Alternatives and similar repositories for JAW

Users that are interested in JAW are comparing it to the libraries listed below

• SoheilKhodayari / TheThing
  TheThing: an open-source tool to detect DOM Clobbering vulnerabilities
  ☆50Updated last year
• testable-eu / sast-testability-patterns
  Testability Pattern Catalogs for SAST
  ☆31Updated 4 months ago
• KTH-LangSec / silent-spring
  Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js
  ☆68Updated last year
• Aurore54F / DoubleX
  Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale
  ☆75Updated 3 years ago
• jackfromeast / dom-clobbering-collection
  A collection of client-side libraries with HTML injection vulnerabilities and DOM clobbering gadgets.
  ☆24Updated 3 months ago
• WSP-LAB / FUGIO
  FUGIO: Automatic Exploit Generation for PHP Object Injection Vulnerabilities
  ☆95Updated last year
• Song-Li / ODGen
  ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.
  ☆153Updated last year
• pixelindigo / yurascanner
  YuraScanner
  ☆44Updated 4 months ago
• zifeng-kang / ProbetheProto
  ☆28Updated 2 years ago
• SoheilKhodayari / DOMClobbering
  DOM Clobbering Wiki, Browser Testing, and Payload Generation
  ☆53Updated 2 months ago
• bahruzjabiyev / frameshifter
  Grammar-based HTTP/2 fuzzer with mutation ability
  ☆46Updated 2 years ago
• bahruzjabiyev / t-reqs
  Grammar-based HTTP/1 fuzzer with mutation ability
  ☆251Updated 7 months ago
• jackfromeast / TheHulk
  TheHulk is a dynamic analysis tool designed to detect and exploit DOM Clobbering vulnerabilities.
  ☆29Updated last month
• GCMiner / GCMiner
  Artifact for ICSE 2023
  ☆49Updated 2 years ago
• SAP / project-foxhound
  A web browser with dynamic data-flow tracking enabled in the Javascript engine and DOM, based on Mozilla Firefox (https://github.com/mozi…
  ☆110Updated last week
• cristianstaicu / SecBench.js
  ☆31Updated 8 months ago
• GitHubSecurityLab / codeql-zero-to-hero
  CodeQL zero to hero blog post series challenges
  ☆125Updated 6 months ago
• s3c2 / UntrustIDE
  A framework for identifying vulnerabilities in VS Code extensions
  ☆18Updated 11 months ago
• SecuringWeb / BlackWidow
  ☆48Updated 2 years ago
• Song-Li / ObjLupAnsys
  ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…
  ☆24Updated 3 years ago
• shhnjk / cursed_types
  List of Trusted Types bypasses
  ☆93Updated last year
• Philesiv / XSLeaker
  Searcher for cross-site leaks (XS-Leaks)
  ☆82Updated 2 years ago
• wrmelicher / ChromiumTaintTracking
  ☆19Updated 6 years ago
• bahruzjabiyev / gudifu-fuzzer
  Guided Differential Fuzzing for HTTP Request Parsing Discrepancies
  ☆17Updated last year
• KTH-LangSec / server-side-prototype-pollution
  A collection of Server-Side Prototype Pollution gadgets and exploits
  ☆190Updated 4 months ago
• RUB-NDS / xsinator.com
  XS-Leak Browser Test Suite
  ☆81Updated last year
• xbow-engineering / validation-benchmarks
  XBOW Validation Benchmarks
  ☆104Updated last week
• u21h2 / AutoSpear
  AutoSpear
  ☆62Updated last year
• fast-sp-2023 / fast
  ☆29Updated last month
• msrkp / MXSS
  Awesome MXSS ??
  ☆52Updated 8 months ago