Attack Packages

Compare two Buffers using Double HMAC to protect against timing attacks

An envelope generator for web audio

Litmit request as middleware for express

Freezes common prototypes like Array.prototype to avoid any library messing with them

Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.

Scans your computer for node modules that are potentially vulnerable to supply chain attacks. You still need to review the code of modules that are not vulnerable, but this helps.

Koa middleware to protect against HTTP Parameter Pollution attacks

somehow-village

🪤 Automatically detect, log, fingerprint, and block attacks.

Fast and efficient in-memory rate-limit for Node, used to alleviate severe DOS attacks.

A timing-safe comparison function utilizing the 'Double HMAC validation pattern' with webcrypto, designed to operate in Node.JS, Edge, and Browser environments.

Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.

A PostgreSQL store for the `express-rate-limit` middleware

A brute-force protection middleware for express routes that rate limits incoming requests

This package facilitates the filtration of input text susceptible to server-side exploitation. It encompasses a model trained on a dataset comprising approximately 6,000 XSS-attack scripts to categorize the input into two predefined classes: vulnerable an

A brute-force protection middleware for express routes that rate limits incoming requests

Sequelize store for express-brute

Simple representation of MITRE ATT&CK data

Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.

MongoDB store for the Node.js express-rate-limit package.