From a10c0c6aada4fd50f9d3073e0b5c97acfd617135 Mon Sep 17 00:00:00 2001 From: "anthropic-code-agent[bot]" <242468646+Claude@users.noreply.github.com> Date: Thu, 30 Apr 2026 23:06:22 +0000 Subject: [PATCH 1/5] Initial plan From eb217a0c031d4fc7cf80aee45b5c7a81a59414b5 Mon Sep 17 00:00:00 2001 From: "anthropic-code-agent[bot]" <242468646+Claude@users.noreply.github.com> Date: Thu, 30 Apr 2026 23:15:58 +0000 Subject: [PATCH 2/5] Add 8 complete tools: Docker Compose Builder, CORS Validator, Docker Env Manager, Bash Alias Generator, DNS/SSL Debugger, GraphQL Visualizer, API Status Explorer, Password Entropy Agent-Logs-Url: https://github.com/RealistSec/resources/sessions/61005afa-caf8-4c63-a99b-2b530fb8fb69 Co-authored-by: RealistSec <6409357+RealistSec@users.noreply.github.com> --- .../index.html | 216 ++++++++++++ tools/bash-command-alias-generator/index.html | 270 +++++++++++++++ tools/cors-header-validator/README.md | 19 + tools/cors-header-validator/docs/dev-guide.md | 52 +++ .../cors-header-validator/docs/user-guide.md | 40 +++ tools/cors-header-validator/index.html | 298 ++++++++++++++++ .../index.html | 294 ++++++++++++++++ tools/docker-compose-builder/README.md | 27 ++ .../docker-compose-builder/docs/dev-guide.md | 48 +++ .../docker-compose-builder/docs/user-guide.md | 36 ++ tools/docker-compose-builder/index.html | 325 ++++++++++++++++++ tools/docker-env-variable-manager/index.html | 287 ++++++++++++++++ tools/graphql-schema-visualizer/index.html | 272 +++++++++++++++ tools/password-entropy-calculator/index.html | 293 ++++++++++++++++ 14 files changed, 2477 insertions(+) create mode 100644 tools/api-response-status-code-explorer/index.html create mode 100644 tools/bash-command-alias-generator/index.html create mode 100644 tools/cors-header-validator/README.md create mode 100644 tools/cors-header-validator/docs/dev-guide.md create mode 100644 tools/cors-header-validator/docs/user-guide.md create mode 100644 tools/cors-header-validator/index.html create mode 100644 tools/dns-query-debugger-ssl-validator/index.html create mode 100644 tools/docker-compose-builder/README.md create mode 100644 tools/docker-compose-builder/docs/dev-guide.md create mode 100644 tools/docker-compose-builder/docs/user-guide.md create mode 100644 tools/docker-compose-builder/index.html create mode 100644 tools/docker-env-variable-manager/index.html create mode 100644 tools/graphql-schema-visualizer/index.html create mode 100644 tools/password-entropy-calculator/index.html diff --git a/tools/api-response-status-code-explorer/index.html b/tools/api-response-status-code-explorer/index.html new file mode 100644 index 0000000..1c32502 --- /dev/null +++ b/tools/api-response-status-code-explorer/index.html @@ -0,0 +1,216 @@ + + + + + + API Response Status Code Explorer + + + +
+

📡 API Response Status Code Explorer

+

Complete reference for HTTP status codes with descriptions and use cases

+
+ +
+
+ +
+ +
+
All
+
1xx Informational
+
2xx Success
+
3xx Redirection
+
4xx Client Error
+
5xx Server Error
+
+ +
+
+ + + + + + diff --git a/tools/bash-command-alias-generator/index.html b/tools/bash-command-alias-generator/index.html new file mode 100644 index 0000000..2c9d19f --- /dev/null +++ b/tools/bash-command-alias-generator/index.html @@ -0,0 +1,270 @@ + + + + + + Bash Command Alias Generator + + + +
+

⚡ Bash Command Alias Generator

+

Create, organize, and export shell aliases with templates and best practices

+
+ +
+
+

Create Alias

+ + +
+
Git Shortcuts
+
Docker
+
Navigation
+
System
+
+ + + + + + + + + + + +
+ +
+

Your Aliases (0)

