doyensec / awesome-electronjs-hackingLinks
A curated list of awesome resources about Electron.js (in)security
☆638Updated 2 months ago
Alternatives and similar repositories for awesome-electronjs-hacking
Users that are interested in awesome-electronjs-hacking are comparing it to the libraries listed below
Sorting:
- ☆685Updated 3 years ago
- ☆1,191Updated 2 years ago
- Prototype Pollution and useful Script Gadgets☆1,513Updated last year
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆884Updated 3 years ago
- Content-Type Research☆627Updated last month
- Client Side Prototype Pollution Scanner☆519Updated 2 years ago
- A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon☆1,199Updated last year
- Issues with WebSocket reverse proxying allowing to smuggle HTTP requests☆373Updated 11 months ago
- List DTDs and generate XXE payloads using those local DTDs.☆634Updated last year
- This repository contains all the XSS cheatsheet data to allow contributions from the community.☆432Updated 3 weeks ago
- HTTP Request Smuggling over HTTP/2 Cleartext (h2c)☆745Updated 3 years ago
- A cheatsheet for exploiting server-side SVG processors.☆750Updated 5 years ago
- Electron JS Browser To Find XSS Vulnerabilities Automatically☆706Updated 4 years ago
- A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀☆631Updated 2 years ago
- ☆548Updated 4 months ago
- NodeJS Red-Team Cheat Sheet☆220Updated 6 years ago
- ☆695Updated 8 months ago
- Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hac…☆993Updated 3 weeks ago
- Collections of Orange Tsai's public presentation slides.☆737Updated 7 months ago
- A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.☆720Updated last year
- A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…☆983Updated last year
- NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.☆388Updated 3 years ago
- A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)☆632Updated last year
- List of XSS Vectors/Payloads☆1,244Updated 7 months ago
- vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.☆318Updated last year
- This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack☆733Updated last year
- This repository contains various media files for known attacks on web applications processing media files. Useful for penetration tests a…☆337Updated 4 years ago
- ☆1,007Updated 3 years ago
- A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.☆511Updated 3 years ago
- a javascript change monitoring tool for bugbounties☆656Updated last year