Alternatives and similar repositories for JAW:

Users that are interested in JAW are comparing it to the libraries listed below

• SoheilKhodayari / TheThing
  TheThing: an open-source tool to detect DOM Clobbering vulnerabilities
  ☆45Updated last year
• testable-eu / sast-testability-patterns
  Testability Pattern Catalogs for SAST
  ☆30Updated 2 months ago
• KTH-LangSec / silent-spring
  Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js
  ☆64Updated last year
• pixelindigo / yurascanner
  YuraScanner
  ☆38Updated 2 months ago
• WSP-LAB / FUGIO
  FUGIO: Automatic Exploit Generation for PHP Object Injection Vulnerabilities
  ☆95Updated last year
• SoheilKhodayari / DOMClobbering
  DOM Clobbering Wiki, Browser Testing, and Payload Generation
  ☆49Updated 5 months ago
• Aurore54F / DoubleX
  Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale
  ☆74Updated 3 years ago
• s3c2 / UntrustIDE
  A framework for identifying vulnerabilities in VS Code extensions
  ☆17Updated 9 months ago
• bahruzjabiyev / frameshifter
  Grammar-based HTTP/2 fuzzer with mutation ability
  ☆43Updated 2 years ago
• RUB-NDS / xsinator.com
  XS-Leak Browser Test Suite
  ☆80Updated last year
• Philesiv / XSLeaker
  Searcher for cross-site leaks (XS-Leaks)
  ☆81Updated 2 years ago
• GCMiner / GCMiner
  Artifact for ICSE 2023
  ☆49Updated 2 years ago
• shhnjk / cursed_types
  List of Trusted Types bypasses
  ☆92Updated last year
• SecuringWeb / BlackWidow
  ☆48Updated last year
• zifeng-kang / ProbetheProto
  ☆28Updated 2 years ago
• Song-Li / ODGen
  ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.
  ☆154Updated last year
• msrkp / MXSS
  Awesome MXSS ??
  ☆49Updated 6 months ago
• KTH-LangSec / server-side-prototype-pollution
  A collection of Server-Side Prototype Pollution gadgets and exploits
  ☆183Updated 2 months ago
• bahruzjabiyev / t-reqs
  Grammar-based HTTP/1 fuzzer with mutation ability
  ☆250Updated 5 months ago
• SAP / project-foxhound
  A web browser with dynamic data-flow tracking enabled in the Javascript engine and DOM, based on Mozilla Firefox (https://github.com/mozi…
  ☆93Updated 2 weeks ago
• wrmelicher / ChromiumTaintTracking
  ☆17Updated 6 years ago
• Broken-Assumptions / EDEFuzz
  ☆19Updated last week
• Song-Li / ObjLupAnsys
  ObjLupAnsys is a tool to detect prototype pollution vulnerabilities in Node.js packages. This project is written in Python and JavaScript…
  ☆23Updated 3 years ago
• sefcom / Witcher
  Witcher is the first framework for using AFL to fuzz web applications.
  ☆85Updated last year
• xbow-engineering / validation-benchmarks
  XBOW Validation Benchmarks
  ☆84Updated 7 months ago
• Aurore54F / JStap
  Modular static malicious JavaScript detection system
  ☆69Updated 4 years ago
• justcatthefish / ctf-writeups
  CTF write-ups
  ☆82Updated 4 months ago
• cristianstaicu / SecBench.js
  ☆31Updated 6 months ago
• bahruzjabiyev / gudifu-fuzzer
  Guided Differential Fuzzing for HTTP Request Parsing Discrepancies
  ☆17Updated last year
• pbrucla / fuzzing-lab
  🐛 UCLA ACM Cyber's Fuzzing Lab
  ☆81Updated 3 months ago