ExifSmugglingPoC

Exif Smuggling A Proof-of-Concept evolution of Cache Smuggling. This attack conceals an executable payload inside a JPG's Exif data. As a result, image caching such as that of a Web Browser can be used to passively download the payload. As a result, the example loader chromepoc.ps1 does not need ...

sniffly

Sniffly2 Sniffly2 is a variant of Sniffly which abuses HTTP Strict Transport Security headers and the Performance Timing API in order to sniff your browsing history in Chromium-based browsers. Demo Visit http://diracdeltas.github.io/sniffly in Chrome/Chromium/Brave/etc. with HTTPS Everywhere...

Malware-Exhibit

⚠️⚠️ Malware-Exhibit ⚠️⚠️ Docker - Usage and Importance Pull the docker image In Information, do not use this repository on your own computer or clone the repository and build the dockerfile on your down computer To run the image use ie: ---docker run --name -it...

reverse-engineering-browser

Build organization Run make from the repository root. The root Makefile defines the default goal and includes these files in order: File| Responsibility ---|--- config.mk| Compiler flags, build directories, source lists for lint, platform defaults native.mk| Explicit native link dependencies,...

clients

Bitwarden Client Applications This repository houses all Bitwarden client applications except the mobile applications iOS | android. Please refer to the Clients section of the Contributing Documentation for build instructions, recommended tooling, code style tips, and lots of other great...

warpgate

Warpgate is a smart & fully transparent SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC bastion host that doesn't require a client app or an SSH wrapper. Set it up in your DMZ, add user accounts and easily assign them to specific hosts and URLs within the network. Warpgate will record ever...

Browser-Exploits

Browser-Exploits Some Generic Browser Exploits For Educational Purposes Only...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say sudo dnf install tcpflo...

CVE-2021-30551

CVE-2021-30551 My exp for chrome V8 CVE-2021-30551 You can found your chrome version by chrome://version or go to http://whatsmyuseragent.org/ You can set up a webserver locally using python like: python3 -m http.server 8080 And the test it by accessing http://127.0.0.1:8080 reference google...

peeko

peeko Version: v1.1 peeko is a browser-based XSS-powered C2 Command and Control tool that leverages the victim’s browser as a stealthy proxy inside internal networks. Through an injected XSS payload, peeko establishes a WebSocket connection to a central server, allowing an attacker to remotely...

WebHackersWeapons

A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hunting! Family project Table of Contents Weapons Tools Bookmarklets Browser Addons Burpsuite, Caido and ZAP Addons Contribute Thanks to contributor Weapons Attributes | Attributes ---|--- Types| Army-Knife Proxy Recon...

ai-captcha-bypass

AI-Powered CAPTCHA Solver This project is a Python-based command-line tool that uses large multimodal models LMMs like OpenAI's GPT-4o and Google's Gemini to automatically solve various types of CAPTCHAs. It leverages Selenium for web browser automation to interact with web pages and solve CAPTCH...

rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...

privacytests

PrivacyTests PrivacyTests is an open-source testing program that measures browser privacy characteristics, and a website, https://privacytests.org, that renders the results for human consumption. PrivacyTests uses the MIT license. aioquic: a submodule with a fork of the aioquic project for...

henkaku

Build Only Linux is supported. You will need: Python 3 Vita SDK Uglify JS Ubuntu 16.04 package node-uglify tested version 2.4.15 Other standard tools that you should already have installed, such as openssl, dd, cat, touch All tools should be in your PATH. Run ./build.sh to build everything. This...

Gotanda

Gotanda Gotanda is OSINTOpen Source Intelligence Web Extension for Firefox/Chrome. This Web Extension could search OSINT information from some IOC in web page.IP,Domain,URL,SNS...etc This Repository partly the studying and JavaScript practice. Download link below. FireFox Chrome Usage Right click...

s3cXSSer

s3cXSSer This extension will help you to detect GET/POST based XSS vulnerability in any website easily , S3C - XSSER - Chrome extension How to add it to chrome or brave browser 1- Go to brave://extensions/ or chrome://extensions/ 2- enable Developer mode and click Load unpacked 3- locate the fold...

CVE-2025-24963

CVE-2025-24963 - Vitest Browser Mode - Local File Read ​CVE-2025-24963 is a medium-severity vulnerability CVSS 3.1 score: 5.9 affecting the @vitest/browser package, a component of the Vitest testing framework powered by Vite. This vulnerability arises from improper input validation in the...

crawlergo

crawlergo A powerful browser crawler for web vulnerability scanners English Document | 中文文档 crawlergo is a browser crawler that uses chrome headless mode for URL collection. It hooks key positions of the whole web page with DOM rendering stage, automatically fills and submits forms, with...

OmniSec-Hex

🛡️ OmniSec-Hex OmniSec-Hex is an advanced, high-impact cybersecurity monorepo consolidating six powerhouse client-side security and sovereign intelligence workbanks. Operating entirely within browser-local memory environments with absolute data lockdown, this ecosystem delivers cross-vertical...