domdig

DOMDig DOMDig es un escáner de DOM XSS que se ejecuta dentro del navegador web Chromium y puede escanear aplicaciones de página única SPA de forma recursiva. A diferencia de otros escáneres, DOMDig puede rastrear cualquier aplicación web incluyendo gmail manteniendo un registro de las...

fortress

One browser engine to rule them all Stealth Chromium engine · v3 Chromium 153 Fortress is a Chromium fork that stops scrapers and browser agents from getting blocked. Bot detectors flag automation by reading the browser fingerprint. Fortress corrects that fingerprint inside Chromium's C++, so the...

webscreenshot

webscreenshot Descripción Un script sencillo para capturar pantallas de una lista de sitios web, basado en el script url-to-image de PhantomJS. Características Integración del 'renderizado diferido' de url-to-image para recursos AJAX Funciona completamente en sistemas Windows y Linux Soporte de...

chromepass

Chromepass - Hackeando contraseñas y cookies guardadas de Chrome Ver demo · Reportar error · Solicitar función Tabla de contenido Acerca del proyecto Detección AV Primeros pasos Requisitos previos Instalación Uso Correo electrónico Errores, fallos y solicitudes de funciones Más información Licenc...

sniffly

Sniffly2 Sniffly2 es una variante de Sniffly que abusa de las cabeceras HTTP Strict Transport Security y de la API de Performance Timing para olfatear tu historial de navegación en navegadores basados en Chromium. Demo Visita http://diracdeltas.github.io/sniffly en Chrome/Chromium/Brave/etc. con...

CVE-2020-16012-PoC

CVE-2020-16012 | Side Channel Attack This repository contains Proofs of Concept PoCs for CVE-2020-16012 , a side-channel vulnerability identified in the implementation of CanvasRenderingContext2D.drawImage in Firefox and Chromium. This project was conducted as a collaborative effort by a team of...

CVE-2023-3079

Exploit for CVE-2023-3079 Shoutout to @clem1 for finding the ITW exploit. Shoutout to @alisaesage for her prior RCA on the bug. Shoutout to @buptsb for his notes on the bug. Resources Writeups and other resources. https://issues.chromium.org/issues/40065138...

wappalyzer-next

Wappalyzer Next Questo progetto è uno strumento da riga di comando e una libreria Python che utilizza l'estensione del browser Wappalyzer e le sue impronte digitali per rilevare le tecnologie. Altri progetti nati dopo la sospensione del progetto open source ufficiale utilizzano impronte digitali...

playwright

🎭 Playwright Documentation | API reference Playwright is a framework for web automation and testing. It drives Chromium, Firefox, and WebKit with a single API — in your tests, in your scripts, and as a tool for AI agents. Get Started Choose the path that fits your workflow: | Best for| Install...

CVE-2023-2033-Analysis

CVE-2023-2033-Analysis The full bug report has been published: https://bugs.chromium.org/p/chromium/issues/detail?id=1432210 Using this repository to organize information on CVE-2023-2033. If you found this resource helpful or have any job opportunities in security for me, please reach out!...

ppmap

ppmap Una herramienta sencilla de escaneo/explotación escrita en GO que explota automáticamente gadgets conocidos y existentes busca variables específicas en el contexto global para realizar XSS mediante Prototype Pollution. NOTA: El programa solo explota gadgets conocidos, pero no cubre análisis...

chlonium

Chlonium Chlonium es una aplicación diseñada para clonar cookies de Chromium. A partir de Chromium 80 y superiores, las cookies se cifran usando AES-256 GCM, con una clave de estado que se almacena en el archivo Local State. Esta clave de estado está cifrada mediante DPAPI. Esto es un cambio...

boringssl

BoringSSL BoringSSL è un fork di OpenSSL progettato per soddisfare le esigenze di Google. Anche se BoringSSL è un progetto open source, non è pensato per l'uso generale, come lo è OpenSSL. Non consigliamo a terze parti di farne affidamento. Farlo probabilmente sarà frustrante perché non ci sono...

hpim-training-lab

hpim-training-lab HPIM Training-Case Replication Lab Citable release Zenodo: DOI 10.5281/zenodo.22868247 — license CC-BY 4.0. This repository contains a fully containerized replication of the training scenario described in OpenAI's official technical report on the Hugging Face incident, used to...

selenium-stealth

selenium-stealth A python package selenium-stealth to prevent detection. This programme is trying to make python selenium more stealthy. As of now selenium-stealth only support Selenium Chrome/Chromium. After using selenium-stealth you can prevent almost all selenium detections. There is a lot of...

CVE-2026-5281

CVE-2026-5281 2026/06/27：Esta vulnerabilidad ha sido divulgada públicamente. Aunque los puntos de parche difieren, el enfoque general y la ruta de activación son completamente idénticos a los de mi PoC. Chromium commit commit e00a64ead1abef9447943efede7bc26362ac3797 HEAD - 146.0.7680.71, tag:...

CVE-2017-15394

CVE-2017-15394 A URL spoofing flaw has been found in the extensions UI of the Chromium browser 62.0.3202.62. An IDN homograph attack demo in Chromium through extensions. 1. Load unpacked extension into Chrome 2. View extension details and observe lack of punycode Impact An attacker would leverage...

CVE-2019-5825

Chrome exploit for 73.0.3683.86 --no-sandbox V8 version 6.9.0 https://github.com/exodusintel/Chromium-941743 https://lordofpwn.kr/cve-2019-5825-v8-exploit/ https://github.com/rapid7/metasploit-framework/pull/12574/files...

CVE-2020-6468-PoC

CVE-2020-6468-PoC for 供養 sandbox exploit is not included PoC Environment OS: Ubuntu 18.04 LTS 64-bit Chromium: Version 81.0.4044.92 Developer Build 64-bit flags: --no-sandbox --single-process --disable-gpu References https://bugs.chromium.org/p/chromium/issues/detail?id=1076708...

Firefox-ANGLE-CVE-2024-0741

Fixed in Firefox 123. Fix: https://source.chromium.org/chromium//chromium/angle/angle/+/f8fae1ff4fae14fc6ba0aa1dc3af2e13a6e9a597. Cherry-pick: https://github.com/mozilla/angle/commit/ddaf44ac75d5d0390873c2af193e02159ecbe672...