+
+ +
+ +
+

Generated .bashrc / .zshrc

+ 
# No aliases added yet
+# Add aliases using the form above
+
+ + + +
+
+
+ + + + diff --git a/tools/cors-header-validator/README.md b/tools/cors-header-validator/README.md new file mode 100644 index 0000000..64d0589 --- /dev/null +++ b/tools/cors-header-validator/README.md @@ -0,0 +1,19 @@ +# CORS Header Validator + +Interactive tool for testing and debugging Cross-Origin Resource Sharing (CORS) configurations. + +## Features + +- Request configuration (origin, method, headers, credentials) +- Response header validation +- Common scenario examples +- Real-time validation feedback +- Security best practices + +## Usage + +1. Configure the request (origin, method, custom headers) +2. Paste response headers from your API +3. Click "Validate CORS Configuration" +4. Review issues, warnings, and passed checks +5. Consult common scenarios for solutions diff --git a/tools/cors-header-validator/docs/dev-guide.md b/tools/cors-header-validator/docs/dev-guide.md new file mode 100644 index 0000000..fbcea9f --- /dev/null +++ b/tools/cors-header-validator/docs/dev-guide.md @@ -0,0 +1,52 @@ +# CORS Header Validator - Developer Guide + +## Features + +1. **Request Configuration**: Simulates client-side CORS request +2. **Response Validation**: Checks server CORS headers against request +3. **Scenario Library**: Common CORS patterns and solutions +4. **Real-time Feedback**: Instant validation with detailed messages +5. **Security Checks**: Validates credentials + wildcard combinations + +## Validation Logic + +### Origin Check +- Compares request origin with Allow-Origin header +- Flags wildcard (*) with credentials +- Handles specific origin matching + +### Method Check +- Validates Allow-Methods for non-simple requests +- Simple methods (GET, HEAD, POST) don't require preflight + +### Headers Check +- Validates custom headers against Allow-Headers +- Excludes CORS-safe headers from validation +- Case-insensitive matching + +### Credentials Check +- Ensures Allow-Credentials: true when needed +- Prevents wildcard origin with credentials + +### Additional Checks +- Max-Age recommendations for preflight caching +- Expose-Headers for custom response headers + +## Extending + +Add new scenarios to `commonScenarios` array: + +```javascript +{ + title: "Scenario Name", + solution: "Solution description", + example: "Header: value" +} +``` + +## Technical Notes + +- Pure client-side validation (no network requests) +- Parses header text format +- Case-insensitive header name matching +- Supports all standard CORS headers diff --git a/tools/cors-header-validator/docs/user-guide.md b/tools/cors-header-validator/docs/user-guide.md new file mode 100644 index 0000000..f584344 --- /dev/null +++ b/tools/cors-header-validator/docs/user-guide.md @@ -0,0 +1,40 @@ +# CORS Header Validator - User Guide + +## Quick Start + +1. Enter your requesting origin (e.g., https://example.com) +2. Select the HTTP method you're using +3. Add any custom headers (comma-separated) +4. Specify if you're sending credentials (cookies, auth) +5. Paste your server's response headers +6. Click "Validate" + +## Understanding Results + +**Critical Issues** - Must be fixed for CORS to work +**Warnings** - Potential problems or best practice violations +**Passed Checks** - Correctly configured CORS headers + +## Common Scenarios + +### Simple Requests +GET, HEAD, or POST with standard headers only need: +- Access-Control-Allow-Origin + +### Preflight Requests +PUT, DELETE, or custom headers need: +- Access-Control-Allow-Methods +- Access-Control-Allow-Headers +- Response to OPTIONS request + +### Credentials +Cookies or Authorization headers require: +- Access-Control-Allow-Credentials: true +- Specific origin (not wildcard *) + +## Best Practices + +- Use specific origins instead of wildcards when possible +- Set Max-Age to cache preflight responses (86400 = 24 hours) +- Only expose necessary response headers +- Validate origin against whitelist on server diff --git a/tools/cors-header-validator/index.html b/tools/cors-header-validator/index.html new file mode 100644 index 0000000..32b7d38 --- /dev/null +++ b/tools/cors-header-validator/index.html @@ -0,0 +1,298 @@ + + + + + + CORS Header Validator + + + +
+
+

🌐 CORS Header Validator

+

Test and debug Cross-Origin Resource Sharing configurations with scenario analysis

