A curated list of awesome browser security learning material.
☆154Nov 20, 2022Updated 3 years ago
Alternatives and similar repositories for awesome-browser-security
Users that are interested in awesome-browser-security are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Resources for Browser Security Research☆59Sep 17, 2022Updated 3 years ago
- rShellZ s a linux reverse-shell & exploitation assistance framework. With lots of payload and post exploitation modules.☆13Dec 13, 2023Updated 2 years ago
- Security test tool for Blind XSS☆27Mar 5, 2020Updated 6 years ago
- Awesome information for WebSockets security research☆310Jan 10, 2022Updated 4 years ago
- ☆17Jan 31, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Simple Kernel Extension to read and write Kernel Memory☆15Aug 18, 2022Updated 3 years ago
- 2019年天融信阿尔法实验室在微信公众号发布的所有安全资讯汇总☆37Jan 11, 2021Updated 5 years ago
- An updated collection of resources targeting browser-exploitation.☆833Mar 8, 2021Updated 5 years ago
- An extension to use Semgrep inside Burp Suite.☆90May 23, 2025Updated last year
- Top 2025 Vulnerabilities You Shouldn’t Accept in a Pentest Report☆14Feb 6, 2025Updated last year
- Hands-on practical use of HTTP security headers as browser security controls to help secure web applications☆22Jun 14, 2026Updated last month
- ☆11Dec 26, 2023Updated 2 years ago
- awesome list of browser exploitation tutorials☆2,289Sep 18, 2023Updated 2 years ago
- QUESTER is a Web Pentesting & Bug Bounty Recon tool which queries URLs / Subdomains from the given list of URLs or subdomains.☆15Aug 2, 2021Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Electron-Probe leverages the Node variant of the Chrome Debugging Protocol to execute JavaScript payloads inside of target Electron appli…☆29Jan 13, 2026Updated 6 months ago
- Provides an overview of the inner file structure of a PDF☆24Sep 26, 2022Updated 3 years ago
- Semgrep-based Policy Controller for Kubernetes☆47Apr 4, 2025Updated last year
- ☆45Nov 18, 2022Updated 3 years ago
- A collection of curated resources and CVEs I use for research.☆109Aug 8, 2021Updated 4 years ago
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆139Sep 14, 2021Updated 4 years ago
- ☆12Jul 19, 2026Updated last week
- oauth security guidelines☆232Jun 25, 2019Updated 7 years ago
- Automate bug bounty recon using bash alias☆15Aug 6, 2024Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- POC for CLFS CVE-2022-24481☆14May 14, 2023Updated 3 years ago
- ☆35Apr 14, 2025Updated last year
- Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode☆19Aug 11, 2023Updated 2 years ago
- A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon☆1,330Jan 26, 2024Updated 2 years ago
- CVE-2021-38003 exploits extracted from https://twitter.com/WhichbufferArda/status/1609604183535284224☆37Jan 7, 2023Updated 3 years ago
- ☆61May 19, 2022Updated 4 years ago
- Exploit for the [pwn] just-in-time challenge from google ctf 2018's finals (TurboFan bug)☆60Jan 26, 2019Updated 7 years ago
- WebGL fuzzer☆39Mar 13, 2023Updated 3 years ago
- ☆19Dec 9, 2022Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Jan 18, 2022Updated 4 years ago
- ☆78Mar 24, 2023Updated 3 years ago
- A mini bytecode Interpreter for v8.☆23Nov 14, 2022Updated 3 years ago
- A collection of widely-fuzzed targets☆45Aug 4, 2019Updated 6 years ago
- Collection of browser challenges☆138May 3, 2021Updated 5 years ago
- Security issues I've reported in Edge☆47Oct 19, 2022Updated 3 years ago
- Cobalt Strike 的 CVE-2024-35250 的 BOF。(请给我加个星，谢谢。)☆13Oct 21, 2024Updated last year