pem.qwer · 1.0.0PEM bundles read block by block (certificates, keys and requests, with their labels, headers, key algorithm and SHA-256), blocks picked out, written, and turned into DER files and back.6 views · 6 downloadsFile type file_type.qwer · 1.0.0What a file really is from its first bytes, not its name: MIME type, extension and kind, for upload checks.7 views · 9 downloadsArgon2 passwords argon2.qwer · 1.0.0Argon2id password hashes with the memory and passes you choose, any Argon2 hash verified, its parameters read, old ones marked for a rehash, and the cost timed on this server.7 views · 6 downloadsContent-Security-Policy csp.qwer · 1.0.0Content-Security-Policy headers built from a map and read back, a nonce per page, the policy graded for the holes that let scripts in, and whether a URL would load under it.7 views · 7 downloadsCSRF tokens csrf_tokens.qwer · 1.0.0CSRF protection for forms and fetch calls: tokens signed for one session that expire, the signed double-submit cookie check, and the Origin, Referer and Sec-Fetch-Site checks.7 views · 7 downloadsDKIM, SPF and DMARC email_auth.qwer · 1.0.0Messages signed and checked with DKIM (RSA and Ed25519), SPF records read and evaluated for a sending IP, and DMARC policies applied, with DNS records given as a map so it runs offline.6 views · 5 downloadsOSV vulnerabilities osv.qwer · 1.0.0Ask OSV.dev about packages by name or purl and in batches with pages followed, evaluate affected ranges with each ecosystem's own version order (semver, PEP 440, Debian, RubyGems, Maven), and turn CVSS 3 vectors into scores.2 views · 7 downloadsSecrets scanner secrets_scan.qwer · 1.0.0API keys, tokens, private keys, JWTs and passwords in URLs found in text by gitleaks-style rules, with documentation placeholders told apart, and the text given back with them masked.7 views · 8 downloadsSecurity headers security_headers.qwer · 1.0.0A response's security headers graded A+ to F: HSTS, CSP, framing, sniffing, referrers, permissions, cookies' flags, CORS and version leaks, each with its fix; and a good set to send.8 views · 6 downloadsUpload checks upload_guard.qwer · 1.0.0Uploads checked before they are kept: the real type by magic bytes against the name and an allow list, size, double extensions, programs, zip bombs and zip slips, SVGs and PDFs that run scripts, macros and polyglots.7 views · 7 downloadsRight-to-left text bidi.qwer · 1.0.0Right-to-left text done right: a text's direction, mixed Arabic or Hebrew text put in display order for printers, terminals and images, user text isolated so it cannot flip a page, and Trojan Source direction controls found and removed.5 views · 7 downloadsCUID2 cuid2.qwer · 1.0.0CUID2 ids: secure, collision-resistant, starting with a letter, of the length you choose, that give away neither the time nor a count; and a check that a string is one.7 views · 7 downloadsNano ID nanoid.qwer · 1.0.0Short random ids for links, invites and coupon codes: Nano ID with secure random, your own alphabet and length, readable codes for print, and the odds of a collision.7 views · 7 downloadsBloom filters bloom.qwer · 1.0.0Bloom filters saved to a file: have we seen this email, URL or leaked password before, for millions of items in a few megabytes, never a false no.7 views · 7 downloadsSVG cleaner svg_clean.qwer · 1.0.0SVG files made safe and small: scripts, event handlers, outside links, foreignObject and editor clutter removed, links unwrapped, numbers rounded and whitespace squeezed, with a report of what was taken out.7 views · 4 downloadsCaptcha checks captcha_verify.qwer · 1.0.0Server-side checks of Cloudflare Turnstile, hCaptcha and reCAPTCHA v2 and v3 answers with one call and one result shape, the hostname, action and score checked, and the widget's HTML for the form.6 views · 7 downloadsGraphQL query checks graphql_parse.qwer · 1.0.0GraphQL queries read before they run: their operations, fields and depth, limits that refuse expensive queries, and a check against the schema.6 views · 8 downloadsHTTP Archive files har.qwer · 