+
+
Offline • Security Tool
+
+ +
+
+

Request Configuration

+ + + + + + + + + + + + +
+ +
+

Response Headers

+ + + + + + +
+ +
+

Validation Results

+
+

Configure request and response headers, then click "Validate CORS Configuration"

+
+
+ +
+

Common Scenarios & Solutions

+
+
+
+ + + + diff --git a/tools/dns-query-debugger-ssl-validator/index.html b/tools/dns-query-debugger-ssl-validator/index.html new file mode 100644 index 0000000..3c8462a --- /dev/null +++ b/tools/dns-query-debugger-ssl-validator/index.html @@ -0,0 +1,294 @@ + + + + + + DNS Query Debugger + SSL Validator + + + +
+

🌐 DNS Query Debugger + SSL Validator

+

Debug DNS records and validate SSL/TLS certificates with detailed analysis

+
+ +
+
+
+
DNS Query
+
SSL Validator
+
+ +
+ + + + + + + +
+ + +
+ +
+

Results

+
+

Enter a domain and click Query DNS or Validate SSL to see results

+
+
+ +
+

Common DNS Record Types

+
+
+ A + Maps domain to IPv4 address +
+
+ AAAA + Maps domain to IPv6 address +
+
+ CNAME + Alias to another domain (canonical name) +
+
+ MX + Mail exchange servers with priority +
+
+ TXT + Text records for verification, SPF, DKIM, etc. +
+
+ NS + Name servers for the domain +
+
+ SOA + Start of Authority with zone information +
+
+ CAA + Certificate Authority Authorization +
+
+
+
+ + + + diff --git a/tools/docker-compose-builder/README.md b/tools/docker-compose-builder/README.md new file mode 100644 index 0000000..4d19102 --- /dev/null +++ b/tools/docker-compose-builder/README.md @@ -0,0 +1,27 @@ +# Docker Compose Builder + +A visual, interactive tool for building Docker Compose configurations with templates, validation, and best practice recommendations. + +## Features + +- Visual service configuration builder +- Pre-built templates (LAMP, MEAN, WordPress, Monitoring) +- Real-time YAML generation +- Dependency validation +- Production readiness checklist +- Export to file or clipboard + +## Usage + +1. Choose a template or build from scratch +2. Add services with images, ports, volumes, and environment variables +3. Define service dependencies +4. Review generated docker-compose.yml +5. Validate configuration +6. Download or copy to clipboard + +## Requirements + +- Modern web browser +- No server or dependencies required +- Works completely offline diff --git a/tools/docker-compose-builder/docs/dev-guide.md b/tools/docker-compose-builder/docs/dev-guide.md new file mode 100644 index 0000000..e61e698 --- /dev/null +++ b/tools/docker-compose-builder/docs/dev-guide.md @@ -0,0 +1,48 @@ +# Docker Compose Builder - Developer Guide + +## Architecture + +Single-file HTML application with vanilla JavaScript. No external dependencies. + +## Key Functions + +### Service Management +- `addService()`: Adds a new service to the configuration +- `removeService(name)`: Removes a service +- `render()`: Updates UI and YAML output + +### YAML Generation +- `generateYAML()`: Converts services object to YAML format +- Handles ports, environment variables, volumes, and dependencies +- Automatically detects and defines named volumes + +### Validation +- `validateOutput(yaml)`: Checks for common issues +- Detects missing dependencies +- Warns about :latest tags +- Provides production readiness checklist + +### Templates +- Pre-defined service configurations +- Easy to extend in `templates` object +- Covers common application stacks + +## Extending + +Add new templates by extending the `templates` object: + +```javascript +templates.mystack = [ + {name: 'service1', image: 'image:tag', ports: '8080:80'}, + {name: 'service2', image: 'image:tag', dependsOn: 'service1'} +]; +``` + +## Features Added + +1. **Template System**: Four pre-built stack templates +2. **Visual Service List**: See all added services at a glance +3. **Dependency Validation**: Checks if dependent services exist +4. **Production Checklist**: Best practice recommendations +5. **Multiple Export Options**: Copy, download, or validate +6. **Named Volume Detection**: Automatically defines Docker volumes diff --git a/tools/docker-compose-builder/docs/user-guide.md b/tools/docker-compose-builder/docs/user-guide.md new file mode 100644 index 0000000..6497d59 --- /dev/null +++ b/tools/docker-compose-builder/docs/user-guide.md @@ -0,0 +1,36 @@ +# Docker Compose Builder - User Guide + +## Quick Start + +1. **Load a Template**: Click one of the template buttons (LAMP Stack, MEAN Stack, etc.) to start with a pre-configured setup +2. **Add Services**: Fill in the service form and click "Add Service" +3. **Review Output**: The docker-compose.yml file is generated in real-time +4. **Validate**: Click "Validate Syntax" to check for issues +5. **Export**: Use "Copy to Clipboard" or "Download File" to save your configuration + +## Adding Services + +Each service requires: +- **Service Name**: Unique identifier (e.g., web, api, database) +- **Docker Image**: Image name and tag (e.g., nginx:alpine, postgres:15) + +Optional fields: +- **Ports**: Map host to container ports (e.g., 8080:80) +- **Environment Variables**: One per line as KEY=value +- **Volumes**: Mount points (e.g., ./data:/var/lib/data) +- **Depends On**: Service dependencies (comma-separated) + +## Templates + +- **LAMP Stack**: Apache, PHP, MySQL +- **MEAN Stack**: MongoDB, Express/Node, Angular/Nginx +- **WordPress**: WordPress with MySQL database +- **Monitoring**: Prometheus, Grafana, Node Exporter + +## Best Practices + +- Use specific image tags (avoid :latest) +- Define restart policies for production +- Set resource limits +- Use named volumes for data persistence +- Configure health checks diff --git a/tools/docker-compose-builder/index.html b/tools/docker-compose-builder/index.html new file mode 100644 index 0000000..4430a24 --- /dev/null +++ b/tools/docker-compose-builder/index.html @@ -0,0 +1,325 @@ + + + + + + Docker Compose Builder + + + +
+
+

🐳 Docker Compose Builder

+

Visual composer for multi-container Docker applications with templates and validation

+
+
Offline • Production Ready
+
+ +
+
+

Service Configuration

+ + +
+
LAMP Stack
+
MEAN Stack
+
WordPress
+
Monitoring
+
+ + + + + + + + + + + + + + + + + + + + + +
+ +
+
+
+ +
+

Generated docker-compose.yml

+ 
version: '3.8'
+
+services:
+  # Add services using the form ←
+ + + +
+ +
+

Validation & Analysis

+ 
No issues detected yet.
+
+Tips:
+• Use specific image tags (avoid :latest)
+• Define restart policies for production
+• Set resource limits (mem_limit, cpus)
+• Use named volumes for persistence
+• Configure health checks for services
+
+
+ + + + diff --git a/tools/docker-env-variable-manager/index.html b/tools/docker-env-variable-manager/index.html new file mode 100644 index 0000000..c862ffa --- /dev/null +++ b/tools/docker-env-variable-manager/index.html @@ -0,0 +1,287 @@ + + + + + + Docker Environment Variable Manager + + + +
+

🐳 Docker Environment Variable Manager

+

Manage, validate, and convert environment variables for Docker containers and compose files

+
+ +
+
+

Add Variables

+ + + + + + + + + + + + + + + +
+ +
+

Variables

+
+ +
+ +
+
+
ENV File
+
Dockerfile
+
Docker Compose
+
Shell Export
+
JSON
+
+ + 
# No variables added yet
+ +
+ + + +
+
+
+ + + + diff --git a/tools/graphql-schema-visualizer/index.html b/tools/graphql-schema-visualizer/index.html new file mode 100644 index 0000000..bda001c --- /dev/null +++ b/tools/graphql-schema-visualizer/index.html @@ -0,0 +1,272 @@ + + + + + + GraphQL Schema Visualizer + + + +
+

🔷 GraphQL Schema Visualizer

+

Visualize GraphQL schemas with interactive diagrams and type exploration

+
+ +
+
+
+

GraphQL Schema (SDL)

+ + + +
+ +
+

Schema Visualization

+ +
+
+ +
+

Type Explorer

+
+
+
+ + + + diff --git a/tools/password-entropy-calculator/index.html b/tools/password-entropy-calculator/index.html new file mode 100644 index 0000000..47deecb --- /dev/null +++ b/tools/password-entropy-calculator/index.html @@ -0,0 +1,293 @@ + + + + + + Password Entropy Calculator + + + +
+

