Corpus of data automatically shared with Apple by a standard installation of OS X Yosemite.

Create deployable system images from OS X installer

Automated testing, generation & manipulation of #osquery packs

Production-ready detection & response queries for osquery

Automatically updated, moderated and optimized lists for blocking ads, trackers, malware and other garbage

jPurify

macOS Security Compliance Project

An easy to install, high-performance, zero maintenance proxy to run an encrypted DNS server.

A DNS rebinding attack framework.

Pretty random INTERNET syn/ack scanner, useful for finding specific alive ports for research.

Last Resort Font

🔒 Memorable site for testing clients against bad SSL configs.

A Cocoa / Objective-C wrapper around SQLite

ARC and GCD Compatible Reachability Class for iOS and MacOS. Drop in replacement for Apple Reachability

An iOS library to natively render After Effects vector animations

Secure example of an XPC helper written in Swift

A C++ micro-benchmarking framework

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.

A JavaScript implementation of various web standards, for use with Node.js

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis. Built on htmlparser2 for speed and tolerance

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

A parser compiler for Java, JavaScript, Python, Ruby

Mobile UI for kismet