Open highlighted repo slot
Put your repository first
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
Awesome List
🐶 A curated list of Web Security materials and resources.
GitHub stars and default-branch commits for qazbnm456/awesome-web-security.
Open highlighted repo slot
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
A collection of JavaScript engine CVEs with PoCs
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
🔪Browser logic vulnerabilities :skull_and_crossbones:
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
Your users download a 4GB AI model, the connection drops at 3.8GB, verifyfetch resumes from 3.8GB and verifies every byte. Drop-in integrity verification for Transformers.js, WebLLM, and any large file in the browser.