🔐 Password Entropy Calculator

+

Analyze password strength with entropy calculation, pattern detection, and cracking time estimates

+
+ +
+
+

Password Analysis

+ + + + +
+ + +
+ +
+
-
+
Enter a password
+
+ +
+
+
+
+ +
+

Statistics

+
+
+ +
+

Password Generator

+ +
+ + +
+
+ + +
+
+ + +
+
+ + +
+ + + + + +
+ +
+

Common Patterns Detected

+
+
+ +
+

Best Practices

+
+ ✓ Do: +
    +
  • Use at least 12 characters (16+ recommended)
    • +
  • Include uppercase, lowercase, numbers, and symbols
    • +
  • Use unique passwords for each account
    • +
  • Consider using a password manager
    • +
  • Use passphrases (e.g., "correct-horse-battery-staple")
    • +
+
+
+ ✗ Don't: +
    +
  • Use personal information (names, birthdates, etc.)
    • +
  • Use common words or patterns (password123, qwerty, etc.)
    • +
  • Reuse passwords across accounts
    • +
  • Share passwords or write them down insecurely
    • +
  • Use simple substitutions (P@ssw0rd)
    • +
+
+
+
+ + + + From b2c31a6999ecb60d1fcdee3131a719f592b972d8 Mon Sep 17 00:00:00 2001 From: "anthropic-code-agent[bot]" <242468646+Claude@users.noreply.github.com> Date: Thu, 30 Apr 2026 23:21:48 +0000 Subject: [PATCH 3/5] Add 6 more complete tools: HTTP Request Builder, Firewall Rule Translator, STRIDE Threat Model, SNMP OID, K8s PSP Builder, Codec Converter Chain Agent-Logs-Url: https://github.com/RealistSec/resources/sessions/61005afa-caf8-4c63-a99b-2b530fb8fb69 Co-authored-by: RealistSec <6409357+RealistSec@users.noreply.github.com> --- tools/codec-converter-chain/index.html | 261 ++++++++++++ tools/firewall-rule-translator/index.html | 255 ++++++++++++ tools/http-request-builder/index.html | 373 ++++++++++++++++++ tools/kubernetes-psp-builder/index.html | 280 +++++++++++++ tools/snmp-oid-translator/index.html | 222 +++++++++++ .../stride-threat-model-generator/index.html | 234 +++++++++++ 6 files changed, 1625 insertions(+) create mode 100644 tools/codec-converter-chain/index.html create mode 100644 tools/firewall-rule-translator/index.html create mode 100644 tools/http-request-builder/index.html create mode 100644 tools/kubernetes-psp-builder/index.html create mode 100644 tools/snmp-oid-translator/index.html create mode 100644 tools/stride-threat-model-generator/index.html diff --git a/tools/codec-converter-chain/index.html b/tools/codec-converter-chain/index.html new file mode 100644 index 0000000..bad3b7a --- /dev/null +++ b/tools/codec-converter-chain/index.html @@ -0,0 +1,261 @@ + + + + + + Codec Converter Chain + + + +
+

🔄 Codec Converter Chain

+

Chain multiple encoding/decoding operations: Base64, URL, HTML, Hex, UTF-8, and more

+
+ +
+
+

Input

+ + +
+ +
+

Conversion Chain

+ + +
+
URL Encode
+
Base64 Encode
+
Hex Encode
+
HTML Encode
+
JWT Decode
+
Double Base64
+
+ + +
+ + + +
+ + +
+ + +
+ +
+

Output

+ 
Execute the chain to see results
+ + +
+ +
+

Step-by-Step Results

+
+
+
+ + + + diff --git a/tools/firewall-rule-translator/index.html b/tools/firewall-rule-translator/index.html new file mode 100644 index 0000000..e0280ee --- /dev/null +++ b/tools/firewall-rule-translator/index.html @@ -0,0 +1,255 @@ + + + + + + Firewall Rule Translator + + + +
+

🛡️ Firewall Rule Translator

+

Convert firewall rules between iptables, UFW, firewalld, Windows Firewall, and cloud providers

+
+ +
+
+

Rule Configuration

+ + + + + + + + + + + + + + + + + + + + + + + +
+ +
+

Translated Rules

+
+
iptables
+
UFW
+
firewalld
+
Windows
+
AWS
+
Azure
+
GCP
+
+ 
# Configure a rule and click "Translate" to see the output
+ +
+ +
+

