SoheilKhodayari / JAW

Related projects ⓘ

Alternatives and complementary repositories for JAW

• SoheilKhodayari / TheThing
  TheThing: an open-source tool to detect DOM Clobbering vulnerabilities
  ☆40Updated last year
• testable-eu / sast-testability-patterns
  Testability Pattern Catalogs for SAST
  ☆29Updated 7 months ago
• KTH-LangSec / silent-spring
  Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js
  ☆56Updated 9 months ago
• bahruzjabiyev / frameshifter
  Grammar-based HTTP/2 fuzzer with mutation ability
  ☆41Updated 2 years ago
• Aurore54F / DoubleX
  Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale
  ☆66Updated 2 years ago
• shhnjk / cursed_types
  List of Trusted Types bypasses
  ☆85Updated 6 months ago
• WSP-LAB / FUGIO
  FUGIO: Automatic Exploit Generation for PHP Object Injection Vulnerabilities
  ☆90Updated 11 months ago
• Song-Li / ODGen
  ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.
  ☆147Updated 9 months ago
• RUB-NDS / xsinator.com
  XS-Leak Browser Test Suite
  ☆73Updated 10 months ago
• cristianstaicu / SecBench.js
  ☆28Updated last month
• GCMiner / GCMiner
  Artifact for ICSE 2023
  ☆45Updated 2 years ago
• Philesiv / XSLeaker
  Searcher for cross-site leaks (XS-Leaks)
  ☆81Updated last year
• bahruzjabiyev / t-reqs
  Grammar-based HTTP/1 fuzzer with mutation ability
  ☆243Updated last week
• zifeng-kang / ProbetheProto
  ☆27Updated 2 years ago
• SoheilKhodayari / DOMClobbering
  DOM Clobbering Wiki, Browser Testing, and Payload Generation
  ☆43Updated this week
• KTH-LangSec / server-side-prototype-pollution
  A collection of Server-Side Prototype Pollution gadgets and exploits
  ☆132Updated 2 months ago
• GitHubSecurityLab / codeql-zero-to-hero
  CodeQL zero to hero blog post series challenges
  ☆85Updated 3 months ago
• compsec-snu / fuzzorigin
  ☆13Updated last year
• NASP-THU / ProphetFuzz
  [CCS'24] An LLM-based, fully automated fuzzing tool for option combination testing.
  ☆45Updated 2 weeks ago
• Song-Li / ObjLupAnsys
  ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…
  ☆22Updated 2 years ago
• wrmelicher / ChromiumTaintTracking
  ☆18Updated 5 years ago
• xbow-engineering / validation-benchmarks
  XBOW Validation Benchmarks
  ☆52Updated last month
• whitesquirrell / C0deVari4nt
  A variant analysis and visualisation tool that scans codebases for similar vulnerabilities
  ☆69Updated 2 years ago
• terjanq / same-origin-xss
  Same Origin XSS challenge
  ☆56Updated 2 years ago
• SecuringWeb / BlackWidow
  ☆43Updated last year
• BlackFan / ctfs
  CTF writeups
  ☆30Updated 2 years ago
• cezary-sec / awesome-browser-security
  A curated list of awesome browser security learning material.
  ☆130Updated last year
• alalng / CVE-2022-44789
  ☆12Updated last year
• trailofbits / codeql-queries
  CodeQL queries developed by Trail of Bits
  ☆73Updated last month
• fuzztruction / fuzztruction
  ☆119Updated 6 months ago