1.0.0HAR files from a browser's network panel read: pages with their load times, each request flat with timings and sizes (-1 given as null, SSL not counted twice), the slowest and largest requests, totals by host and type. Secrets masked from headers, cookies, query strings, form and JSON bodies before the file goes on a ticket, with a list of what was found and never its value.3 views · 6 downloadsSARIF reports sarif.qwer · 1.0.0SARIF 2.1 reports from code scanners read into flat results, with rules found by index or id, messages filled in, severities defaulted as the spec says and places followed through artifacts. Reports built and merged by tool with their indexes redone, a summary by rule and file, and what is new since a base report.3 views · 8 downloadsSoftware bills of materials sbom.qwer · 1.0.0CycloneDX JSON and SPDX, JSON or tag-value, read into one shape and built from a list of components. Package URLs parsed and made canonical by the purl rules, licences counted and held against an allow list with OR and AND understood, why a package is there, cycles and orphans in the graph, and what changed between two releases across formats.2 views · 7 downloadsSQL parsing sql_parse.qwer · 1.0.0SQL read as a database would: whether it parses in a dialect, its statement kind, the tables it reads and writes, and a fingerprint for grouping logs.9 views · 12 downloadsDomains domains.qwer · 1.0.0Domain names read by the Public Suffix List: registrable domain, subdomain and suffix, same-site checks for redirects and cookies, and international names to punycode and back.7 views · 7 downloadsHTML rewriting html_rewrite.qwer · 1.0.0HTML rewritten as it streams, by CSS selector: links made absolute, attributes set or removed, elements removed or unwrapped, text replaced.8 views · 6 downloadsHTTP Signatures http_signatures.qwer · 1.0.0HTTP Signatures for ActivityPub and the fediverse: RSA keys for an actor, outgoing requests signed with Signature and Digest headers, incoming ones verified.7 views · 8 downloadsPROXY protocol proxy_protocol.qwer · 1.0.0HAProxy's PROXY protocol, versions 1 and 2, read and written: the real client behind a load balancer, with TLVs for TLS, SNI, unique ids, checksums and the AWS, Azure and Google Cloud extras.6 views · 9 downloadsRADIUS radius.qwer · 1.0.0RADIUS sign-in for Wi-Fi, VPNs and terminals: PAP and CHAP with a Message-Authenticator, accept, reject and challenge answers read with their attributes (vendor ones too), accounting start to stop, Status-Server; and a server of your own on udp.listen.7 views · 7 downloadsOther tags
files61import49api47text47network36forms34webhooks34search32devices31images31email30signing27monitoring26security26maps25uploads24printing23analytics22export22payments22validation20html19reports19database18integration18auth17binary16geo16barcodes15json14labels14logs14banking13invoices13notifications13svg13i18n12ids12iot12performance12sensors12time12calendar11dates11messages11seo11audio10config10documents10events10markdown10maths10storage10urls10ai9alerts9aws9backups9certificates9charts9dns9encryption9keys9languages9passwords9pdf9photos9privacy9social9testing9tls9xml9accounting8compression8finance8games8gps8http8locale8metrics8pagination8statistics8support8addresses7background7cache7chat7docs7geojson7google7llm7messaging7mobile7qr7secrets7shipping7sql7tokens7unicode7b2b6bots6calculators6css6dashboards6devops6embeddings6git6headers6jwt6links6oauth26settings6sign-up6spreadsheets6sso6udp6video6accessibility5admin5bookings5checksums5crm5delivery5experiments5game5history5industrial5integrity5location5memory5money5oauth5observability5phone5receipts5retries5service-account5sign-in5status5stores5tracking5writing5attachments4audit4books4caching4checkout4ci4cli4codes4colors4comments4compliance4counters4crawling4csv4debugging4dependencies4distributed4feeds4gis4health4healthcare4javascript4jobs4migration4podcasts4previews4push4random4rate-limits4reviews4rules4scheduling4scraping4seed4serialization4ssh4streaming4tickets4users4web42fa3assets3authentication3automation3azure3batch3bitcoin3browsers3cards3cars3code3cookies3dedupe3design3diff3ecommerce3encoding3firebase3fonts3forecasting3graphql3hardware3kv3markup3names3openstreetmap3ops3queues3ranking3realtime3releases3rss3shop3signals3sitemaps3sms3sounds3spam3sports3tags3templates3terminal3themes3tiles3tools3versions3word3abuse2access-control2address2archives2atom2authorization2autocomplete2avatars2base642building2cargo2catalog2cdn2changelog2chinese2cloud2cluster2configuration2containers2databases2directions2directory2discovery2docker2documentation2domains2downloads2duplicates2ebooks2editing2emv2exact2expiry2exports2fediverse2flags2folders2forecast2fractions2fun2gamification2gcp2gdpr2geocoding2glob2graphs2hls2identity2index2india2kafka2leases2lighting2lint2localization2locks2logistics2lookup2marine2microsoft2moderation2mongodb2multi-tenant2music2naming2news2newsletters2nosql2notes2npm2ocr2optimization2outdoors2partners2placeholders2places2planning2players2plc2policy2pos2power2pricing2protobuf2prototypes2pwa2query2radio2redis2reporting2robots2rpc2s32scada2scales2schedules2schema2secp256k12segments2servers2sessions2sha2562soap2solver2sqlite2supply-chain2tax2tcp2thumbnails2tooling2transactions2translation2translations2typos2upi2user-content2vehicles2wcag2weather2websockets2xss2yaml2a11ach1activitypub1agenda1aggregation1allen-bradley1allowlists1animation1apple1archive1arguments1arrow1asia1asn1asn11astronomy1atlassian1atproto1aviation1backup1baduk1base581bech321bioinformatics1bip211blake31blog1blogs1board1boards1bolt-111braille1branding1brazil1breaches1build1bulk1calendars1capture1cd1cdp1changes1chapters1chemistry1chess1chords1cities1clap1claude1clickhouse1code-style1colours1columnar1constellations1constraints1contacts1conversion1coordinates1coordination1couchdb1counting1coupons1cql1crawler1cryptography1custom-fields1cypher1dem1deploy1deployments1developer1diagrams1dice1dimacs1distance1dmx1dna1ed255191eip-551elasticsearch1elevation1embeds1embosser1emoji1energy1english1enterprise1equations1ethereum1excel1facets1family-tree1fasta1fastq1feature-flags1federation1feedback1fen1fido21firewall1fixed-width1fleet1forensics1formula1formulas1front-matter1fx1genealogy1generator1genetics1geohash1geoip1geotiff1gif1go1grafana1graph1grid1gzip1hex1hexagons1hilbert1hl71hmac1holdem1http21https1hvac1icmp1ics1incidents1inventory1invoice1ion1ios1ip1iptv1iso86011java1jql1json-ld1json-rpc1jsonl1julian-date1jupyter1keccak1keywords1kms1kubernetes1language1latex1ldap1lets-encrypt1libsodium1licences1licenses1licensing1lightning1linear-algebra1linked-data1listings1loans1local1localisation1logging1logic1mandates1mapbox1math1mathml1maxmind1maze1mbtiles1mcp1measurement-protocol1medical-imaging1meetings1meilisearch1memcached1merchant-of-record1merkle1meters1mfa1mgrs1middleware1midi1military1mmdb1mo1mockups1molar-mass1moon1morse1nat1navigation1neo4j1networks1newsletter1nfc1nginx1notebooks1oauth11oidc1omaha1on-call1onedrive1opa1open-meteo1openapi1opensearch1orbits1org-mode1osm1osrm1parquet1parsing1passkeys1passwordless1pathfinding1pbf1pgn1pgp1photography1pkce1planets1playlists1plugins1pmtiles1png1po1pods1poker1polyline1postgres1postgrest1powerpoint1probability1procedural1process1processes1productivity1profiles1projects1promql1puzzle1pxe1python1qdrant1quota1r21rabbitmq1range-requests1raster1rdf1readability1recommendations1reconciliation1recovery1recurring1refunds1remote1replication1repositories1reverse1revocation1rfc33391routers1routes1routing1rpg1sales1sandbox1sat1sca1scaling1science1screenshots1scripts1sdp1secured-keys1semantic-web1semver1sepa1serverless1services1sets1sftp1sgf1sgp41sharding1shell1simulation1sitemap1smtp1soql1space1sphinx1spreadsheet1stage1statements1static-analysis1streams1subscriptions1sudoku1sun1switzerland1sync1tap1tasks1telephony1terraform1theory1time series1timeout1timetables1timezones1toml1topojson1topology1totp1tracks1trading1transfers1transit1travel1two-factor1typesense1uart1updates1upload1upnp1ups1uptime1url1usb1utm1vectors1voip1wallet1wasm1webauthn1webrtc1wifi1wordpress1x5091xlsx1youtube1zero-copy1zip1zones1