Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

A container repository for my public web hacks!

Awesome Object Capabilities and Capability Security

JavaScript library for building web-based applications that employ secure multi-party computation (MPC).

Mike North's Web Security Course

CS 253 Web Security course at Stanford University

Runs the default Google Lighthouse tests with additional security tests

A web browser with dynamic data-flow tracking enabled in the Javascript engine and DOM, based on Mozilla Firefox (https://github.com/mozilla-firefox/firefox). It can be used to identify insecure data flows or data privacy leaks in client-side web applications.

CLI component of OWASP PurpleTeam

Advanced browser extension for detecting anti-bot solutions, CAPTCHA services, and web security mechanisms. Identifies 26+ services including Cloudflare, reCAPTCHA, DataDome, PerimeterX & more with confidence scoring.

HTTPS Frontend Hijack

HTTP Cache Poisoning Demo

DOM Clobbering Wiki, Browser Testing, and Payload Generation

Password scoring library written in Javascript.

JSSCM detects expired domains for Stored XSS exploitation during browsing.

Safeguard your online experience with Anti-Phishing Extension! This extension is meticulously developed to protect users from potential phishing attacks by actively scanning the websites visited in real-time. It employs an updated blacklist to cross-check each website and promptly alerts users if a potential threat is detected, enhancing

XSSB is a proactive DOM sanitizer, defending against client-side injection attacks!

collectvars collects JavaScript variables, highlights risky ones, and helps you understand code structure, while you casually browse.

A definitely (read: not) secure online banking site. Built for demo purposes as an example of common security vulnerabilities / what NOT to do.