Alternatives and similar repositories for JAW

Users that are interested in JAW are comparing it to the libraries listed below

• SoheilKhodayari / TheThing
  TheThing: an open-source tool to detect DOM Clobbering vulnerabilities
  ☆56Updated 2 years ago
• testable-eu / sast-testability-patterns
  Testability Pattern Catalogs for SAST
  ☆31Updated 10 months ago
• bahruzjabiyev / t-reqs
  Grammar-based HTTP/1 fuzzer with mutation ability
  ☆259Updated last year
• WSP-LAB / FUGIO
  FUGIO: Automatic Exploit Generation for PHP Object Injection Vulnerabilities
  ☆97Updated 2 years ago
• KTH-LangSec / silent-spring
  Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js
  ☆74Updated last year
• pixelindigo / yurascanner
  YuraScanner
  ☆70Updated 10 months ago
• jackfromeast / TheHulk
  TheHulk is a dynamic analysis tool designed to detect and exploit DOM Clobbering vulnerabilities.
  ☆84Updated 4 months ago
• GitHubSecurityLab / codeql-zero-to-hero
  CodeQL zero to hero blog post series challenges
  ☆161Updated 3 months ago
• bahruzjabiyev / frameshifter
  Grammar-based HTTP/2 fuzzer with mutation ability
  ☆47Updated 3 years ago
• SoheilKhodayari / DOMClobbering
  DOM Clobbering Wiki, Browser Testing, and Payload Generation
  ☆60Updated 3 weeks ago
• Philesiv / XSLeaker
  Searcher for cross-site leaks (XS-Leaks)
  ☆82Updated 3 years ago
• RUB-NDS / xsinator.com
  XS-Leak Browser Test Suite
  ☆87Updated 2 years ago
• GCMiner / GCMiner
  Artifact for ICSE 2023
  ☆50Updated 3 years ago
• s3c2 / UntrustIDE
  A framework for identifying vulnerabilities in VS Code extensions
  ☆18Updated last year
• jackfromeast / dom-clobbering-collection
  A collection of client-side libraries with HTML injection vulnerabilities and DOM clobbering gadgets.
  ☆45Updated 4 months ago
• Song-Li / ODGen
  ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.
  ☆161Updated last year
• Aurore54F / DoubleX
  Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale
  ☆78Updated 4 years ago
• bahruzjabiyev / gudifu-fuzzer
  Guided Differential Fuzzing for HTTP Request Parsing Discrepancies
  ☆21Updated last year
• u21h2 / AutoSpear
  AutoSpear
  ☆71Updated 2 years ago
• shhnjk / cursed_types
  List of Trusted Types bypasses
  ☆102Updated last year
• Golim / wcde
  Implementation of the Web Cache Deception detection methodology presented in the paper "Web Cache Deception Escalates!"
  ☆25Updated last year
• zifeng-kang / ProbetheProto
  ☆28Updated 3 years ago
• sfncat / mcp-joern
  A simple Joern MCP Server.
  ☆33Updated last month
• polyxss / bxss
  Companion repository of the "Dancer in the Dark" paper.
  ☆20Updated last year
• xbow-engineering / validation-benchmarks
  XBOW Validation Benchmarks
  ☆422Updated 6 months ago
• Song-Li / ObjLupAnsys
  ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…
  ☆26Updated 4 years ago
• sefcom / Witcher
  Witcher is the first framework for using AFL to fuzz web applications.
  ☆103Updated 2 years ago
• epi052 / feroxfuzz
  A structure-aware HTTP fuzzing library
  ☆217Updated last week
• cezary-sec / awesome-browser-security
  A curated list of awesome browser security learning material.
  ☆146Updated 3 years ago
• SAP / project-foxhound
  A web browser with dynamic data-flow tracking enabled in the Javascript engine and DOM, based on Mozilla Firefox (https://github.com/mozi…
  ☆153Updated this week