Alternatives and similar repositories for JAW

Users that are interested in JAW are comparing it to the libraries listed below

• SoheilKhodayari / TheThing
  TheThing: an open-source tool to detect DOM Clobbering vulnerabilities
  ☆57Updated 2 years ago
• testable-eu / sast-testability-patterns
  Testability Pattern Catalogs for SAST
  ☆31Updated 11 months ago
• jackfromeast / TheHulk
  TheHulk is a dynamic analysis tool designed to detect and exploit DOM Clobbering vulnerabilities.
  ☆90Updated 5 months ago
• bahruzjabiyev / t-reqs
  Grammar-based HTTP/1 fuzzer with mutation ability
  ☆260Updated last year
• KTH-LangSec / silent-spring
  Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js
  ☆75Updated 2 years ago
• GitHubSecurityLab / codeql-zero-to-hero
  CodeQL zero to hero blog post series challenges
  ☆163Updated 4 months ago
• jackfromeast / dom-clobbering-collection
  A collection of client-side libraries with HTML injection vulnerabilities and DOM clobbering gadgets.
  ☆47Updated 5 months ago
• WSP-LAB / FUGIO
  FUGIO: Automatic Exploit Generation for PHP Object Injection Vulnerabilities
  ☆97Updated 2 years ago
• bahruzjabiyev / frameshifter
  Grammar-based HTTP/2 fuzzer with mutation ability
  ☆47Updated 3 years ago
• pixelindigo / yurascanner
  YuraScanner
  ☆72Updated 11 months ago
• Song-Li / ODGen
  ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.
  ☆164Updated 2 years ago
• Aurore54F / DoubleX
  Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale
  ☆79Updated 4 years ago
• RUB-NDS / xsinator.com
  XS-Leak Browser Test Suite
  ☆85Updated 2 years ago
• Philesiv / XSLeaker
  Searcher for cross-site leaks (XS-Leaks)
  ☆82Updated 3 years ago
• s3c2 / UntrustIDE
  A framework for identifying vulnerabilities in VS Code extensions
  ☆18Updated last year
• shhnjk / cursed_types
  List of Trusted Types bypasses
  ☆102Updated last year
• GCMiner / GCMiner
  Artifact for ICSE 2023
  ☆50Updated 3 years ago
• sfncat / mcp-joern
  A simple Joern MCP Server.
  ☆34Updated 2 months ago
• msrkp / MXSS
  Awesome MXSS ??
  ☆56Updated last year
• SoheilKhodayari / DOMClobbering
  DOM Clobbering Wiki, Browser Testing, and Payload Generation
  ☆60Updated last month
• bahruzjabiyev / gudifu-fuzzer
  Guided Differential Fuzzing for HTTP Request Parsing Discrepancies
  ☆21Updated last year
• cristianstaicu / SecBench.js
  ☆36Updated last year
• SAP / project-foxhound
  A web browser with dynamic data-flow tracking enabled in the Javascript engine and DOM, based on Mozilla Firefox (https://github.com/mozi…
  ☆155Updated last week
• polyxss / bxss
  Companion repository of the "Dancer in the Dark" paper.
  ☆20Updated last year
• zifeng-kang / ProbetheProto
  ☆28Updated 3 years ago
• cezary-sec / awesome-browser-security
  A curated list of awesome browser security learning material.
  ☆147Updated 3 years ago
• u21h2 / AutoSpear
  AutoSpear
  ☆72Updated 2 years ago
• xbow-engineering / validation-benchmarks
  XBOW Validation Benchmarks
  ☆461Updated 7 months ago
• elttam / semgrep-rules
  ☆225Updated last month
• PortSwigger / url-cheatsheet-data
  This is the data that powers the PortSwigger URL validation bypass cheat sheet.
  ☆57Updated 4 months ago