Awesome GitHub RepositoriesHost Header Validations

Helmet is an Express.js middleware library that sets a comprehensive collection of HTTP security headers to protect web applications from common vulnerabilities like cross-site scripting and clickjacking. At its core, it provides a configurable middleware system for injecting security headers into HTTP responses, with a primary focus on Content Security Policy configuration through custom directives and report-only testing modes. The library distinguishes itself through a flexible configuration surface that supports method chaining for composing multiple headers in a single expression, as wel

Paseo is an LLM coding agent orchestrator and multi-agent workflow manager designed to coordinate multiple AI agents across isolated git worktrees. It provides a unified control interface for managing these agents and their associated environments to execute complex programming tasks. The system distinguishes itself through a remote agent daemon that enables secure access to local coding agents via encrypted relays. It employs a git worktree environment manager to isolate parallel tasks into dedicated directories and branch-based server URLs, preventing file collisions and network port confli

all-in-one is a containerized deployment system designed to install and manage a complete suite of productivity and collaboration services. It functions as a cloud suite deployer that orchestrates the installation of a self-hosted content platform, incorporating necessary dependencies via Docker or Kubernetes. The project distinguishes itself by providing a web-based dashboard for orchestrating, updating, and monitoring the lifecycle of service containers. It also serves as a local AI inference server, enabling the execution of generative text models, image diffusion, and speech processing on

Gixy is a static configuration analyzer and security auditor for Nginx. It functions as an infrastructure-as-code security scanner and web server configuration linter designed to identify vulnerabilities and misconfigurations in server definitions before deployment. The tool focuses on detecting high-risk security flaws, including host header spoofing, server-side request forgery, and path traversal. It specifically audits Nginx configurations for risks such as HTTP splitting, multiline header issues, and unauthorized third-party access resulting from incorrect Referer or Origin header patter

Acest proiect este un generator de artefacte HTML LLM și un previewer sandbox conceput pentru prototipare rapidă și creare de conținut. Acesta funcționează ca un bridge de agent AI local care reutilizează sesiunile autentificate de la agenții de codare din linia de comandă pentru a executa sarcini de generare fără a necesita chei API separate. Sistemul convertește layout-urile web în formate specifice platformei prin intermediul unui instrument de export pentru rețelele sociale, utilizând CSS inline și metadate pentru a asigura o publicare consistentă. Utilizează un mediu de randare sandbox pentru a executa codul și scripturile generate de AI în izolare, protejând browserul gazdă de otrăvire. Platforma gestionează transformarea conținutului prin convertirea datelor structurate — inclusiv CSV, JSON și SQL — în artefacte web finisate, cum ar fi pagini de destinație, rapoarte profesionale și pachete de prezentare. Suportă actualizări vizuale în timp real prin streaming-ul codului generat de AI în browser prin evenimente trimise de server. Capabilitățile de export includ conversia nodurilor web randate în imagini PNG de înaltă rezoluție și fișiere HTML independente.

AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing. It serves as a reference resource covering common web vulnerabilities and exploitation methods for security researchers, providing a structured approach to identifying and exploiting web application security flaws in bug bounty programs. The repository covers a wide range of attack categories including authentication bypass, cross-site scripting injection, server-side request forgery, web cache poisoning, and business logic abuse. It includes techniques for bypassing access co

Cronicle is a distributed job scheduler that replaces traditional cron with a browser-based management interface. It runs scheduled tasks across a cluster of servers with automatic failover, using a custom cron parser that intersects day-of-month and day-of-week constraints when both are specified. The system executes jobs through a plugin framework that runs command-line scripts in any language, communicating via JSON over standard input and output. The scheduler provides a web-based real-time dashboard for monitoring running jobs with live logs, resource usage charts, and progress updates.