Common Firewall Rules Examples

+
+ + + + + + +
+
+
+ + + + diff --git a/tools/http-request-builder/index.html b/tools/http-request-builder/index.html new file mode 100644 index 0000000..d9984ac --- /dev/null +++ b/tools/http-request-builder/index.html @@ -0,0 +1,373 @@ + + + + + + HTTP Request Builder + + + +
+

🌐 HTTP Request Builder

+

Build and test HTTP requests with full control over methods, headers, and body

+
+ +
+
+

Request Configuration

+ + +
+
GET
+
POST
+
PUT
+
DELETE
+
PATCH
+
HEAD
+
OPTIONS
+
TRACE
+
+ + + + + +
+ + + +
+ +
+ +
+
+
None
+
JSON
+
Form Data
+
Raw
+
+ +
+

No request body

+
+ + + + + + + + +
+ +
+

Generated Request

+
+
cURL
+
JavaScript Fetch
+
Python Requests
+
Raw HTTP
+
+ 
# Build a request to see the generated code
+ +
+
+ + + + diff --git a/tools/kubernetes-psp-builder/index.html b/tools/kubernetes-psp-builder/index.html new file mode 100644 index 0000000..2c9697c --- /dev/null +++ b/tools/kubernetes-psp-builder/index.html @@ -0,0 +1,280 @@ + + + + + + Kubernetes PSP Builder + + + +
+

☸️ Kubernetes PSP Builder

+

Build Pod Security Policies with security best practices and YAML generation

+
+ +
+
+

Policy Configuration

+ + + + + +
+
Baseline
+
Restricted
+
Privileged
+
Custom
+
+ +
+ + +
+ +
+ + +
+ +
+ + +
+ +
+ + +
+ + + + + + + + + +
+ +
+

Security Context

+ +
+ + +
+ +
+ + +
+ + + + + + + + + +
+ +
+

Generated Pod Security Policy YAML

+ 
# Configure your policy and see the YAML here
+
+ + +
+
+
+ + + + diff --git a/tools/snmp-oid-translator/index.html b/tools/snmp-oid-translator/index.html new file mode 100644 index 0000000..85a935c --- /dev/null +++ b/tools/snmp-oid-translator/index.html @@ -0,0 +1,222 @@ + + + + + + SNMP OID Translator + + + +
+

🔢 SNMP OID Translator

+

Translate SNMP Object Identifiers between numeric and descriptive formats with MIB database

+
+ +
+
+

OID Lookup

+ + + + + +
+ +
+

Result

+
+

Enter an OID to see translation

+
+
+ +
+

Common SNMP OIDs

+
+
+
System Description
+
1.3.6.1.2.1.1.1.0 (sysDescr)
+
+
+
System Uptime
+
1.3.6.1.2.1.1.3.0 (sysUpTime)
+
+
+
System Name
+
1.3.6.1.2.1.1.5.0 (sysName)
+
+
+
Interface Count
+
1.3.6.1.2.1.2.1.0 (ifNumber)
+
+
+
Host Uptime
+
1.3.6.1.2.1.25.1.1.0 (hrSystemUptime)
+
+
+
Storage Description
+
1.3.6.1.2.1.25.2.3.1.3 (hrStorageDescr)
+
+
+
CPU Load
+
1.3.6.1.2.1.25.3.3.1.2 (hrProcessorLoad)
+
+
+
Enterprise OIDs
+
1.3.6.1.4.1 (enterprises)
+
+
+
+ +
+

SNMP MIB Tree Structure

+
+
+
1 - iso
+
  3 - org
+
    6 - dod
+
      1 - internet
+
        1 - directory
+
        2 - mgmt (standard MIBs)
+
          1 - mib-2 (MIB-II)
+
            1 - system
+
            2 - interfaces
+
            25 - host
+
        3 - experimental
+
        4 - private
+
          1 - enterprises (vendor-specific MIBs)
+
+
+
+
+ + + + diff --git a/tools/stride-threat-model-generator/index.html b/tools/stride-threat-model-generator/index.html new file mode 100644 index 0000000..80acb01 --- /dev/null +++ b/tools/stride-threat-model-generator/index.html @@ -0,0 +1,234 @@ + + + + + + STRIDE Threat Model Generator + + + +
+

