CWE-602 客户端鉴权脆弱性白盒审计方法论与纵深防御加固研究框架
Understand Software. Architecture intelligence + client-side security for any web app, right in your browser. Local-first Chrome (MV3) extension.
An educational phishing simulation login page demonstrating how fake UIs capture user credentials. It logs inputs, stores them locally, and emails the captured data for awareness training. Intended strictly for controlled, ethical use to teach URL verification and phishing prevention.
Some Generic Browser Exploits (For Educational Purposes Only)
Next.js code obfuscation setup using webpack-obfuscator – secure and protect your production builds.
The EyalSec browser for security testing. Browse the web app you are testing and it reports DOM-XSS flows that really happened in the page: the source (URL, postMessage, storage, cookies), the sink, and the attacker-controlled characters. Linux x86_64.
Format and compress photos, signatures, and documents to exact government, visa, and exam portal requirements. Runs 100% in your browser — nothing ever leaves your device.
Unpacked Telegram web app for research.
The 'CyberGuard' delivers a modular, multi-layer security system for modern web applications. It bundles client-side anomaly detection, DDoS-Guard, DOM protection, input shielding, service-worker hardening and UI blackout controls into one compact package.
Vollständige Webanwendung für OpenPGP-Verschlüsselung, basierend auf React, TypeScript und openpgp.js.
PhantomPath is a client-side utility designed to demonstrate various techniques used to structurally obfuscate URLs. In the field of cybersecurity, understanding how an attacker can mask a malicious destination is crucial for developing robust defense mechanisms and training users in link analysis.
ClientVault is a lightweight, in-page web security tool that lets you inspect, analyze, and manage all client-side storage used by a website — including cookies, localStorage, sessionStorage, and more. Built for developers, pentesters, and bug bounty hunters.
SMUGGLR is a browser-based Unicode steganography and text obfuscation toolkit for experimenting with invisible characters, homoglyphs, whitespace ciphers, and Unicode-based payload hiding techniques — all fully client-side with zero network calls. 🔓
EntropyKey is a web application that generates unique and secure tokens using your device's camera. The randomness in the video feed helps create unpredictable tokens, making them suitable for passwords or other secure identifiers.
Bounded served-HTML script inventory for PCI payment pages. Fail CI on observed hosts outside your authorization list.
A zero-overhead client-side HTTPS enforcer module for Lydia CMS v1.0. Intercepts authorization events, prevents plain-text data leaks over HTTP, and includes automated multilingual test suites.
Proof of Concept (PoC) demonstrating Clickjacking vulnerability risks on the CEX.IO profile page. Web security research and UI/UX vulnerability analysis.
GlanceX is a 100% privacy-first, client-side directory search engine for Excel/CSV sheets. Fast search, offline-capable, and secured with zero-network tracking.
Website proptection tool beyond a captcha solver. Lightweight JavaScript site protection library that secures forms without traditional CAPTCHA challenges. Advanced client-side site protection tool that goes beyond traditional CAPTCHA by preventing automated form abuse and bot submissions.
SE·EMU is a browser-based social engineering simulation designed to help cybersecurity learners understand and practice the human side of offensive security.
To associate your repository with the client-side-security topic, visit your repo's landing page and select "manage topics."