Module Catalogue
19 modules available
TOTP Two-Factor Auth
Generate and verify time-based one-time passwords (TOTP) compatible with Google Authenticator.
Express CSRF Protection with Double Submit
Implement double-submit CSRF protection in Express without server-side session storage.
ClamAV Malware Scanner Cron
Run ClamAV on upload directory and quarantine infected files automatically.
Rate Limiter Decorator for CLI Tools
Decorator that throttles function calls to N per second — useful for API clients.
Git Secrets Scanner
Scan git history for accidental secret commits before pushing to remote.
AES-256-GCM File Encryption
Encrypt and decrypt a file with AES-256-GCM using Python cryptography library.
Nginx Rate Limiting Config
Per-IP rate limiting in Nginx: burst allowed, delay enforced, login endpoint hardened.
Trivy Container Scan in CI
Scan a Docker image for CVEs in CI and fail the build on critical vulnerabilities.
Password Strength Validator
Validate password strength: length, complexity, and breach check via HaveIBeenPwned API.
JWT Blacklist with Redis
Invalidate JWT tokens by storing revoked JTIs in Redis with TTL matching token expiry.
Secrets Rotation Script
Rotate an AWS Secrets Manager secret and update the consuming service automatically.
Helmet.js Config for Express
Production-ready Helmet.js configuration with CSP, HSTS and other security headers.
SSH Hardening Config
Minimal sshd_config changes to harden SSH: disable root login, password auth, and old ciphers.
CORS Middleware for FastAPI
Configure CORS in FastAPI with environment-driven allowed origins.
SSL Certificate Inspector
Check expiry and details of any SSL certificate from the command line.
Page 1 of 2