Alternatives and similar repositories for JAW

Users that are interested in JAW are comparing it to the libraries listed below

• SoheilKhodayari / TheThing
  TheThing: an open-source tool to detect DOM Clobbering vulnerabilities
  ☆51Updated last year
• testable-eu / sast-testability-patterns
  Testability Pattern Catalogs for SAST
  ☆31Updated 7 months ago
• bahruzjabiyev / t-reqs
  Grammar-based HTTP/1 fuzzer with mutation ability
  ☆255Updated 10 months ago
• jackfromeast / TheHulk
  TheHulk is a dynamic analysis tool designed to detect and exploit DOM Clobbering vulnerabilities.
  ☆55Updated last month
• KTH-LangSec / silent-spring
  Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js
  ☆73Updated last year
• jackfromeast / dom-clobbering-collection
  A collection of client-side libraries with HTML injection vulnerabilities and DOM clobbering gadgets.
  ☆34Updated 3 weeks ago
• WSP-LAB / FUGIO
  FUGIO: Automatic Exploit Generation for PHP Object Injection Vulnerabilities
  ☆94Updated last year
• SoheilKhodayari / DOMClobbering
  DOM Clobbering Wiki, Browser Testing, and Payload Generation
  ☆57Updated 5 months ago
• GitHubSecurityLab / codeql-zero-to-hero
  CodeQL zero to hero blog post series challenges
  ☆141Updated this week
• RUB-NDS / xsinator.com
  XS-Leak Browser Test Suite
  ☆85Updated last year
• bahruzjabiyev / frameshifter
  Grammar-based HTTP/2 fuzzer with mutation ability
  ☆47Updated 3 years ago
• pixelindigo / yurascanner
  YuraScanner
  ☆51Updated 7 months ago
• s3c2 / UntrustIDE
  A framework for identifying vulnerabilities in VS Code extensions
  ☆18Updated last year
• Song-Li / ODGen
  ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.
  ☆155Updated last year
• Aurore54F / DoubleX
  Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale
  ☆76Updated 3 years ago
• Philesiv / XSLeaker
  Searcher for cross-site leaks (XS-Leaks)
  ☆82Updated 2 years ago
• msrkp / MXSS
  Awesome MXSS ??
  ☆53Updated 11 months ago
• GCMiner / GCMiner
  Artifact for ICSE 2023
  ☆49Updated 3 years ago
• bahruzjabiyev / gudifu-fuzzer
  Guided Differential Fuzzing for HTTP Request Parsing Discrepancies
  ☆19Updated last year
• shhnjk / cursed_types
  List of Trusted Types bypasses
  ☆102Updated last year
• u21h2 / AutoSpear
  AutoSpear
  ☆66Updated last year
• epi052 / feroxfuzz
  A structure-aware HTTP fuzzing library
  ☆215Updated 9 months ago
• SecuraBV / jws2pubkey
  jws2pubkey tool
  ☆40Updated 2 months ago
• KTH-LangSec / server-side-prototype-pollution
  A collection of Server-Side Prototype Pollution gadgets and exploits
  ☆206Updated 7 months ago
• cezary-sec / awesome-browser-security
  A curated list of awesome browser security learning material.
  ☆144Updated 2 years ago
• Golim / wcde
  Implementation of the Web Cache Deception detection methodology presented in the paper "Web Cache Deception Escalates!"
  ☆25Updated last year
• AntoineRondelet / uxss-vulnerabilities-research
  Some research on UXSS vulnerabilities in web browsers
  ☆12Updated 7 years ago
• xbow-engineering / validation-benchmarks
  XBOW Validation Benchmarks
  ☆242Updated 3 months ago
• terjanq / same-origin-xss
  Same Origin XSS challenge
  ☆64Updated 3 years ago
• zifeng-kang / ProbetheProto
  ☆28Updated 3 years ago