🛡️ STRIDE Threat Model Generator

+

Generate comprehensive threat models using Microsoft's STRIDE methodology for security analysis

+
+ +
+
+
+

System Information

+ + + + + + + + + + + + + + +
+ +
+

STRIDE Overview

+
+

S - Spoofing

+

Impersonating something or someone else (authentication threats)

+
+
+

T - Tampering

+

Modifying data or code (integrity threats)

+
+
+

R - Repudiation

+

Claiming to not have performed an action (accountability threats)

+
+
+

I - Information Disclosure

+

Exposing information to unauthorized parties (confidentiality threats)

+
+
+

D - Denial of Service

+

Disrupting or degrading service (availability threats)

+
+
+

E - Elevation of Privilege

+

Gaining unauthorized capabilities (authorization threats)

+
+
+
+ +
+

Generated Threat Model

+
+
+ +
+

Export Threat Model

+ 
Generate a threat model first
+ + +
+
+ + + + From ef79e3d80e7cf868f482d47dbe716de08f403ab7 Mon Sep 17 00:00:00 2001 From: "anthropic-code-agent[bot]" <242468646+Claude@users.noreply.github.com> Date: Thu, 30 Apr 2026 23:23:10 +0000 Subject: [PATCH 4/5] Enhance GraphQL Query Complexity Analyzer with cost breakdown, budget tracking, optimization suggestions, and export Agent-Logs-Url: https://github.com/RealistSec/resources/sessions/61005afa-caf8-4c63-a99b-2b530fb8fb69 Co-authored-by: RealistSec <6409357+RealistSec@users.noreply.github.com> --- .../index.html | 204 +++++++++++++++++- 1 file changed, 201 insertions(+), 3 deletions(-) diff --git a/tools/graphql-query-complexity-analyzer/index.html b/tools/graphql-query-complexity-analyzer/index.html index 0c48722..9042791 100644 --- a/tools/graphql-query-complexity-analyzer/index.html +++ b/tools/graphql-query-complexity-analyzer/index.html @@ -14,9 +14,18 @@ label { display:block; margin:8px 0 6px; font-weight:600; color:var(--muted); } textarea, select { width:100%; background:#0b1224; border:1px solid #1f2937; border-radius:12px; padding:12px; color:var(--text); resize:vertical; min-height:180px; box-sizing:border-box; } button { margin-top:12px; background:linear-gradient(90deg,#f472b6,#a855f7); border:none; color:#fff; padding:12px 16px; border-radius:12px; font-weight:700; cursor:pointer; width:100%; box-shadow:0 16px 36px rgba(168,85,247,0.35); } + button.secondary { background:linear-gradient(90deg,#8b5cf6,#7c3aed); box-shadow:0 16px 36px rgba(139,92,246,0.35); } + button:hover { transform:translateY(-1px); } pre { background:#0b1224; border:1px solid #1f2937; border-radius:12px; padding:12px; white-space:pre-wrap; word-break:break-word; min-height:140px; margin:0; } .badge { display:inline-flex; padding:6px 10px; border-radius:10px; border:1px solid #1f2937; margin:4px 6px 4px 0; font-size:12px; } .score { font-size:32px; font-weight:800; } + .breakdown-item { background:#0b1224; border:1px solid #1f2937; border-radius:8px; padding:10px; margin:8px 0; display:flex; justify-content:space-between; align-items:center; } + .breakdown-label { color:var(--muted); font-weight:600; } + .breakdown-value { color:var(--accent); font-weight:700; font-size:18px; } + input[type="number"] { width:100%; background:#0b1224; border:1px solid #1f2937; border-radius:12px; padding:12px; color:var(--text); box-sizing:border-box; } + .optimization { background:#0b1224; border-left:3px solid var(--accent); border-radius:8px; padding:12px; margin:8px 0; } + .optimization-title { font-weight:700; color:var(--accent); margin-bottom:6px; } + .optimization-desc { color:var(--muted); font-size:14px; } @@ -46,7 +55,10 @@

GraphQL Query Complexity Analyzer

} } } - + + + +
@@ -59,23 +71,58 @@

GraphQL Query Complexity Analyzer


     

+
+    

+      
Cost Breakdown

+      

+    

+
+    

+      
Optimization Suggestions

+      

+      
+