Tools

Tools

847 bookmarks
Custom sorting
Wapiti : a Free and Open-Source web-application vulnerability scanner in Python for Windows, Linux, BSD, OSX
Wapiti : a Free and Open-Source web-application vulnerability scanner in Python for Windows, Linux, BSD, OSX

"Wapiti allows you to audit the security of your web applications.

It performs "black-box" scans, i.e. it does not study the source code of the application but will scans the webpages of the deployed webapp, looking for scripts and forms where it can inject data.

Once it gets this list, Wapiti acts like a fuzzer, injecting payloads to see if a script is vulnerable.

"

Wapiti : a Free and Open-Source web-application vulnerability scanner in Python for Windows, Linux, BSD, OSX
MetricsGraphics.js - a library based on D3.js, optimized for visualizing and laying out time-series data
MetricsGraphics.js - a library based on D3.js, optimized for visualizing and laying out time-series data
"MetricsGraphics.js is a library built on top of D3 that is optimized for visualizing and laying out time-series data. It provides a simple way to produce common types of graphics in a principled, consistent and responsive way. The library currently supports line charts, scatterplots and histograms as well as features like rug plots and basic linear regression."
MetricsGraphics.js - a library based on D3.js, optimized for visualizing and laying out time-series data
websocketd
websocketd

"websocketd is the WebSocket daemon

It takes care of handling the WebSocket connections, launching your programs to handle the WebSockets, and passing messages between programs and web-browser.

"

websocketd
Apache Aurora
Apache Aurora
"Aurora runs applications and services across a shared pool of machines, and is responsible for keeping them running, forever. When machines experience failure, Aurora intelligently reschedules those jobs onto healthy machines."
Apache Aurora
bpkg/bpkg
bpkg/bpkg

"JavaScript has npm, Ruby has Gems, Python has pip and now Shell has bpkg!

bpkg is a lightweight bash package manager. It takes care of fetching the shell scripts, installing them appropriately, setting the execution permission and more.

You can install shell scripts globally (on /usr/local/bin) or use them on a per-project basis (on ./deps/), as a lazy-man "copy and paste"."

bpkg/bpkg
Rerun by rerun
Rerun by rerun
"Rerun is a simple command runner that turns loose shell scripts into modular automation. Rerun will help you organize your implementation into well defined command interfaces. Collections of management modules can be archived and delivered as a single executable to facilitate team hand offs. Using the "stubbs" module, rerun will even facilitate developing modules using a test-driven development practice."
Rerun by rerun
Stashboard: The open source status dashboard
Stashboard: The open source status dashboard

"Stashboard is a status dashboard for APIs and software services. It's similar to the Amazon AWS Status Page or the Google Apps Status Page. Stashboard was originally written by Twilio to provide status information on its Voice and SMS APIs. Stashboard is designed to provide a generic status dashboard for any hosted service or API. The code can be downloaded, customized, and run on any Google App Engine account.

Track multiple different API or SaaS services Set custom status messages and icons such as Up/Down Show historical status for each service Runs on Google App Engine so it's independent of your infrastructure (unless your app is on GAE) Full REST API for both getting and setting status information CNAME to http://status.yourapp.com Stashboard is written in Python and hosted on Google App Engine."

Stashboard: The open source status dashboard
ngrok - secure introspectable tunnels to localhost
ngrok - secure introspectable tunnels to localhost

"Secure On-Demand Tunnels

You'll be assigned a random subdomain on ngrok.com. You can access it with HTTP, or securely with HTTPS.

Request Inspection

Use the web inspection interface when ngrok is running to inspect the HTTP requests over your tunnel. You can even replay them to make debugging easier!"

ngrok - secure introspectable tunnels to localhost
d11wtq/boris
d11wtq/boris

"Python has one. Ruby has one. Clojure has one. Now PHP has one, too. Boris is PHP's missing REPL (read-eval-print loop), allowing developers to experiment with PHP code in the terminal in an interactive manner. If you make a mistake, it doesn't matter, Boris will report the error and stand to attention for further input.

Everything you enter into Boris is evaluated and the result inspected so you can understand what is happening. State is maintained between inputs, allowing you to gradually build up a solution to a problem."

d11wtq/boris
vivus.js - svg animation
vivus.js - svg animation
"Vivus is a lightweight JavaScript class (with no dependencies) that allows you to animate SVGs, giving them the appearence of being drawn. There are a variety of different animations available, as well as the option to create a custom script to draw your SVG in whatever way you like."
vivus.js - svg animation
mariadb-corporation/MaxScale at release-1.0GA
mariadb-corporation/MaxScale at release-1.0GA

The MariaDB Corporation MaxScale is an intelligent proxy that allows forwarding of database statements to one or more database servers using complex rules, a semantic understanding of the database statements and the roles of the various servers within the backend cluster of databases.

MaxScale is designed to provide load balancing and high availability functionality transparently to the applications. In addition it provides a highly scalable and flexibile architecture, with plugin components to support different protocols and routing decissions.

mariadb-corporation/MaxScale at release-1.0GA
ESLint
ESLint
"ESLint is an open source project originally created by Nicholas C. Zakas in June 2013. Its goal is to provide a pluggable linting utility for JavaScript."
ESLint
facebook/device-year-class
facebook/device-year-class
"Device Year Class is an Android library that implements a simple algorithm that maps a device's RAM, CPU cores, and clock speed to the year where those combination of specs were considered high end. This allows a developer to easily modify application behavior based on the capabilities of the phone's hardware."
facebook/device-year-class
Git Large File Storage
Git Large File Storage
"Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server like GitHub.com or GitHub Enterprise."
Git Large File Storage
dbro/csvquote
dbro/csvquote
"This program can be used at the start and end of a text processing pipeline so that regular unix command line tools can properly handle CSV data that contain commas and newlines inside quoted data fields."
dbro/csvquote