hackvertor / MentalJS
JavaScript parser and sandbox
☆79Updated 8 years ago
Alternatives and similar repositories for MentalJS:
Users that are interested in MentalJS are comparing it to the libraries listed below
- Discussion area for security aspects of ECMAScript☆64Updated 7 years ago
- [DEPRECATED] Static analysis tool for javascript code.☆428Updated 3 years ago
- This is a tiny Chrome Extension that protects your from Clipboard XSS Attacks☆19Updated 10 years ago
- rules for scanjs functionality☆28Updated 3 years ago
- A dashboard for interesting DOM tricks/techniques.☆36Updated 4 years ago
- timing attack to check if devtools are open☆52Updated 8 years ago
- jPurify☆66Updated 8 years ago
- Static analysis tool for javascript code based. Scanjs uses Esprima to convert sources to AST, then walks AST looking for patterns.☆54Updated 10 years ago
- Make it easy to probe the strengths and weaknesses of a hardened Node.js stack☆19Updated 5 years ago
- Debug your express app using the Chrome console.☆83Updated 9 years ago
- SSRF Protection Library for PHP - http://safecurl.fin1te.net☆73Updated last year
- umbrella config to achieve scanjs-like functionality through eslint☆88Updated 3 years ago
- Extracting server private key using Heartbleed OpenSSL vulnerability.☆393Updated 10 years ago
- Problem statement and basic mitigations for ephemeral fingerprinting on the web.☆21Updated 4 years ago
- ☆22Updated 9 years ago
- Hijack clicks on and within links, probably for client-side routing☆42Updated 4 years ago
- Write JavaScript alert(1) with Katakana characters only☆144Updated 7 years ago
- Time Trial - A tool for performing feasibility analyses of timing attacks☆83Updated 10 years ago
- Test Suite and exemplary extensions of the "Attacking Browser Extensions" master's thesis☆28Updated 8 years ago
- Miscellaneous☆20Updated 6 years ago
- Parse Content Security Policy headers, warn about policy errors, safely manipulate, render, and optimise policies☆72Updated 7 months ago
- A javascript module for Unicode Confusables☆26Updated 9 years ago
- A regular expression for most valid domains (including the latest TLDs)☆39Updated 10 years ago
- ☆198Updated 9 years ago
- A tool for manipulating SWF files, leveraging zlib to craft alphanumeric-only valid SWF files in order to allow CSRF with SOP bypass than…☆110Updated last year
- An example of obtaining RCE via Redis and CSRF☆76Updated 8 years ago
- Fast browser-based network discovery module☆114Updated 3 years ago
- ☆61Updated 7 years ago
- An SSRF-preventing wrapper around Node's request module☆26Updated 6 years ago
- Suborigins☆25Updated 4 years ago