JAW: A Graph-based Security Analysis Framework for Client-side JavaScript
☆120Feb 13, 2026Updated 8 months ago
Alternatives and similar repositories for JAW
Users that are interested in JAW are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- TheThing: an open-source tool to detect DOM Clobbering vulnerabilities☆57Oct 25, 2023Updated 3 years ago
- DOM Clobbering Wiki, Browser Testing, and Payload Generation☆61Dec 18, 2025Updated 10 months ago
- Testability Pattern Catalogs for SAST☆37Feb 18, 2025Updated last year
- Performant prototype pollution gadgets detection tool for Node.js applications.☆12Feb 16, 2024Updated 2 years ago
- TP-Framework: Testability Pattern Framework for SAST☆18May 10, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆13Oct 30, 2024Updated last year
- ☆32May 1, 2025Updated last year
- Source code for ACM CCS 2020 Paper PMForce: Systematically Analyzing postMessage Handlers at Scale☆18May 17, 2021Updated 5 years ago
- YuraScanner☆87Feb 13, 2025Updated last year
- ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…☆25Nov 30, 2021Updated 4 years ago
- A high-accuracy, behavioral cache poisoning scanner for modern Web APIs☆13Dec 10, 2025Updated 10 months ago
- MDG-based static vulnerability scanner specialized in analyzing npm packages and detecting taint-style and prototype pollution vulnerabil…☆27Dec 10, 2025Updated 10 months ago
- ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.☆170Jan 29, 2024Updated 2 years ago
- MiniTracker: Large-Scale Sensitive Information Tracking in Mini Apps.☆30Dec 2, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Modular static malicious JavaScript detection system☆76Jan 18, 2021Updated 5 years ago
- Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis☆81Mar 19, 2024Updated 2 years ago
- Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale☆83Nov 23, 2021Updated 4 years ago
- A blazing fast and fully configurable Blind SQL Injection optimization and automation framework.☆142Jun 7, 2025Updated last year
- Code for our 2024 IEEE S&P Paper "To Auth or Not To Auth? A Comparative Analysis of the Pre- and Post-Login Security Landscape"☆13Jul 16, 2026Updated 3 months ago
- A framework for the detection of COSI vulnerabilities / XS-Leaks☆14Mar 29, 2023Updated 3 years ago
- Universal Prototype Pollution Gadgets in JavaScript Runtimes☆10Oct 18, 2024Updated 2 years ago
- Mini-program Cross Page Request Forgery (MiniCPRF) Analysis Tool.☆19Oct 30, 2024Updated last year
- Discovered Data and Source Code☆10May 5, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- burp suite插件☆14Jul 9, 2023Updated 3 years ago
- Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js☆78Jan 21, 2024Updated 2 years ago
- Instrumentation framework for Node.js compliant to ECMAScript 2020 based on GraalVM.☆61Jan 18, 2025Updated last year
- Public results and products from DARPA AIxCC☆12Aug 11, 2025Updated last year
- ☆95Jun 21, 2024Updated 2 years ago
- SWAT, a dynamic symbolic execution engine for Java Applications that uses ASM for on-the-fly byte code instrumentation.☆47Updated this week
- Official implementation of "AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery".☆12Aug 11, 2025Updated last year
- A data pool-aware static analyzer to detect cross-layer threats in Android apps.☆12Jan 31, 2024Updated 2 years ago
- DOMFortify turns on Trusted Types for a page and quietly takes over the browser's default policy, so that old, vulnerable HTML sinks get …☆23Updated this week
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Searcher for cross-site leaks (XS-Leaks)☆83Dec 27, 2022Updated 3 years ago
- Obfuscate an IP address for SSRF filter bypasses☆12Oct 18, 2024Updated 2 years ago
- ☆28Jul 21, 2022Updated 4 years ago
- Companion repository to the paper entitled "Fingerprinting in Style: Detecting Browser Extensions via Injected Style Sheets"☆25Dec 7, 2021Updated 4 years ago
- ☆18Oct 29, 2025Updated last year
- An extended Node.js runtime with additional security mechanisms built-in. Protects your Node.js applications from injection attacks such …☆32May 7, 2021Updated 5 years ago
- Python package which provides access to the DraCor API.☆30Sep 23, 2025Updated last year