Code for our 2023 IEEE S&P Paper "The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web"
☆16Jul 16, 2026Updated 3 months ago
Alternatives and similar repositories for xs-observations
Users that are interested in xs-observations are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Find XS-Leaks in the browser by diffing DOM-Graphs in two states☆20Jun 24, 2026Updated 4 months ago
- ☆51Aug 2, 2025Updated last year
- XS-Leak Browser Test Suite☆88Oct 25, 2026Updated last week
- ☆13Jun 29, 2026Updated 4 months ago
- A proposal to partition :visited link history by top-level site and frame origin.☆65May 22, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- No longer maintained. Timing attacks on a browsers cache to try to predict websites/subreddits that have been viewed☆13Sep 25, 2026Updated last month
- A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon☆16Jul 17, 2024Updated 2 years ago
- Turning Your Computer Into a GPS Tracker With Apple Maps☆18Feb 6, 2024Updated 2 years ago
- Leakuidator+ helps users to protect themselves against cross-site leaks, a class of vulnerabilities derived from side-channels built into…☆12Jun 19, 2022Updated 4 years ago
- Extension to log postMessage()☆17Feb 17, 2026Updated 8 months ago
- Differential fuzzer that finds HTTP parser discrepancies across 54 servers to uncover request-smuggling primitives.☆12Sep 12, 2026Updated last month
- Scanner and attack suite for hosts that forward unauthenticated packets via IPIP and GRE protocols. (CVE-2020-10136 CVE-2024-7595)☆12Jan 22, 2025Updated last year
- ☆23Apr 9, 2024Updated 2 years ago
- DOM Clobbering Wiki, Browser Testing, and Payload Generation☆61Dec 18, 2025Updated 10 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- XS-Leaks Wiki☆186Mar 13, 2026Updated 7 months ago
- A simple CTF platform in a single binary☆11Jun 21, 2020Updated 6 years ago
- Most Powerful Open Source Bypasser Tool for Bypass 4XX Status code☆14Mar 16, 2026Updated 7 months ago
- ☆14Dec 25, 2024Updated last year
- Puppeteer based crawler to measure email and password exfiltration☆27Jan 7, 2026Updated 9 months ago
- Experiments with Google Gemini's Vision capabilities for LLM driven/aided web navigation and desktop manipulation☆30Jan 22, 2025Updated last year
- Farm-to-table, organic, handcrafted, delicious Webassembly☆15Dec 7, 2021Updated 4 years ago
- The PoCs source code for the "Java(Script) Drive-By, Hacking Without 0days" blog post.☆11Nov 1, 2024Updated 2 years ago
- Curso realizado por Ricardo Narvaja de CrackLatinos (Mirror) http://ricardonarvaja.info☆12May 28, 2018Updated 8 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, c…☆35Aug 18, 2026Updated 2 months ago
- Skip youtube video sponsors (chrome extension)☆25Apr 28, 2021Updated 5 years ago
- CLP Principles by the Liquid Legal Institute☆12Apr 12, 2021Updated 5 years ago
- TheHulk is a dynamic analysis tool designed to detect and exploit DOM Clobbering vulnerabilities.☆93Oct 18, 2026Updated 2 weeks ago
- A first look at browser-based Cryptojacking☆17Jun 7, 2018Updated 8 years ago
- An python script that use apkleaks to scan the android application over web☆11Jun 2, 2022Updated 4 years ago
- A dashboard for Google Wi-Fi, using the google-wifi-api-node wrapper.☆11Dec 1, 2021Updated 4 years ago
- [ACL 2024] On the Multi-turn Instruction Following for Conversational Web Agents☆17Oct 12, 2024Updated 2 years ago
- *Heavy WIP* Proxied server/sector synchronization network for Minecraft 1.7-1.15 based on Redis☆22Jun 23, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- The Tangled Genealogy of IoT Malware☆12Jan 5, 2021Updated 5 years ago
- ☆35Jan 31, 2026Updated 9 months ago
- Telegram decoder plugin used by IPED project☆13Oct 23, 2026Updated last week
- Automatically register GSF ID with google☆13Jan 4, 2019Updated 7 years ago
- Reconstruct files from QR-code video data☆24Feb 15, 2018Updated 8 years ago
- WebTestPilot: Agentic End-to-End Web Testing against Natural Language Specification by Inferring Oracles with Symbolized GUI Elements☆17Oct 1, 2026Updated last month
- Enumerate Employees through OneDrive and Teams☆15Dec 15, 2025Updated 10 months ago