Exchange (SPDX®) specification is an open standard capable of representing systems with software components in as SBOMs (Software Bill of Materials) and other AI, data and security references supporting a range of risk management use cases.

    The SPDX standard helps facilitate compliance with free and open source software licenses by standardizing the way license information is shared across the software supply chain. SPDX reduces redundant work by providing a common format for companies and communities to share important data about software licenses and copyrights, thereby streamlining and improving compliance.

    This repository holds under active development version of the specification as:

    • MarkDown (master branch)
    • HTML (gh-pages branch, built on every commit to master and development/ branches)

    See for the official releases of the specification or additional information also the SPDX website.

    Tags: #python • spdx • specification

  • PiracyChecker

    An Android library that prevents your app from being pirated / cracked using Google Play Licensing (LVL), APK signature protection and more. API 14+ required.

    This library applies some techniques to help protect your app’s users and attempt to thwart reverse engineers and attackers. BUT, this isn’t guaranteed to stop your app from getting pirated. There is no such thing as 100% security, and a determined and skilled attacker with enough time, could remove these checks from the code. The real objective here is to raise the bar out of reach of opportunist and automatic attackers.

    Some of the techniques included in this library can be found here.

    Tags: #java • apk • signature

  • API-fuzzer

    API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities

    API_Fuzzer gem accepts a API request as input and returns vulnerabilities possible in the API. Following are the main check involved in API_Fuzzer gem

    • Cross-site scripting vulnerability
    • SQL injection
    • Blind SQL injection
    • XML External entity vulnerability
    • IDOR (in specific cases)
    • API Rate Limiting
    • Open redirect vulnerabilities
    • Information Disclosure flaws
    • Info leakage through headers
    • Cross-site request forgery vulnerability

    Tags: #ruby • gem • ruby-gem

subscribe via RSS